Greetings we are running a Cisco ASA 5510 with 8.0.3(19) code and have several site to site vpn connections for various partner access.
One partner is using a Watchguard x550e, the site to site tunnel is configured as follows:
IKE Phase 1: 3Des/Sha/DH Group 2
IKE Phase 2: 3Des/Sha/DH Group 2
IKE is using aggressive mode and PFS has been disabled.
The VPN establishes just fine and stays up for the set SA Lifetime being the default of 8 hours, but when the 8 hour limit is reached the VPN drops out and cannot re-key and re-establish the connection, in order to get the connection back up the link has to be torn down at one end and re-created manually.
This is what happens after the 8 hour period.
Group = 188.8.131.52, IP = 184.108.40.206, Received non-routine Notify message: Payload malformed (16)
Group = 220.127.116.11, IP = 18.104.22.168, De-queuing KEY-ACQUIRE messages that were left pending.
IP = 22.214.171.124, Keep-alives configured on but peer does not support keep-alives (type = None)
Group = 126.96.36.199, IP = 188.8.131.52, PHASE 1 COMPLETED
AAA retrieved default group policy (DfltGrpPolicy) for user = 184.108.40.206
Group = 220.127.116.11, IP = 18.104.22.168, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end is NOT behind a NAT device
IP = 22.214.171.124, Queuing KEY-ACQUIRE messages to be processed when P1 SA is complete.
IP = 126.96.36.199, IKE Initiator: New Phase 1, Intf inside, IKE Peer 188.8.131.52 local Proxy Address 172.18.17.0, remote Proxy Address 192.168.0.0, Crypto map (OutsideMap)
Group = 184.108.40.206, Username = 220.127.116.11, IP = 18.104.22.168, Session disconnected. Session Type: IKE, Duration: 0h:00m:32s, Bytes xmt: 0, Bytes rcv: 0, Reason: Phase 2 Error
Group = 22.214.171.124, IP = 126.96.36.199, Removing peer from correlator table failed, no match!
Group = 188.8.131.52, IP = 184.108.40.206, construct_ipsec_delete(): No SPI to identify Phase 2 SA!
Group = 220.127.116.11, IP = 18.104.22.168, QM FSM error (P2 struct &0xd8e9a790, mess id 0x16ee7a8c)!
Would anyone have any suggestions as to what the cause might be?