It is recommended that these solutions be implemented with caution and in accordance with your change control policy. Warning: Many of the solutions presented in this document can lead to a temporary loss of all IPsec VPN connectivity on a device. Note: ASA does not pass multicast traffic over IPsec VPN tunnels. Refer to IP Security Troubleshooting - Understanding and Using debug Commandsfor an explanation of common debug commands that are used to troubleshoot IPsec issues on both the Cisco IOS ® software and. This document provides a summary of common procedures to try before you begin to troubleshoot a connection.Īlthough the configuration examples in this document are for use on routers and security appliances, nearly all of these concepts are also applicable to the VPN 3000. Many of these solutions are implemented prior to the in-depth troubleshooting of an IPsec VPN connection. The solutions described here come directly from service requests that the Cisco Technical Support have solved. This document describes the most common solutions to IPsec VPN problems.