I am working on implementing a "standard" Remote Access IKEv1 IPSec VPN to a Cisco ASA 5505 (OS 8.4 - base license) and I keep getting the error message:

%ASA-4-713239: IP_Address: Tunnel Rejected: The maximum tunnel count allowed has been reached

even if there are no site-to-site or any additional VPN sessions (remote access VPN, Easy VPN, etc.) currently running or established on the unit.

I have tried to clear the vpn-sessiondb summary and statistics, as well as all ISAKMP / IKE SAs - no luck.

Before the statistics reset, the cumulative count of VPN sessions (remote access + S2S, SSL as well as IKEv1 and IKEv2) was set to > 60.

It is currently set to 0; however, it looks to me as if the OS is still somehow "retaining" the cumulative count of VPN sessions.

(the unit has now been running over almost 14 months...)

It looks to me as if something as OS level is stuck .... does anyone know a workaround for resetting the responsible SW modules without needing to reboot the platform ?

  • 1
    Are you running multiple contexts?
    – Ron Trunk
    Dec 11 '15 at 13:25
  • Did you ever figure this out? Did you just have to reboot it? Jun 21 '18 at 15:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.