L2L VPN "freeze" traffic

Unanswered Question

I have the following L2L VPN scenario:

(192.168.200.X)--Router2801 --|Internet|-- ASA5510 (192.168.10.X, 192.168.20.X, 192.168.30.X,....)

At Router2801 side I'm able to access any network at the ASA5510 side and vice-versa, but sometimes it seems connection cannot goes through even tunnel state showing state MM_ACTIVE. So I go into Router2801 and issue a ping (telling the source interface) to any address in any network at the ASA5510 and everything is fine again.

For example:

Router2801#ping source


After that traffic from 192.168.30.x to 192.168.200.x is OK. The same for all other networks.

As far as I could note, from ASA side there's nothing I can do when the traffic stops flowing. At Router2801 any kind of traffic can "initiate" the flow again.

Any thoughts will be appreciated


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
celiocarreto Tue, 12/16/2008 - 04:16
User Badges:


If a ping from the 2801 solves your problem, you can configure an "ip sla monitor" on the 2801 and continuously ping your ASA side.

Just a workaround, but maybe it helps.


This Discussion