Cisco ASA site to site

Hi,
I have a site to site VPN set up but am experiencing dropouts. I will paste below some of the log entries from site 2. Keepalives are left as default.

Group = 79.xxx.xxx.xxx, IP = 79.xxx.xxx.xxx, Received DPD sequence number 0x210df0e3 in R_U_THERE_ACK, expected 0x210df0e4

Group = 79.xxx.xxx.xxx, IP = 79.xxx.xxx.xxx, IKE lost contact with remote peer, deleting connection (keepalive type: DPD)

IPSEC: An inbound LAN-to-LAN SA (SPI= 0xA78A69E8) between 213.xxx.xxx.xxx and 79.xxx.xxx.xxx (user= 79.xxx.xxx.xxx) has been deleted.

IPSEC: An outbound LAN-to-LAN SA (SPI= 0xCDB659DA) between 213.xxx.xxx.xxx and 79.xxx.xxx.xxx(user= 79.xxx.xxx.xxx) has been deleted.

Group = 79.xxx.xxx.xxx, Username = 79.xxx.xxx.xxx, IP = 79.xxx.xxx.xxx, Session disconnected. Session Type: IPsec, Duration: 0h:00m:50s, Bytes xmt: 3818, Bytes rcv: 5045, Reason: Lost Service

One of the sites 79.x has a slow internet connection which I think may be to blame here. Any suggestions gratefully received.

Thanks. J.
jerryhattAsked:
Who is Participating?
 
arnoldConnect With a Mentor Commented:
Well it seems as though it is a queuing setup since one side received a delayed packet.
What is the upstream on the ADSL. ADSL is often asynchronous i.e. you could have 4meg down and 768k up.
0
 
arnoldCommented:
Is the slow connection location experiences bandwidth saturation?
Do you have QoS policy setup to prioritize resources/bandwidth for the VPN?
What is your interface queuing policy queue or FIFO with packets being dropped when bandwidth usage is exceeded?
0
 
jerryhattAuthor Commented:
The connection at one end is an ADSL 4 meg connection. The other end is a 100meg leased line.
The ADSL connection is used solely for the transfer between servers so there is no other traffic. I guess it could be saturation as it is only a narrow pipe.

I have not set up IQP or FIFO so it would be default (Cisco ASA 5505 both ends).




0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.