Unanswered Question
Nov 21st, 2009


I need some technical help while configuring GET-VPN. Getting strucked while configuring this. GM's start time out from their local LAN after it goes to IDLE condition. Need to remove the crypro map from interface and back it again than it working fine. What the things need to configure additionally to make it IDLE to ACTIVE state without removing cryto maps from interfaces.

My key server is in my DC and all GM's are conneted with this KS, how can i configure all GM's with my DR as redundant backup.

Thanks in advance.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dsandre-toh Thu, 05/27/2010 - 10:41

hi,pls post/attach the getvpn portion of config from KS and several GMs, need to review the isa & ips policies, tek, kek timer setup, etc.


This Discussion

Related Content