ASA VPN Phase -2 sa is intermittently connecting

[uthayaman elangovan]

Hi,

One of my VPN configured in ASA is giving me an intermittent problem. Intermittently my connection is going down. When i checked, phase-1 SA is through but phase-2 SA is not getting up.

For a while it will not work, after a random interval it will create a phase-2 SA and will be working normal. I am observing  hit in my encryption access list. NAT0 is also configured for the source and destination .

I have checked the SA life time. It matches with my peer configuration.  Any other tips to troubleshoot further.   

[Maykol Rojas]

Hi;

Logs should tell u why the SA is being dropped. Can u quickly check that and also the debugs? Debug crypto ipsec sa


Sent from Cisco Technical Support Android App