vpn tunnel flaps

[dondongamo]

Hi

Given below are debug results fr pix 535 v7.0, we faced this flapping of tunnel even if both ends match the policies, i tried clearing both SAs yet prob still persists & the strange thing is commands like sysopt connection permit-ipsec & crypto map vpn interface int_admin are not showing fr show run crypto command even if both are given already btw with old pix515 v6.3 we didn't face this such issue

Any idea ? TIA

"Jan 01 22:15:38 [IKEv1]: QM IsRekeyed old sa not found by add

r

Jan 01 22:15:38 [IKEv1]: QM FSM error (P2 struct &0x40ebf58, mess id 0x1bb690a7)

!

Jan 01 22:15:38 [IKEv1]: Group = 172.17.24.1, IP = 172.17.24.1, Removing peer fr

om correlator table failed, no match!..."

[jackko]

firstly, the sysopt is no longer shown with "sh run". you may do "sh run sysopt" instead.

regarding the vpn issue, i was just wondering if the issue occurs straight after the upgrade from 6.3 to 7.0 or not. and whether the codes for vpn has been modified manually. the reason being that the upgrade process is meant to auto modify the codes, however, it doesn't do well with vpn.

for further assistance, please post the entire config with public ip masked.