Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

How to re-establish tunnel with LAN to LAN VPN

I've got a site that drops off and no longer sends VPN traffic. When I use the "sh crypto ipsec sa" command I see no "PKTS ENCAP" or no "PKTS encrypt". If I reboot the router everything starts working again. Is there a way to reset the tunnels using the command line so I don't have to reboot the router?

1 REPLY

Re: How to re-establish tunnel with LAN to LAN VPN

you can try enable "crypto isakmp keepalive 20"

also "crypto isakmp invalid-spi-recovery"

http://cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801a7a76.html

If you want to reset VPN connection you can use

on routers

clear crypto sa

on PIX/ASA

clear crypto isakmp sa

clear crypto ipsec sa

Do not miss "sa" on PIX/ASA!!!

170
Views
0
Helpful
1
Replies
CreatePlease to create content