IPSEC Tunnels always UP

[Tauer Drumond]

Hi all,

I've a ASA 5540 and configured a Site-to-Site VPN, but the IPSEC tunnels frequently goes down, and when I ping a remote host, the tunnels go UP.

Is there a way to keep the tunnels always UP?

Thanks

Tauer

[networker99]

You might be able to enter 0 for the idle timeout however not sure if this is possible. Why not just increase the idle timeout?

[acomiskey]

Configure isakmp keepalives on both ends...

securityappliance(config)#tunnel-group x.x.x.x ipsec-attributes

securityappliance(config-tunnel-ipsec)isakmp keepalive threshold 15 retry 10

[Tauer Drumond]

ok... I'll apply.

I post the result

Thanks

Tauer

[lrm001c474]

Enable dead peer detection with the following group level command:

isakmp keepalive