Frequent VPN StoS dropping

[Jean-Francois Gagnon]

Hi!

I have multiple RVS4000 in a VPN ipsec Site to site to a ASA5505.

The connection is fine most of the time.

But the VPN connection randomly drops, not all the devices at once but they all do at a different time.

What could be the cause?

Thanks for your help!

[Vishnu Sharma]

Hi Jean,

Please make sure that you have mirror image of the crypto access-list on both the devices. Also check if the keepalives is enabled or not. Make sure that we do not have any extra entry on eny of the two ends.

If you do not find any mismatch in the crypto access-list, then please capture the debugs of these 2 commands on the ASA and share here:

debug cry isa 127

debug cry ipsec 127.

Thanks,

Vishnu Sharma