Firewall VPN outages

Unanswered Question
Mar 26th, 2009
User Badges:


I have a couple of L2L tunnels on a ASA 5510 firewall and from time to time (2 to 7 days) all the tunnels go down:

sh crypto isakmp sa

Active SA: 2

Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)

Total IKE SA: 2

1 IKE Peer: x.x.x.x

Type : L2L Role : initiator

Rekey : no State : MM_WAIT

The issue doesn't resolve until I reboot the firewall.

Could this be a hardware problem? Where should I look on the firewall for more info?




  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ldardon Wed, 04/01/2009 - 12:23
User Badges:

The problem can be that the xauth times out. Increase the timeout value for AAA server in order to resolve this issue .


This Discussion