vpn tunnel not coming up after a reboot/power cycle on DHCP public
The issue is with the vpn tunnel not coming up after a reboot/power cycle
We have been having issues on 2811-ISR, as EZ VPN remotes, Net-extension mode set to auto when the outside interface is set for DHCP and not static. A disable/enable of the interface resolves the issue immediately.
The testing log below shows what we are seeing. My guess is that the outside interface hasn't completely come up by the time the tunnel setup is initiated.
We have tested both inside our lab as well as outside using DSL and cable circuits. We can repeat this 100% of the time with DHCP. There is no issue with statically assigned IP addresses. Unfortunately 35% of the offices receiving these equipment upgrades have DHCP assigned IP addresses. It doesn't seem to matter if the router keeps or changes outside address on boot.
Is there a way to delay the tunnel initialization ?
Remote Equipment is 2811-HSEC/K9 running 12.4(2)T4
000081: *Jun 15 08:10:54.723 PCTime: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/13, changed state to up
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...