A Networking and System Engineer Blog

Tuesday, February 8, 2011

Mystery L2L VPN Dropping

I had an interesting issue where a site to site VPN drops, sometimes 5-6 times a day. There was some high bandwith during some of these drops at one of the sites, and I thought... this is DSL not frame relay. High bandwidth couldn't cause the VPN to drop, could it? Well, I opened a TAC case and the result was - we found in the logs:


Feb 07 2011 09:21:05: %ASA-5-713259: Group = 192.168.1.1, IP = 192.168.1.1, Session is being torn down. Reason: Lost Service

The important part here is "Reason: Lost Service" The TAC engineer stated this is likely because the DSL went down for a few seconds. Users haven't complained about it yet, but we will see. Changing carriers soon.

0 comments: