Keep alives on IPsec VPN

Unanswered Question
Mar 13th, 2007

Hi,

I've configured a multi-site VPN using SDM. I've attached the config for the central router. It's an 1801 running IOS 12.3. There are 877's in the remote offices.

What I'd like to know is that whether it's possible to stop the VPN links being dropped when there is no traffic - i.e. using keep alives or something?

Thanks in advance for any help,

-A

Attachment: 
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
kaachary Tue, 03/13/2007 - 06:49

To enable keepalives on Router:

crypto isakmp keepalive 10 2

*Please rate if helped.

-Kanishka

alunemanuel Tue, 03/13/2007 - 11:56

Thanks for the suggestion but i'm afraid it didn't work. I've just logged on and all the VPN tunnels are down. Any other ideas?

alunemanuel Tue, 03/13/2007 - 11:57

BTW - I just entered the keepalive command on the central router - not on any of the outer ones.

Arthur Kant Tue, 04/03/2007 - 10:14

Did you have any success with this command? My understanding is in order for keepalives to function properly you must have them enabled on both ends. I would like to add to the conversation and ask:

- How can we verify that keep alivess are functioning?

- Is there any security considerations for this feature?

Actions

This Discussion