PIX & VPN Concentrator LAN-to-LAN Tunnel Disconnected

We connect to other branch offices using a Cisco VPN concentrator (Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.C Nov 30 2005

00:19:31). I am having trouble with LAN-2-LAN connectivity with a PIX (I don't know the version or particulars on that device). The tunnel can be established but is disconnected every 15-30 seconds, after which time it comes back up on its own. No traffic, though, has been able to pass through that tunnel. I maintain no NATs that would affect any of the addresses for this tunnel. The other party, however, is NAT-ing their privately addressed host to a public address. I include this here because I found a German forum that referenced my exact error message and that spoke of NATs and nat traversal. The errors that I am seeing in my concentrator's log are as follow:

Nov 16 08:50:50 searchbridge-priv 7249 11/16/2006 08:48:32.180 SEV=4 AUTH/22 RPT=10408 216.54.170.100 User [public ip address] Group [public ip address] connected, Session Type: IPSec/LAN-to-LAN Nov 16 08:50:50 searchbridge-priv 7251 11/16/2006 08:48:32.180 SEV=4 AUTH/84 RPT=10408 LAN-to-LAN tunnel to headend device public ip address connected Nov 16 08:51:22 searchbridge-priv 7450 11/16/2006 08:49:04.200 SEV=4 AUTH/23 RPT=10398 public ip address User [public ip address] Group [public ip address] disconnected: duration: 0:00:32

The public IP address is always the peer address of the PIX. Thanks in advance. Elinor

Reply to
elinor
Loading thread data ...

Hi Elinor,

You may wish to investigate Troubleshooting on the VPN Concentrator:

formatting link
Found on Configuring the Cisco VPN 3000 Concentrator to the PIX Firewall:

formatting link
Hope this helps.

Brad Reese

formatting link

Reply to
www.BradReese.Com

formatting link

formatting link

Reply to
elinor

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.