L2L VPN "freeze" traffic

marcelo.zilio · ‎12-15-2008

I have the following L2L VPN scenario:

(192.168.200.X)--Router2801 --|Internet|-- ASA5510 (192.168.10.X, 192.168.20.X, 192.168.30.X,....)

At Router2801 side I'm able to access any network at the ASA5510 side and vice-versa, but sometimes it seems connection cannot goes through even tunnel state showing state MM_ACTIVE. So I go into Router2801 and issue a ping (telling the source interface) to any address in any network at the ASA5510 and everything is fine again.

For example:

Router2801#ping 192.168.30.1 source 192.168.200.1

!!!!!

After that traffic from 192.168.30.x to 192.168.200.x is OK. The same for all other networks.

As far as I could note, from ASA side there's nothing I can do when the traffic stops flowing. At Router2801 any kind of traffic can "initiate" the flow again.

Any thoughts will be appreciated

Thanks

marcelo.zilio · ‎12-16-2008

Someone?

Thanks

celiocarreto · ‎12-16-2008

OlÃ¡.

If a ping from the 2801 solves your problem, you can configure an "ip sla monitor" on the 2801 and continuously ping your ASA side.

Just a workaround, but maybe it helps.

marcelo.zilio · ‎12-16-2008

Ola Celio

It's not exactly what I was expecting, but it works... for now.

Thanks