Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Problem with site-site VPN

Hi All,

I am coming across some issues with site-site vpn tunnel.

Can anyone guide me on this?

Problem reported:
Client cannt download the emails intermittantly but internet access is fine.
2 branch sites dont have any issues with email access.The issue is with only one site.Whenever the problem comes users can acees the emails using client VPN.To resolve this issue, i have to reset the vpn tunnel everytime then it works fine for some days but again it stops working.
The exchange server has already added in the Crypto ACL.
As users can access the emails using Client VPN during this issue so it not seems to be internet link issue.

Topology:
I do have site-site VPN configured between the Central site ASA  and 3 branch sites ASAs out of which only one branch site is having issues.

Thanks & Regards

Manish

3 REPLIES

Re: Problem with site-site VPN

Hi,

The tunnel never actually goes down between this two sites?

i.e.

If you let a PING packet through the tunnel to the Exchange server from that location it works when the problem is happening?

If all other applications work at that time but the e-mail I doubt it will be a problem with the VPN tunnel itself.

Federico.

Community Member

Re: Problem with site-site VPN

Hi,

When the problem is happening ping to exchange server doesnt work.When i resets the tunnel its starts working.

What do you mean by problem with vpn tunnel itself?Can you please let me know?

Thanks

Mansih

Re: Problem with site-site VPN

What I'm trying to determine is if the tunnel actually goes down or if it's just traffic that stops passing through.

Could you check if the tunnel remains up when the problem happen with the command ''sh cry isa sa''

Federico.

208
Views
0
Helpful
3
Replies
CreatePlease to create content