Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

DPD on client-2-site IPSEC VPN

Hello

I have configured the both client-2-site and site-2-site IPSEC tunnels on my ASR routers.

Although I have the keepalive feature enabled on the router, the client-2-site tunnels are not disconnected in case of client to router connectivity breakdown.

At the same time site-2-site tunnels are being disconnected by the DPD.

The DPD is configured as follows

"crypto isakmp keepalive 60 10 periodic"

Does anybody can help me with this issue?

Thank you in advance

Regards

Lukasz

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

DPD on client-2-site IPSEC VPN

Czesc Lukasz,

We had two common culprits recently:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCto16377

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCty52047

That COULD explain what you're seeing. Check them out, if you're running something newer - we might as well have a TAC case open so we can pull debugs and see.

M.

2 REPLIES
Cisco Employee

DPD on client-2-site IPSEC VPN

Czesc Lukasz,

We had two common culprits recently:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCto16377

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCty52047

That COULD explain what you're seeing. Check them out, if you're running something newer - we might as well have a TAC case open so we can pull debugs and see.

M.

New Member

DPD on client-2-site IPSEC VPN

Hello Marcin

Upgrade helped so we had met a bug.

Many thanks for your help.

Regards

Lukasz

200
Views
0
Helpful
2
Replies