cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
343
Views
0
Helpful
1
Replies

crypto isakmp keepalive is global, not per peer

crhodes
Level 1
Level 1

We have an IOS router with links to multiple IPsec peers.

One of these IPsec peers is a customer router which is used by them to connect to us as well as other IPsec peers.

They have "crypto isakmp keepalive 120" configured on their router but we don't have this command configured on ours. (causing us to hit bug CSCdw58489)

We do not want to configure this parameter because most of our IPsec peers are connected via ISDN and we don't want the ISDN calls kept up with keepalive messages.

It appears that the crypto isakmp keepalive is a global configuration parameter.

Is there any way to configure this parameter per IPsec peer rather than globally?

Thanks in advance for any info.

1 Reply 1

hadbou
Level 5
Level 5

Currently this is not possible, you can configure this only as a global parameter.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: