cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
407
Views
0
Helpful
3
Replies

Problem with site-site VPN

manish_3191
Level 1
Level 1

Hi All,

I am coming across some issues with site-site vpn tunnel.

Can anyone guide me on this?

Problem reported:
Client cannt download the emails intermittantly but internet access is fine.
2 branch sites dont have any issues with email access.The issue is with only one site.Whenever the problem comes users can acees the emails using client VPN.To resolve this issue, i have to reset the vpn tunnel everytime then it works fine for some days but again it stops working.
The exchange server has already added in the Crypto ACL.
As users can access the emails using Client VPN during this issue so it not seems to be internet link issue.

Topology:
I do have site-site VPN configured between the Central site ASA  and 3 branch sites ASAs out of which only one branch site is having issues.

Thanks & Regards

Manish

3 Replies 3

Hi,

The tunnel never actually goes down between this two sites?

i.e.

If you let a PING packet through the tunnel to the Exchange server from that location it works when the problem is happening?

If all other applications work at that time but the e-mail I doubt it will be a problem with the VPN tunnel itself.

Federico.

Hi,

When the problem is happening ping to exchange server doesnt work.When i resets the tunnel its starts working.

What do you mean by problem with vpn tunnel itself?Can you please let me know?

Thanks

Mansih

What I'm trying to determine is if the tunnel actually goes down or if it's just traffic that stops passing through.

Could you check if the tunnel remains up when the problem happen with the command ''sh cry isa sa''

Federico.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: