• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 401
  • Last Modified:

errors on site-to-site vpn

I have 4 site-to-site vpn with Cisco routers without ASA firewall. When I did the show crypto ipsec sa, I see send errors and recv errors. What are those errors? Can I see the meaning of those errors somewhere? Thanks
0
leblanc
Asked:
leblanc
  • 5
  • 4
3 Solutions
 
JohnBusiness Consultant (Owner)Commented:
If your VPN transmission is otherwise normal, then these are just miscellaneous retransmits with is a fundamental part of TCP/IP transmissions. Errors occur and are retransmitted.

If normal overall transmission, no issue so far as I can see.

If you have VPN errors (wrong data, nothing received, not working) post some errors here.
0
 
leblancAccountingAuthor Commented:
Sure. Everything is working fine. I am just trying to validate those errors. I want to be able to tell my boss what types of errors it is, even though it is not affecting the VPN traffic. Thanks
0
 
JohnBusiness Consultant (Owner)Commented:
If all is well then they are just TCP/IP transmit errors that occur all the time. You can go nuts recording TCP/IP errors with CommView.

VPN is very subject to line drops, so the errors cannot be anything meaningful. Otherwise the  VPN would disconnect.
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
leblancAccountingAuthor Commented:
So there is no way to see the meaning of those errors, unless I monitor the connection or do some debug. Correct?
0
 
JohnBusiness Consultant (Owner)Commented:
That is correct. If all is working well (you say it is), then you would need Wireshark (Free) or CommView (tamos.com) which is really good but not free, and do some packet analysis to see what is there.

The analysis is very detailed and not always fruitful if just run-of-the-mill errors.
0
 
leblancAccountingAuthor Commented:
Got it. Thanks
0
 
RafaelCommented:
Yes that is correct.  As John indicated you'll go nuts trying to decipher the messages.

-Rafael
0
 
JohnBusiness Consultant (Owner)Commented:
So I think you have all you need and you did not post any specific errors. So if that is all, please do not forget to close out the question.  Thank you.
0
 
JohnBusiness Consultant (Owner)Commented:
@bobon - Thanks much. And despite what was said above, it is worth your while, in a spare moment, to look through packets just to see what is there.
0
 
leblancAccountingAuthor Commented:
Yes. I will have to be on site to setup Wireshark for the monitoring. IT is too bad you can see the errors but we don't know what it is until we look into the packets. I don't have a lot of experience with VPN. So if I look at those errors numbers, I will assume that something is wrong with the connection. But like you mentioned it may just be retransmissions.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now