6

It's giving you that/those error(s) because removing that object would leave the access-list empty but still existing, which is not possible or allowed, and you can't delete an access-list like that (by just saying "no" on its only line). What you need to do is: clear config access-list out2in This will disassociate the access-list with the interface and ...


2

No. The ASA has no ability to test bandwidth/throughput of a giving interface.


1

I'm taking a bit of a guess here. ASA-4-713903: is a VPN peer misbehaving. With a follow on description. In your case you are seeing discards due to packet size, related to the peer. I believe this is an Ikev2 Keepalive mis-match. It appears that your end of the tunnel does not match their end of the tunnel for keepalive packets. Keepalives would be ...


1

After upgrade to newer version 9.8.2 resolved all of the issue. Thanks for your support.


Only top voted, non community-wiki answers of a minimum length are eligible