cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
807
Views
0
Helpful
2
Replies

Initiate L2L IPSEC Tunnel on ASA

8pcallahan
Level 1
Level 1

Using ASA 5510s for L2L IPSEC tunnels with DSL connections between sites. These tunnels are for backup connectivity if the primary Metro connection goes down. As long as the Metro is up no traffic will flow across the IPSEC tunnels because there is no interesting traffic to initiate the tunnel.

Is there a way other than defining interesting traffic to keep the IPSEC tunnels up at all times?

I've set the VPN idle time out to none which should keep them up after they are initiated. I'd rather not have to pull my Metro connections to force the tunnels up and I don't want to wait for a Metro outage to ensure they are working.

Thanks!

2 Replies 2

Marwan ALshawi
VIP Alumni
VIP Alumni

if u want it up all time

use GRE over IPsec and use a routing protocol between ur VPN peers

in this case u gonna keep ur connection up

but if u have routing over ur metro

becare from makeing a conflect or ur the vpn being the prefered

good luck

rate if helps

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: