Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

ASA 5550 VPN load balancing flapping when ipsec enabled

Hi,

When I configure load balancing between two 5550 asa's the peers are flapping. When I disable ipsec on load balancing it works fine. Is this a bug.

See log file for more detail:

7|Sep 24 2009 13:35:13|718059: State machine function trace: state=Master, event=PeerObit, func=VCAProcessPeerObit

7|Sep 24 2009 13:35:13|718058: State machine return code: VCAProcessPeerObit,

7|Sep 24 2009 13:35:13|718059: State machine function trace: state=PeerDeath, event=PeerObit, func=VCASendOOSObit

7|Sep 24 2009 13:35:13|718058: State machine return code: VCASendOOSObit,

7|Sep 24 2009 13:35:13|718059: State machine function trace: state=PeerDeath, event=PeerObit, func=VCAProcessDeadPeer

6|Sep 24 2009 13:35:13|718039: Process dead peer[137.120.xxx.xxx

6|Sep 24 2009 13:35:13|718051: Deleted secure tunnel to peer[137.120.xxx.xxx

5|Sep 24 2009 13:35:13|718044: Deleted peer[137.120.xxx.xxx

7|Sep 24 2009 13:35:13|718058: State machine return code: VCAProcessDeadPeer,

7|Sep 24 2009 13:35:13|718059: State machine function trace: state=PeerDeath, event=iChkRole, func=VCAChkRole

7|Sep 24 2009 13:35:13|718058: State machine return code: VCAChkRole,

7|Sep 24 2009 13:35:13|718059: State machine function trace: state=Master, event=iBecomeMaster, func=VCABecomeMaster

7|Sep 24 2009 13:35:13|718058: State machine return code: VCABecomeMaster,

7|Sep 24 2009 13:35:13|713906: Ignoring msg to mark SA with specified coordinates <__vpn-lb-crypto-map, 65534> dead

509
Views
0
Helpful
0
Replies
CreatePlease to create content