Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Problem with PIX-PIX Fullmesh IPsecVPN

Scenario: Setup where in five different spoke locations use Full meshed PIX-PIX IPsec VPNs. Hub location(Mumbai) has a

PIX 525 UR with 6.3(4). Spoke locations have PIX-515E/PIX-525 with 6.3(4).

Problem Observed : One or two of the IP address subnets go unrechable in a IPsec tunnel when other subnets in the same tunnel are reachable.

Other observation:

** The Mumbai PIX CPU goes upto 95%

** IPsec session if cleared the problem resolves.

** PIX reboot also resolves the problem

Please suggest what the Root cause could be and the work around.

Regards

Pramila Sekar

1 REPLY

Re: Problem with PIX-PIX Fullmesh IPsecVPN

Hi

Have you tried to find out which process hogs off your CPU ?

Also did u try to shut any of the spoke location link and find out whether it goes back to the normal condition ?

any specific input inline with any CPU spikes at the remote spoke locations when you are into this situation ?

regds

94
Views
0
Helpful
1
Replies