Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA55xx IPSec

First, I'm not Bilingual so excuse my English.

Dear Sirs,

Please teach IKE SA and IPSec SA of IPSec.

When IPSec SA was connected with IKE SA, the setting concerning IPSec SA was changed.

Then, it was able to be understood that the connection of IPSec SA cut,

and the connection of IKE SA cut at the same time.

Is it normal operation?

Best regards,

1 REPLY
Bronze

Re: ASA55xx IPSec

When there is traffic and there is no IPSEC SA, the SA will be renegotiated using the existing IKE SA. When the IKE SA is not there, this one will be created first and then the IPSEC SA will be created. But if there is no traffic, the SA's should not be re-established.

97
Views
0
Helpful
1
Replies