Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco 1811 - Reload Issue

Hi,

I have some 5 branch sites. All are having cisco 1811 being used for VPN connectivity. The IOS details are as below.

Cisco IOS Software, C181X Software (C181X-ADVIPSERVICESK9-M), Version 12.4(15)T10, RELEASE SOFTWARE (fc3)

There is a strange issue. Once during a day VPN tunnels get failed and for this i need to restrt the router. After restrt things goes fine. (VPN tunnel config are ok).

Can any body plz advice me wht the issue may be? It this any known Software bug ?

Any further troubleshooting guidelines?

4 REPLIES
VIP Super Bronze

Re: Cisco 1811 - Reload Issue

Hi,

Have you looked at the logs before rebooting the router to see if there is a specific error message?

Reza

New Member

Re: Cisco 1811 - Reload Issue

The device log had captured the reboot messages.  There was a CiscoWork start/stop process to initiate this reboot.

I think its not related to in this case ?

VIP Super Bronze

Re: Cisco 1811 - Reload Issue

How about login via telnet and capturing the log on the router before reboot?

Hall of Fame Super Silver

Re: Cisco 1811 - Reload Issue

In addition to the good suggestion from Reza I have a few questions and suggestions:

- does it happen on a regular periodic basis (perhaps every 24 hours, every 4 hours, or some time period like that)? Or does it happen randomly?

- one thing that might cause the tunnels to go down is a lack of interesting traffic. Have you attempted to generate interesting traffic from the local LAN to the remote LAN and from the remote LAN to the local LAN (ping or something else depending on the access list that defines traffic for the VPN)?

- when the tunnel is not working can you access the router? If so it might help to get the output of these commands:

show crypto isakmp sa

show crypto ipsec sa

- when the tunnel is not working can you access the outside interface of the remote router? Can you ping it or traceroute to it? Can you telnet to it or SSH to it?

HTH

Rick

469
Views
0
Helpful
4
Replies
CreatePlease login to create content