here are my configs
crypto ipsec client ezvpn ezvpn
group ezvpn key xxxxxxxx
username xxxxxxxxx password xxxxxxxxxxxxxx
xauth userid mode local
Now, I am a little confused about the "connect auto" command. We have a server built behind this router SiteA that our middleware server at Site B communicates with at night over the VPN tunnel. We have been having problems where at night when the Middleware server tries to communicate with the server it is unable too intiate the ezvpn tunnel on the router and build the vpn tunnel. What we find is in the morning we have to logon to the server and ping out from Site A to intiate the VPN tunnel. Does this seem right? My thought was the connect auto command specifies the VPN tunnel to automatically connect?
As a test we build a ping request on the Server at Site A towards Site B to create interesting traffic and let it run. We did not experience the VPN tunnel drops as before.
So my question is, isn't "connect auto" supposed to prevent this from happening by always keeping the VPN tunnel up?
Second queston is, "crypto isakmp keepalive 30 20 periodic" required to prevent this instead vs the connect auto?
I read the cisco documenation and it makes sense to me, but I wanted someone else's viewpoint or explanation to this.