Keeping a site to site tunnel up indefinitely
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
|||||||||||||||||||
|
Posted by psychogenic on January 12, 2007, 3:48 pm
Please log in for more thread options to site vpn tunnel up at all times even when no actual traffic is being sent across? aside from doing a ocntinuous ping. :( | |||||||||||||||||||
|
Posted by Walter Roberson on January 12, 2007, 3:56 pm
Please log in for more thread options It depends on the equipment (and software rev). Some allow you to set keep-alives, others don't. | |||||||||||||||||||
|
Posted by psychogenic on January 12, 2007, 3:59 pm
Please log in for more thread options
Walter Roberson wrote: > >`Assuming links are good on both sides, is there a way to keep a site
> >to site vpn tunnel up at all times even when no actual traffic is being > >sent across? aside from doing a ocntinuous ping. :( >
> It depends on the equipment (and software rev). Some allow you > to set keep-alives, others don't. This is between a 2600 router and ASA 5510. | |||||||||||||||||||
|
Posted by Walter Roberson on January 12, 2007, 4:02 pm
Please log in for more thread options
>Walter Roberson wrote:
>> >`Assuming links are good on both sides, is there a way to keep a site
>> >to site vpn tunnel up at all times even when no actual traffic is being >> >sent across? aside from doing a ocntinuous ping. :( >> It depends on the equipment (and software rev). Some allow you
>> to set keep-alives, others don't. >This is between a 2600 router and ASA 5510.
The following might help: http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gtdpmo.htm | |||||||||||||||||||
|
Posted by on January 13, 2007, 11:41 pm
Please log in for more thread options
Walter Roberson wrote: >
> >Walter Roberson wrote:
> >> >`Assuming links are good on both sides, is there a way to keep a site
> >> >to site vpn tunnel up at all times even when no actual traffic is being > >> >sent across? aside from doing a ocntinuous ping. :( >
> >> It depends on the equipment (and software rev). Some allow you
> >> to set keep-alives, others don't. >
> >This is between a 2600 router and ASA 5510.
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_7/gtdpmo.htm
> The following might help: > > That is interersting, thanks. It's not clear what the OP is looking for. This does not keep the SA's up. There are seceral tools that might be used to persuate a router to generate periodic traffic. NTP 1. ## ntp server some.address.across.vpn don't point it at an actual server as ntp sends little traffic one it is happy. 2. Create GRE tunnel interfaces and point them across the vpn, enable keepalives with the desired interval. 3. ## This one is the most official but I think needs certain feature set. Use SAA to send traffic, say pings, to real or non-existant hosts across vpn. 4. ## wouldn't fancy this one much. bgp peer would do too. 5. I think certain feature sets have "cron". Schedule pings. | |||||||||||||||||||
>to site vpn tunnel up at all times even when no actual traffic is being
>sent across? aside from doing a ocntinuous ping. :(