11-10-2008 12:17 AM - edited 02-21-2020 03:05 AM
We have about 8 Cisco 1801s deployed using broadband and the ezvpn client configuration back to head office. One of our sites keeps experiencing intermittent dropouts of its ADSL interface which we are investigating. However the problem is compounded because when the atm interface comes back up the ipsec tunnel does not. I have to log on to the public address of the router and issue the 'clear crypto ipsec client ezvpn' command. Below is samples of the relevant configuration. Is there a way to force the tunnel to clear down and reconnect if the atm changes state?
crypto ipsec client ezvpn phntvpn
connect auto
group gables key #####
mode network-extension
peer x.x.x.x
username gablesUser password ######
xauth userid mode local
interface ATM0
mtu 1478
no ip address
no ip mroute-cache
no atm ilmi-keepalive
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
interface Vlan1
ip address 10.177.8.182 255.255.255.248
ip helper-address 10.177.20.19
ip tcp adjust-mss 1452
no autostate
crypto ipsec client ezvpn phntvpn inside
interface Dialer1
description "ADSL Interface"
ip address x.x.x.x 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation ppp
dialer pool 1
no cdp enable
ppp authentication chap callin
ppp chap hostname #########
ppp chap password 0 ########
crypto ipsec client ezvpn phntvpn
11-14-2008 11:16 AM
Yes, you can force the tunnel to clear down and reconnect if the atm changes state.To specify automatic tunnel control on a Cisco Easy VPN remote device, you need to configure the "crypto ipsec client ezvpn" command and then the "connect auto" subcommand.To disconnect or reset a particular tunnel, you should use the clear crypto ipsec client ezvpn command.
11-14-2008 11:37 PM
Try enabling DPD if its not enabled alredy:
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t8/feature/guide/ftunity.html#wp1051234
Regards
Farrukh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide