Tag Info

New answers tagged


Configure SSH to allow connections on the outside interface without VPN from only your IP address or IP range for the duration of the migration, then disable that again. That way you can access the ASAs regardless of the VPN being up, which is definitely a good thing when making VPN changes. If you can't do that, you can edit each configuration file in a ...


I think it might be the keepalive being disabled, if there is not traffic or traffic it routing another way it may be causing the tunnel to drop do to inactivity. Try dropping the tunnel (clear isakmp sa $PEERIP) on the destination then running debug on the source and see if it is trying to re-establish the connection. ...

Top 50 recent answers are included