How to view isakmp keepalive threshold for a tunnel group

Alan Inman — Wed, 27 May 2020 13:35:06 GMT

In CLI on ASA 5555-X I cannot figure out which command to use to see the "isakmp keepalive threshold" value set on a tunnel. I know the default is "threshold 10 retry 2" but I want to see if it has been changed on a specific tunnel and I seem to get everything else but this info. I have looked thoroughly through the Cisco CLI guide but I'm overlooking it or it's not there.

SMVASA1# show isakmp sa detail (closest I've come to getting info I'm looking for, but no keepalive value)

Here is sample output from another site but doesn't list any commands

tunnel-group 10.10.10.10 ipsec-attributes
ikev1 pre-shared-key *****
peer-id-validate req
no chain
no ikev1 trust-point
isakmp keepalive threshold 10 retry 2
no ikev2 remote-authentication
no ikev2 local-authentication

Thank you,

Alan

Re: How to view isakmp keepalive threshold for a tunnel group

RossCook37717 — Thu, 25 Mar 2021 21:53:45 GMT

Hey Alan,

I'm sure you know the answer now, but for any future searchers, the command is:

sh run all tunnel-group

topic How to view isakmp keepalive threshold for a tunnel group in Network Security

How to view isakmp keepalive threshold for a tunnel group

Re: How to view isakmp keepalive threshold for a tunnel group