From: Jerry Toomey (jetoomey@xxxxxxxxx)
Date: Mon Nov 05 2001 - 20:34:41 GMT-3
This looks like a classic PIX problem. Go to each pix and put in:
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323
0:05:00 sip 0:30:00 sip_media 0:02:00
then tweek those xlate timeouts and you'll probably see a correspondence.
Jerry
--- Chuck Church <cchurch@MAGNACOM.com> wrote:
> Whoops. Sorry I didn't think about it. The EIGRP hellos should be
> preventing any timeouts. Is there a WAN and more routers between the
> PIXs,
> or just back to back via ethernet?
>
> Chuck
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Church, Chuck
> Sent: Monday, November 05, 2001 3:59 PM
> To: 'Erich Borchert'; 'ccielab'
> Subject: RE: GRE
>
>
> Do tunnels use keepalives? Could be the timeouts on Pix's, either the
> xlate
> timeout, or the dynamic ACLs. Check the various timers. Might be a
> correlation.
>
> Chuck
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> Erich Borchert
> Sent: Monday, November 05, 2001 3:52 PM
> To: ccielab
> Subject: GRE
>
>
> Has anyone seen a GRE tunnel iniated by two 72xx's drop every 3-4 hours,
> I
> know this because eigrp over the tunnel interfaces inject a message to
> the
> log
> file about that neighbor going down.
>
>
> 7200-----PIX--------PIX-----7200
=====
Jerry Toomey of http://www.wansend.com can be reached at 949-439-4685
This archive was generated by hypermail 2.1.4 : Fri Jun 21 2002 - 06:45:04 GMT-3