871 router as VPN client

alex goshtaei · ‎01-09-2010

Hi All,

we have 871 as VPN client with 2851 as VPN server. every night I have to type "cryp ipsec client ezvpn xauth" with username and password to activate VPN tunnel. which command make it permanent tunnel without to need type username and password every night?

thanks

Alex

Armando Yesua Garcia Calderon · ‎01-13-2010

Hi, as you know EzVPN tunnels are not supposed to be permanent as L2L ones.

The tunnel is going to be dropped depending on the IPSec SA lifetime set on the router. If there is no interesting traffic passing by through the tunnel the SA is renegotiated and the tunnel is dropped.

I would suggested set a continuous ping on the remote location so to the other peer so that the interesting traffic is guarantee to be always passing through and the tunnel SAs can be renegotiated, hope this helps.

Armando Yesua.