Solved

errors on site-to-site vpn

Posted on 2014-04-24
10
378 Views
Last Modified: 2014-04-24
I have 4 site-to-site vpn with Cisco routers without ASA firewall. When I did the show crypto ipsec sa, I see send errors and recv errors. What are those errors? Can I see the meaning of those errors somewhere? Thanks
0
Comment
Question by:leblanc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
10 Comments
 
LVL 95

Accepted Solution

by:
John Hurst earned 500 total points
ID: 40020387
If your VPN transmission is otherwise normal, then these are just miscellaneous retransmits with is a fundamental part of TCP/IP transmissions. Errors occur and are retransmitted.

If normal overall transmission, no issue so far as I can see.

If you have VPN errors (wrong data, nothing received, not working) post some errors here.
0
 
LVL 1

Author Comment

by:leblanc
ID: 40020445
Sure. Everything is working fine. I am just trying to validate those errors. I want to be able to tell my boss what types of errors it is, even though it is not affecting the VPN traffic. Thanks
0
 
LVL 95

Assisted Solution

by:John Hurst
John Hurst earned 500 total points
ID: 40020484
If all is well then they are just TCP/IP transmit errors that occur all the time. You can go nuts recording TCP/IP errors with CommView.

VPN is very subject to line drops, so the errors cannot be anything meaningful. Otherwise the  VPN would disconnect.
0
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

 
LVL 1

Author Comment

by:leblanc
ID: 40020566
So there is no way to see the meaning of those errors, unless I monitor the connection or do some debug. Correct?
0
 
LVL 95

Assisted Solution

by:John Hurst
John Hurst earned 500 total points
ID: 40020602
That is correct. If all is working well (you say it is), then you would need Wireshark (Free) or CommView (tamos.com) which is really good but not free, and do some packet analysis to see what is there.

The analysis is very detailed and not always fruitful if just run-of-the-mill errors.
0
 
LVL 1

Author Comment

by:leblanc
ID: 40020622
Got it. Thanks
0
 
LVL 10

Expert Comment

by:Rafael
ID: 40020695
Yes that is correct.  As John indicated you'll go nuts trying to decipher the messages.

-Rafael
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 40020710
So I think you have all you need and you did not post any specific errors. So if that is all, please do not forget to close out the question.  Thank you.
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 40020772
@bobon - Thanks much. And despite what was said above, it is worth your while, in a spare moment, to look through packets just to see what is there.
0
 
LVL 1

Author Comment

by:leblanc
ID: 40020841
Yes. I will have to be on site to setup Wireshark for the monitoring. IT is too bad you can see the errors but we don't know what it is until we look into the packets. I don't have a lot of experience with VPN. So if I look at those errors numbers, I will assume that something is wrong with the connection. But like you mentioned it may just be retransmissions.
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Access-List 15 62
Office 365 email security and hygiene features ? 6 73
Samsung Tablet no Internet but does connect to WiFi 7 49
bitlocker admin and monitoring 2 42
Do you know what to look for when considering cloud computing? Should you hire someone or try to do it yourself? I'll be covering these questions and looking at the best options for you and your business.
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question