Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Client + IPSEC disconnection

I have several 3.5.x clients that are being disconnected from my PIX 515 with the same log entries. I am trying to understand the issue so I can understand the solution, but neither is apparent to me. Below is the end of the lof file for one particular session.

219 15:36:35.274 10/21/02 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = 216.208.57.5

220 15:36:35.274 10/21/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK INFO *(HASH, DEL) from 216.208.57.5

221 15:36:35.274 10/21/02 Sev=Info/5 IKE/0x6300003C

Received a DELETE payload for IKE SA with Cookies = 0037BBDFF7F060BF6C9015F0E74594F8

222 15:36:35.274 10/21/02 Sev=Info/5 IKE/0x63000017

Marking IKE SA for deletion (COOKIES = 0037BBDFF7F060BF 6C9015F0E74594F8) reason = DEL_REASON_PEER_DELETION

223 15:36:39.520 10/21/02 Sev=Info/4 CM/0x63100013

Phase 1 SA deleted cause by DEL_REASON_PEER_DELETION. 0 Phase 1 SA currently in the system

224 15:36:39.571 10/21/02 Sev=Info/5 CM/0x63100029

Initializing CVPNDrv

225 15:36:39.571 10/21/02 Sev=Info/6 CM/0x63100035

Tunnel to headend device 216.208.57.5 disconnected: duration: 0 days 0:19:13

226 15:36:39.581 10/21/02 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

Why would the PIX tell the client that he is going to be disconnected? I thought it was a 'no traffic' event, but the keepalive timer is active in the client. Anyone have the same situation?

Thanks

Robert Crooks

Computer & Network Systems Administrator

Ivaco Rolling Mills

1 REPLY
Cisco Employee

Re: VPN Client + IPSEC disconnection

Robert, can you post the PIX results for the 2 debugs when the disconnects occurr:

debug crypto ipsec and debug crypto isa

Nelson

269
Views
0
Helpful
1
Replies
CreatePlease login to create content