cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
503
Views
0
Helpful
1
Replies

How to re-establish tunnel with LAN to LAN VPN

jeff.vargas
Level 1
Level 1

I've got a site that drops off and no longer sends VPN traffic. When I use the "sh crypto ipsec sa" command I see no "PKTS ENCAP" or no "PKTS encrypt". If I reboot the router everything starts working again. Is there a way to reset the tunnels using the command line so I don't have to reboot the router?

1 Reply 1

a.alekseev
Level 7
Level 7

you can try enable "crypto isakmp keepalive 20"

also "crypto isakmp invalid-spi-recovery"

http://cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801a7a76.html

If you want to reset VPN connection you can use

on routers

clear crypto sa

on PIX/ASA

clear crypto isakmp sa

clear crypto ipsec sa

Do not miss "sa" on PIX/ASA!!!

Review Cisco Networking for a $25 gift card