Pix to Pix EasyVPN

[smolz]

I have a customer that has pix that connects to another pix using EasyVPN. The issue that I am having is that it seems that every couple of weeks the tunnel drops and does not come back up. The only way it appears to come back up is to remove the client pix configuration and put it back in for the tunnel to come back up

[jackko]

rather than re-applying the vpnclient configuration on the client pix, do "clear cry ips sa" and then "clear cry isa sa". if the tunnel can be established after issuing these two commands, i guess the issue is with the server pix not verifying dead peer.

configure isakmp keepalive may resolve the issue.

e.g.

isakmp keepalive []