PIX 501 Disconnecting

I am new to configuring Cisco routers. I have manage to get a PIX 501 setup and the VPN working. The problem I am having is at seemingly random times the VPN connections drops. It is always less than the timeout period.

I can always reconnect right away after it has disconnected...

The error is always: Secure VPN Connection terminated by the Client. Reason 412: The remote peer is no longer reposinding.

In the client logs I get a bunch of these: =============================================================

364 15:19:30.186 05/21/08 Sev=Info/6 IKE/0x6300003D Sending DPD request to xx.xx.xx.xx, our seq# = 2690016169

365 15:19:35.193 05/21/08 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to xx.xx.xx.xx =============================================================

After doing that for a while it terminates: =============================================================

371 15:19:45.208 05/21/08 Sev=Info/4 IKE/0x63000049 Discarding IPsec SA negotiation, MsgID=9A649DEF

372 15:19:45.208 05/21/08 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=0C5471D6BCA1E9A1 R_Cookie=FB8578046C2B2910) reason = DEL_REASON_PEER_NOT_RESPONDING

373 15:19:45.208 05/21/08 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 72.167.142.10

374 15:19:45.208 05/21/08 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xaa1e05d3

375 15:19:45.208 05/21/08 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xaa1e05d3

376 15:19:45.208 05/21/08 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xbb147b9a

377 15:19:45.208 05/21/08 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xbb147b9a

378 15:19:45.749 05/21/08 Sev=Info/4 IKE/0x6300004B Discarding IKE SA negotiation (I_Cookie=0C5471D6BCA1E9A1 R_Cookie=FB8578046C2B2910) reason = DEL_REASON_PEER_NOT_RESPONDING

379 15:19:45.749 05/21/08 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_PEER_NOT_RESPONDING. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system

380 15:19:45.749 05/21/08 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv

381 15:19:45.779 05/21/08 Sev=Info/6 CM/0x63100031 Tunnel to headend device xx.xx.xx.xxdisconnected: duration: 0 days 0:7:21

382 15:19:45.809 05/21/08 Sev=Info/6 CM/0x63100046 Set tunnel established flag in registry to 0.

383 15:19:45.809 05/21/08 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection

384 15:19:45.849 05/21/08 Sev=Info/5 CVPND/0x63400013 Destination Netmask Gateway Interface Metric xx.xx.xx.xxxx.xx.xx.xxxx.xx.xx.xxxx.xx.xx.xx

385 15:19:45.909 05/21/08 Sev=Info/6 CM/0x63100037 The routing table was returned to original state prior to Virtual Adapter

386 15:19:47.641 05/21/08 Sev=Info/5 CVPND/0x63400013 Destination Netmask Gateway Interface Metric xx.xx.xx.xxxx.xx.xx.xxxx.xx.xx.xx

387 15:19:47.651 05/21/08 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled

388 15:19:47.661 05/21/08 Sev=Info/4 IKE/0x63000086 Microsoft IPSec Policy Agent service started successfully

389 15:19:47.661 05/21/08 Sev=Info/4 IPSEC/0x63700014 Deleted all keys

390 15:19:47.661 05/21/08 Sev=Info/4 IPSEC/0x63700014 Deleted all keys

391 15:19:47.661 05/21/08 Sev=Info/4 IPSEC/0x63700014 Deleted all keys

392 15:19:47.661 05/21/08 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped =============================================================

Is there anything in these logs that gives a clue or do I need to go on teh PIX side?

Thank you!

Reply to
karlman
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.