Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Pix to Pix EasyVPN

I have a customer that has pix that connects to another pix using EasyVPN. The issue that I am having is that it seems that every couple of weeks the tunnel drops and does not come back up. The only way it appears to come back up is to remove the client pix configuration and put it back in for the tunnel to come back up

1 REPLY
Gold

Re: Pix to Pix EasyVPN

rather than re-applying the vpnclient configuration on the client pix, do "clear cry ips sa" and then "clear cry isa sa". if the tunnel can be established after issuing these two commands, i guess the issue is with the server pix not verifying dead peer.

configure isakmp keepalive may resolve the issue.

e.g.

isakmp keepalive []

105
Views
0
Helpful
1
Replies
CreatePlease to create content