[c-nsp] Strange VPN problem

[Mike Zoeteweij]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Guys,

We've quite a few VPN running to different customers location on multiple
routers. They all work fine but with one of the we are from time to time
experiencing problems.
For whatever reason the VPN goes down and does not come up unless I reset the
router itself.
All the clear crypto commands do not seem to work
Unfortunately I do not have access to the remote ASA we use a 2801 with a
crypto map on the nat outside interface.
The only thing I've not tried so far is re-enter the pre-shared keys. But
that also does not explain why the VPN goes down in the first place.

It really happens on a irregular basis. Sometimes is happens twice a week and
sometimes we are without problems for a over half a year. 

It looks like the problem is in the ISAKMP see attached debugging.

Does anybody have any idea what is causing this issue?

Regards,

Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)

iD8DBQFI0h0dwyjwCtsMkuMRAsJ6AKCk31AHy/gU1SvyzWWWFMkIQNiqJgCbB016
aB8Jr/90F6/eh6nrfJGtIyo=
=mLuQ
-----END PGP SIGNATURE-----
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: vpn_debugging.txt
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20080918/25d9ebd3/attachment-0001.txt>