I have setup a basic site to site VPN, one side dynamic one side static. When using SDM, there is a 'test connecton' button, when I hit that button it tests the VPN, and it says that it works, and the vpn does work. At some point, the VPN will drop, and never re-establish.
The only way to get the VPN to re-establish is to press the test button in SDM on the dynamic side... So I am convinced this is some sort of issue on that side, because the static side doesn't know about the dynamic side until it get's an establish request, which it never gets (did a debug on the static side)
Are there routing statements in the dynamic side router? If so can you post them?
If the tunnel does not normally re-establish on its own, it suggests that there is not interesting traffic. Are you sure that something is attempting to send traffic from the dynamic side to the static side? If so can you describe what that is?
This is what I assumed as well, no interesting traffic so the link dropped off. Is there anyway to tell the link to be persistent? I was attempting a ping from the dynamic side to the static side and it wasn't establishing -- until I did an extended ping, and forced it to use the inside interface as it's source address and the tunnel came up.
Because only the dynamic side can establish the link, it would be great if the dynamic side would be persistent.
In most of the IPSec VPNs that I have done we have run a dynamic routing protocol over the tunnel. The hello traffic of the protocol has been effective in keeping the tunnel active. If you are not running a routing protocol is there something that can be done at the dynamic side to generate periodic traffic (perhaps a cron job that would send a ping)?
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...