Keep alives on IPsec VPN

alunemanuel · ‎03-13-2007

Hi,

I've configured a multi-site VPN using SDM. I've attached the config for the central router. It's an 1801 running IOS 12.3. There are 877's in the remote offices.

What I'd like to know is that whether it's possible to stop the VPN links being dropped when there is no traffic - i.e. using keep alives or something?

Thanks in advance for any help,

-A

kaachary · ‎03-13-2007

To enable keepalives on Router:

crypto isakmp keepalive 10 2

*Please rate if helped.

-Kanishka

alunemanuel · ‎03-13-2007

Thanks for the suggestion but i'm afraid it didn't work. I've just logged on and all the VPN tunnels are down. Any other ideas?

alunemanuel · ‎03-13-2007

BTW - I just entered the keepalive command on the central router - not on any of the outer ones.

Arthur Kant · ‎04-03-2007

Did you have any success with this command? My understanding is in order for keepalives to function properly you must have them enabled on both ends. I would like to add to the conversation and ask:

- How can we verify that keep alivess are functioning?

- Is there any security considerations for this feature?