[c-nsp] site-to-site IPSEC VPNs with IOS 12.4(11)T and ASA 7.2(2)

[Adrian Chadd]

Hiya,

My coworkers have reported seeing issues with various upgrades to IOS and ASA
software revisions as of late. The symptoms are "IPSEC tunnels don't establish"
between the latest ASA software (updated for the security fixes) and some issues
with with 12.4(11)T advanced ip services/security where the IPSEC sessions would
establish and pings worked, but nothing else did. Downgrading to IOS 12.3 or
12.4(9)T and ASA 7.1(2) fixed things.

I'm going to start digging further and log TAC cases, but has anyone seen similar
behaviour with recent 12.4T and ASA software revisions?



Adrian