Solved

Cisco PIX to Cisco VPN drops connection periodically

Posted on 2004-09-02
6
609 Views
Last Modified: 2011-04-14
I have a Cisco Pix 506e connecting via a T1 line to a Cisco Device on the other end. I'm not exactly sure of the device on the other end, but it does handle multiple VPNs without the others having problems.

Currently to fix it we turn it off then on and it and it resolves the problem.

I'm looking to determine the cause. What commands are available on the PIX to try to diagnose the problem? Are there any third party tools available to help?

Thanks,
Ron
0
Comment
Question by:youritstaff
6 Comments
 
LVL 11

Assisted Solution

by:billwharton
billwharton earned 100 total points
ID: 11963222
No third party tools i have come across.

You could use these commands which show you the state of your connection and the debug commands show you live output for your vpn tunnels.
show crypto ipsec sa
show crypto isakmp sa

debug crypto ipsec
debug crypto isakmp
0
 

Author Comment

by:youritstaff
ID: 11963884
Thank you for your post. I've used those command initially to debug the initial connectivity. I didn't think they'll help me in this instance. Is there anyway to write the output to a log file so that I can go through the info after an outage.

Also, is there any way to check for memory leaks?

Thanks again.
0
 
LVL 36

Assisted Solution

by:grblades
grblades earned 100 total points
ID: 11964280
Hi youritstaff,
Check to see what IOS version the remote device is running and see if you can get an upgrade. This might be free if the problem you are experiencing is a known problem.

Also check the key lifetimes are set to identical values at both ends.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 1

Accepted Solution

by:
clkemp earned 200 total points
ID: 11966155
How often does it drop? Weekly? Daily? Hourly?  Can you post the crypto section from the pix with passwords and ip's changed?  If you have the same info from the host end, please post it too.  More information will help diagnose the problem.

You can send system messages to a syslog server.  Pick up a syslog server for windows from Kiwi software (www.kiwisyslog.com).  Setup your pix to send all messages to the syslog server.

logging on
logging host server_ip_address
logging facility 20
logging trap informational
0
 
LVL 1

Assisted Solution

by:tevens
tevens earned 100 total points
ID: 11973634
Most likely the reason why you can re-establish the connection on reboot is because one side adjusts to match your config during establishment.  Verify that both ISAKMP and IPSEC proposals match on both sides.  Make sure that both sides select the correct proposal first.  Sometimes the problem lies with having the proposal order the same on both sides.

--Tim
0
 

Author Comment

by:youritstaff
ID: 12373882
Thank you everyone for your help. It turned out to be the linksys switch between the cisco router and switch. I distributed the points as they all helped in one way or another.
0

Featured Post

New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

Join & Write a Comment

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now