Forum Discussion

BA2100_7784's avatar
BA2100_7784
Icon for Nimbostratus rankNimbostratus
Feb 11, 2009

Issue with VPN Disconnecting

I am hoping for a bit of insite from anyone on here.

 

 

We have the F5 connected to a 6509 which is connected to a 7206 and the connections get establised and then reset. Any ideas why this would happen?

 

 

Here is the scenario:

 

 

ISP - DMZ - Cisco FW - Cisco 6509 - FirePass - Back through 6509 - 7206 - MPLS to network.

 

 

Both sides are hard set at 100/full
BIG-IP Access Policy Manager (APM)
remote access
security

2 Replies

  • mal_57091's avatar
    mal_57091
    Icon for Nimbostratus rankNimbostratus
    Feb 12, 2009
    Hi There,

     

     

    What kind of FirePass is it? I've seen similar issues on the FirePass 4300 with various networking devices even when the interface speeds were hard set. For example, I had my FirePass 4300 hard set at 100Full and I was using a Nortel switch set at 100F and for some reason the FirePass came up at 100Half. Took the same port (without *any* reconfiguration) and plugged it into a HP ProCurve set at 100F and both sides came up perfectly!

     

     

    I then put the FirePass port back to auto, plugged it back into the Nortel and both sides came up at 100Full!! I write off down the un-reliability of negotiation on Fast Ethernet switch ports. Gig ports are *MUCH* better. Is the switch board in the 6509 at 10/100 or a 10/100/1000. My instinct tells me your connecting a FirePass 4300 to a 10/100 switch port on your 6509. In which case i think you'll need to 'fiddle' to get it working correctly.

     

     

    Cheers,

     

    Mal
  • BA2100_7784's avatar
    BA2100_7784
    Icon for Nimbostratus rankNimbostratus
    Feb 12, 2009
    It is an F5 4100 6.0.2 Software on it. The 6509 is connected to the FirePass 4100 via a 10/100/1000 port. We have it hard set on both sides at 100/Full. The FP will not allow hard set of 1000/Full. To get it to 1000/Full you must set the FP at auto/auto.

     

     

    Any help would be GREATLY appreciated.

     

     

    Thanks, Jason