[Last Call] Learn how to a build a cloud-first strategyRegister Now


I keep losing pings over my site to site VPN

Posted on 2009-04-30
Medium Priority
Last Modified: 2012-06-27
I have a site to site VPN.  (From a Cisco 2811 router to a 2801) When I ping from site to site I get about 10 replies, and then I will get a time out.  When I do a "show crypto isakmp sa" it shows the VPN is up.  When I do a "show crypto ipsec sa"  it tells me that I have send errors.  This is occuring on both sides.  This is a portion of the output that shows the send errors:

local  ident (addr/mask/prot/port): (
 remote ident (addr/mask/prot/port): (
 current_peer: x.x.x.x:500
   PERMIT, flags={origin_is_acl,}
  #pkts encaps: 55469643, #pkts encrypt: 55469643, #pkts digest: 55469643
  #pkts decaps: 74015508, #pkts decrypt: 74015508, #pkts verify: 74015508
  #pkts compressed: 0, #pkts decompressed: 0
  #pkts not compressed: 0, #pkts compr. failed: 0
  #pkts not decompressed: 0, #pkts decompress failed: 0
  #send errors 115, #recv errors 0

Any Ideas why I would be dropping packets?  Thanks

Question by:Crossroads305

Accepted Solution

ricks_v earned 2000 total points
ID: 24275343
Let's try narrow down the issue,
Check internet at both ends which used for vpn, maybe one of them is flaky.

If everything's fine, we can have a look at the connection between devices, looks like there has been error on the vpn based on #send errors 115.

show interface on all interfaces between internet router to 2811 router  and 2801.

Confirm if they are working on 100mb full duplex.

please provide config, so we can assist further if it's still an issue.


Author Closing Comment

ID: 31576490
The issue has been resolved.  Turns out this was an ISP issue.  Thanks

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Let’s list some of the technologies that enable smooth teleworking. 
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question