cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
424
Views
0
Helpful
3
Replies

terminating isakmp session

alexbak79
Level 1
Level 1

Hello

it seems when a client disconnects from easy vpn server the isakmp session won't terminate at all. As i wrote on a previous post i have problem when a clients disconnects aggressively from easy vpn server ios router: ip local pool won't refresh due to the fact that virtual-access x stays up. Is there any way to automate this?

thank you in advance

3 Replies 3

Marcin Latosiewicz
Cisco Employee
Cisco Employee
crypto isakmp keepalive

is the command we use to detect peers which no longer are alive (DPD - Dead Peer Detection).

Try it out.

M.

Hello Marcin

Thanx for your reply. It seems that " set security-association idle-time " was causinng trouble. I have already keepalive command applied on isakmp profile. Now session disconnect immediately as it should.

Hopefully removing this command won't get me into any more troubles.. we'll see :/

TX

Alex

Alex,

idle-time is not ideal for all scenarios :-)

While it might work OK for VPN client, we typically say to avoid it for static peers.

You might consider extending your VPN address pool, too? :-)

Marcin

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: