Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

terminating isakmp session

Hello

it seems when a client disconnects from easy vpn server the isakmp session won't terminate at all. As i wrote on a previous post i have problem when a clients disconnects aggressively from easy vpn server ios router: ip local pool won't refresh due to the fact that virtual-access x stays up. Is there any way to automate this?

thank you in advance

3 REPLIES
Cisco Employee

terminating isakmp session

crypto isakmp keepalive

is the command we use to detect peers which no longer are alive (DPD - Dead Peer Detection).

Try it out.

M.

New Member

terminating isakmp session

Hello Marcin

Thanx for your reply. It seems that " set security-association idle-time " was causinng trouble. I have already keepalive command applied on isakmp profile. Now session disconnect immediately as it should.

Hopefully removing this command won't get me into any more troubles.. we'll see :/

TX

Alex

Cisco Employee

terminating isakmp session

Alex,

idle-time is not ideal for all scenarios :-)

While it might work OK for VPN client, we typically say to avoid it for static peers.

You might consider extending your VPN address pool, too? :-)

Marcin

243
Views
0
Helpful
3
Replies
CreatePlease to create content