Two of our locations, both behind ASA5510s, exhibit random delays in ssh connection establishment, but only in one direction. If I ssh from Site-A to Site-B, some hosts respond immediately and others take up to ten seconds. The ssh sessions from Site-B to Site-A never display slow connection establishment. The hosts are all LINUX server and most have very little load. The circuit between the networks is also lightly loaded. When I retry ssh later, to the same hosts that responded slowly, they respond quickly. Is there any way the ASA at either end can cause this? The configurations have been the same for some time. I have attached ASA captures taken at the Site-B ASA for a destination host exhibiting such a delay. The Site-A ASA has version 8.2(2) software and the Site-B ASA has version 7.0(7), if that helps. Thanx!
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...