I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message:
%ASA-4-713239: IP_Address: Tunnel Rejected: The maximum tunnel count allowed has been reached
even if there are no site-to-site or any additional VPN sessions (remote access VPN, Easy VPN, etc.) currently running or established on the unit.
I have tried to clear the
vpn-sessiondb summary and statistics, as well as all ISAKMP / IKE SAs - no luck.
Before the statistics reset, the cumulative count of VPN sessions (remote access + S2S, SSL as well as IKEv1 and IKEv2) was set to > 60.
It is currently set to 0; however, it looks to me as if the OS is still somehow "retaining" the cumulative count of VPN sessions.
(the unit has now been running over almost 14 months...)
It looks to me as if something as OS level is stuck .... does anyone know a workaround for resetting the responsible SW modules without needing to reboot the platform ?