Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

1801 + EZVPN - any way to keep tunnel up all the time?

I have an 1801 working with EZVPN, however the router will only make a connection back to our main office when one of the ethernet ports is up. We aren't using a switch on site and I would like the router to be connected 24/7 even if no one is connected.

Is it possible to configure a loopback interface or similar assigned as the inside interface to force the tunnel up all the time?

2 REPLIES
New Member

Re: 1801 + EZVPN - any way to keep tunnel up all the time?

One trick we use is to setup the router to sync with an NTP server at the main site. Also make sure you use the "inside" interface as the source for the NTP traffic.

You can also try using "isakmp keepalive 30 3" (configure it on the head-end too). That will allow keepalive packets to be sent and it may keep the connection up.

Gold

Re: 1801 + EZVPN - any way to keep tunnel up all the time?

Try dead peer detection with command

crypto isakmp keepalive 10 2

on both endpoints

M.

Rate helpful posts

216
Views
0
Helpful
2
Replies
CreatePlease login to create content