Router upgrade causing vpn tunnels to drop

[bubarooni]

*I originally posted in the PIX forum by mistake*

I have 4 1750's that have vpn's back to my PIX 506E. The PIX is running 6.3(4).

Last week I upgraded the 1750's from 12.2(11)T to 12.3(9)A for the 3DES encryption.

Since that time, the routers have been dropping the tunnels intermittently. A 'show crypto isakmp sa' command on the routers now will show the tunnel 'created' 6 to 10 times a day or so where as before I would usually see just 1 or 2.

Anything I should be looking for?

Thanks in Advance

 

[JOAMON]

I would be suspect of the IOS as 12.3(9)A is not in the current download list from cisco for 3DES 1750 platform.

Current list:

12.3.16 (LD)
12.3.15a (LD)
12.3.15 (LD)
12.3.13b (LD)
12.3.13a (LD)
12.3.12e (LD)
12.3.12d (LD)
12.3.12c (LD)
12.3.12b (LD)
12.3.10e (LD)
12.3.10d (LD)
12.3.9e (LD)
12.3.9d (LD)
12.3.6f (LD)
12.3.6e (LD)
12.3.5f (LD)
12.3.5e (LD)
12.3.3i (LD)
12.3.3h (LD)

 

[JOAMON]

Retired Cisco IOS Software Releases
Cisco IOS Release Date Retired
12.3(9b) 12-APR-2005
12.3(9a) 12-APR-2005

 

[bubarooni]

just my friggin' luck!

i guess i need to go back and look for another, eh?

 

[bubarooni]

Any problem with going with the LD instead of GD release? I didn't see a GD available.

 

[JOAMON]

Well if it worked before the new IOS then that would seem to be the problem. Did you do a show run and compare it to the old show run after doing the IOS update. IOS updates can include new features which are turned on by default and maybe just need to disable some new features.

 

[JOAMON]

LD should be OK.....just the rating it receives before it becomes GD.