Keep alives on IPsec VPN

Unanswered Question
Mar 13th, 2007
User Badges:


I've configured a multi-site VPN using SDM. I've attached the config for the central router. It's an 1801 running IOS 12.3. There are 877's in the remote offices.

What I'd like to know is that whether it's possible to stop the VPN links being dropped when there is no traffic - i.e. using keep alives or something?

Thanks in advance for any help,


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
kaachary Tue, 03/13/2007 - 06:49
User Badges:
  • Cisco Employee,

To enable keepalives on Router:

crypto isakmp keepalive 10 2

*Please rate if helped.


alunemanuel Tue, 03/13/2007 - 11:56
User Badges:

Thanks for the suggestion but i'm afraid it didn't work. I've just logged on and all the VPN tunnels are down. Any other ideas?

alunemanuel Tue, 03/13/2007 - 11:57
User Badges:

BTW - I just entered the keepalive command on the central router - not on any of the outer ones.

Arthur Kant Tue, 04/03/2007 - 10:14
User Badges:

Did you have any success with this command? My understanding is in order for keepalives to function properly you must have them enabled on both ends. I would like to add to the conversation and ask:

- How can we verify that keep alivess are functioning?

- Is there any security considerations for this feature?


This Discussion