mm_no_state problems

Unanswered Question
Nov 8th, 2007

I have a VPN that frequently enters the state "mm_no_state" and we are forced to clear down the ipsec connection and/or reload the firewall.

Does anyone know why this keeps happening? The VPN works fine 90% of the time but frequently drops to mm_no_state.

What should I check? What could the problem be? Any help or advice would be helpful.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ivillegas Wed, 11/14/2007 - 13:48

Make sure the access list is configured properly not to block the connection. Also check for the shared keys used. Change the key( keep it as simple as possible )and see if this happens.

mikedelafield Thu, 11/15/2007 - 03:55


The thing is VPN works okay most of the time. But occassionally drops to MM_NO_STATE and does not recover without 'clear isakmp sa' command.

I think the problem may be related to SA lifetime settings? Does anyone agree with this theory?

m-ketchum Thu, 11/15/2007 - 23:29

What hardware are you using. I have a couple ASA 5505's doing weird stuff like this...the VPN could work for days and then drop and not recover, but the remote site still has Internet connectivity and can even ping the headend, but the VPN just won't recover until you reboot the remote 5505. I can't confirm that it is the same issue as you because I am not on site and can only get in via the VPN....when its up.

attrgautam Fri, 11/16/2007 - 01:38

Just crypto isakmp keepalive 10 on both sides and check if this continues to happen


This Discussion