We have a cisco 2811 series router set up with a VPN tunnel to a remote site. The router is configured to allow 5 different subnets through.
We are passing traffic on several subnets with one single subnet the bulk of the traffic.
Before there was a 3005 VPN concentrator in place of the router and there was not this problem.
The problem is that the subnet with the most traffic looses connectivity. No pings, nothing, while all others stay connected. It has only happened three times in the past two months, so it is not bad as it could be.
All other subnets pass traffic fine.
It takes a router reload to re-establish connection.
As I said, it never happened on the concentrator even though it was bogged down with all of the traffic.
Debugs while the subnet is down shows nothing.
I did a "clear crypto isakmp sa" it cleared and I never saw any debug information as if the tunnel did not try to rebuild, even though the working subnets could still pass traffic.
"sh crypto session" showed all subnets up and active.
I cleared the access-lists and tried to ping the dead subnet and I can see the packets match the access-list leaving the interface, but nothing.
Any thoughts out there?
