Cisco Systems IPSEC Link Goes Down

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
IPSEC Link Goes Down machine 08-03-06
Posted by machine on August 3, 2006, 6:49 am
Please log in for more thread options
Hi There,

I am having a problem with an IPSEC link, it seems to go down and will not
come back up for about an hour. I have added command 'crypto isakmp
keepalive 10 3 periodic' command and this does seem to help but the link may
still go down for a few mins!!

If I run a 'clear cry sa' command its brings the link up again within
seconds!!

Thanks
Jamie



Posted by christian koch on August 3, 2006, 9:02 am
Please log in for more thread options
What model and software version?

are you using crypto maps?

are your logs picking up any info?


machine wrote:
> Hi There,
>
> I am having a problem with an IPSEC link, it seems to go down and will not
> come back up for about an hour. I have added command 'crypto isakmp
> keepalive 10 3 periodic' command and this does seem to help but the link may
> still go down for a few mins!!
>
> If I run a 'clear cry sa' command its brings the link up again within
> seconds!!
>
> Thanks
> Jamie


Posted by packet_ace on August 3, 2006, 12:13 pm
Please log in for more thread options
Using GRE on this IPSec connection? If so, consider using IKE.


machine wrote:
> Hi There,
>
> I am having a problem with an IPSEC link, it seems to go down and will not
> come back up for about an hour. I have added command 'crypto isakmp
> keepalive 10 3 periodic' command and this does seem to help but the link may
> still go down for a few mins!!
>
> If I run a 'clear cry sa' command its brings the link up again within
> seconds!!
>
> Thanks
> Jamie


Similar ThreadsPosted
IPSEC Link Goes Down August 3, 2006, 6:49 am
optimal config for IPSEC over satellite link? February 2, 2006, 1:13 am
Failing Phase2 Auth - IPSec - All IPSec SA proposals found unacceptable November 26, 2008, 7:37 pm
IPsec within L2TP over IPsec - PIX. July 23, 2006, 6:14 pm
4506 acting as LNS with L2TP over IPsec and IPsec over L2TP. February 15, 2007, 5:47 pm
4506 acting as LNS with L2TP over IPsec and IPsec over L2TP. February 20, 2007, 4:00 am
804 LAN to LAN Link? August 31, 2005, 12:47 pm
Link down due to STP June 18, 2008, 4:05 am
Fail over from a LAN to a WAN link September 26, 2005, 5:54 pm
Redunant link and BGP January 29, 2006, 8:44 am
Logging link down September 26, 2006, 1:54 am
c2960 and GLC-SX-MM, no link December 10, 2007, 3:07 pm
VPN Lan-to-lan via Wireless Link March 23, 2008, 5:59 am
remove vpn link PIX 501 June 25, 2008, 8:31 am
Redundant wan link July 10, 2008, 10:10 am