<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Connect Then Disconnects PfSense to Cisco ASA]]></title><description><![CDATA[<p dir="auto">I have an Cisco ASA 5510 firewall terminating out VPN tunnels at least 100 tunnels have been configured and working. I have one in particular that causing me major grief; I reboot my device the tunnel comes call phases pass but then a minute later I get the below message:</p>
<p dir="auto">racoon: []: INFO: initiate new phase 1 negotiation: &lt;&lt;pfsense host=""&gt;&gt;[500]&lt;=&gt;&lt;&lt;cisco asa=""&gt;&gt;[500]<br />
May 31 11:47:53 racoon: INFO: begin Identity Protection mode.<br />
May 31 11:47:53 racoon: INFO: received broken Microsoft ID: FRAGMENTATION<br />
May 31 11:47:53 racoon: INFO: received Vendor ID: CISCO-UNITY<br />
May 31 11:47:53 racoon: INFO: received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt<br />
May 31 11:47:53 racoon: INFO: received Vendor ID: DPD<br />
May 31 11:47:53 racoon: []: INFO: ISAKMP-SA established &lt;&lt;pfsense host=""&gt;&gt;[500]-&lt;&lt;cisco asa=""&gt;&gt;[500] spi:4ced60a932f84e6a:f5ecbda0093c2e01<br />
May 31 11:47:54 racoon: []: INFO: initiate new phase 2 negotiation: &lt;&lt;pfsense host=""&gt;&gt;[500]&lt;=&gt;&lt;&lt;cisco asa=""&gt;&gt;[500]<br />
May 31 11:47:54 racoon: INFO: purging ISAKMP-SA spi=4ced60a932f84e6a:f5ecbda0093c2e01.<br />
May 31 11:47:54 racoon: INFO: purged IPsec-SA spi=257290577.<br />
May 31 11:47:54 racoon: INFO: purged ISAKMP-SA spi=4ced60a932f84e6a:f5ecbda0093c2e01.<br />
May 31 11:47:54 racoon: []: INFO: ISAKMP-SA deleted &lt;&lt;pfsense host=""&gt;&gt;[500]-&lt;&lt;cisco asa=""&gt;&gt;[500] spi:4ced60a932f84e6a:f5ecbda0093c2e01<br />
May 31 11:48:18 racoon: []: INFO: IPsec-SA request for &lt;&lt;cisco asa=""&gt;&gt; queued due to no phase1 found.<br />
May 31 11:48:18 racoon: []: INFO: initiate new phase 1 negotiation: &lt;&lt;pfsense host=""&gt;&gt;[500]&lt;=&gt;&lt;&lt;cisco asa=""&gt;&gt;[500]<br />
May 31 11:48:18 racoon: INFO: begin Identity Protection mode.<br />
May 31 11:48:18 racoon: INFO: received broken Microsoft ID: FRAGMENTATION<br />
May 31 11:48:19 racoon: INFO: received Vendor ID: CISCO-UNITY<br />
May 31 11:48:19 racoon: INFO: received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt<br />
May 31 11:48:19 racoon: INFO: received Vendor ID: DPD<br />
May 31 11:48:19 racoon: []: INFO: ISAKMP-SA established &lt;&lt;pfsense host=""&gt;&gt;[500]-&lt;&lt;cisco asa=""&gt;&gt;[500] spi:b1dd94c5b4f2dbfa:1aed93a858905cda<br />
May 31 11:48:19 racoon: []: INFO: initiate new phase 2 negotiation: &lt;&lt;pfsense host=""&gt;&gt;[500]&lt;=&gt;&lt;&lt;cisco asa=""&gt;&gt;[500]<br />
May 31 11:48:19 racoon: INFO: purging ISAKMP-SA spi=b1dd94c5b4f2dbfa:1aed93a858905cda.<br />
May 31 11:48:19 racoon: INFO: purged IPsec-SA spi=185034929.<br />
May 31 11:48:19 racoon: INFO: purged ISAKMP-SA spi=b1dd94c5b4f2dbfa:1aed93a858905cda.<br />
May 31 11:48:19 racoon: []: INFO: ISAKMP-SA deleted &lt;&lt;pfsense host=""&gt;&gt;[500]-&lt;&lt;cisco asa=""&gt;&gt;[500] spi:b1dd94c5b4f2dbfa:1aed93a858905cda</p>
<p dir="auto">I cannot determine if this is the Firewall denying connection or the PFSense dropping the connect after they have established the connection.</p>
<p dir="auto">Any assistance if greatly appreciated.</p>
<p dir="auto">thx,</p>
<p dir="auto">~r&lt;/cisco&gt;&lt;/pfsense&gt;&lt;/cisco&gt;&lt;/pfsense&gt;&lt;/cisco&gt;&lt;/pfsense&gt;&lt;/cisco&gt;&lt;/pfsense&gt;&lt;/cisco&gt;&lt;/cisco&gt;&lt;/pfsense&gt;&lt;/cisco&gt;&lt;/pfsense&gt;&lt;/cisco&gt;&lt;/pfsense&gt;&lt;/cisco&gt;&lt;/pfsense&gt;</p>
]]></description><link>https://forum.netgate.com/topic/56941/connect-then-disconnects-pfsense-to-cisco-asa</link><generator>RSS for Node</generator><lastBuildDate>Fri, 09 Oct 2026 17:37:25 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/56941.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 31 May 2013 19:19:04 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Connect Then Disconnects PfSense to Cisco ASA on Mon, 03 Jun 2013 06:01:30 GMT]]></title><description><![CDATA[<p dir="auto">Do you have VM's running?</p>
]]></description><link>https://forum.netgate.com/post/398745</link><guid isPermaLink="true">https://forum.netgate.com/post/398745</guid><dc:creator><![CDATA[foxtrotks]]></dc:creator><pubDate>Mon, 03 Jun 2013 06:01:30 GMT</pubDate></item></channel></rss>