Upgrading from ASA 7.2 -> 8.0. L2L IPSEC Issues...

pavlosd · ‎02-19-2008

Hi All,

We just recently upgrading one ASA firewall to version 8, for evaluation purposes. Upgrade was straight forward with no errors. Most of the existing rules are working fine. We do noticed a problem with most of our L2L IPsecs. We cannot get them working, configuration is there and migrated OK. they are kept stack in MM_WAIT_DELETE and log shows....

%ASA-3-713902: Group = 10.50.133.175, IP = 10.50.133.175, QM FSM error (P2 struct &0xc9080ba0, mess id 0x513c9acd)!

%ASA-3-713902: Group = 10.50.133.175, IP = 10.50.133.175, Removing peer from correlator table failed, no match!

We did try to delete a few and recreate them, but no luck....

Any ideas????

pavlosd · ‎02-26-2008

Hi All,

Just to let you know that, we managed to solve our problem by upgrading to interim release 8.0(3)-6.

Regards.

ssteichmann · ‎02-28-2008

As an FYI, we had a similar issue yesterday after going to 7.2(2). There are previous posts that mention this, but the solution for us was here:

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml#Solution8