IPSEC Tunnels always UP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2009 07:31 AM - edited 03-11-2019 08:18 AM
Hi all,
I've a ASA 5540 and configured a Site-to-Site VPN, but the IPSEC tunnels frequently goes down, and when I ping a remote host, the tunnels go UP.
Is there a way to keep the tunnels always UP?
Thanks
Tauer
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2009 09:25 AM
You might be able to enter 0 for the idle timeout however not sure if this is possible. Why not just increase the idle timeout?

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2009 09:42 AM
Configure isakmp keepalives on both ends...
securityappliance(config)#tunnel-group x.x.x.x ipsec-attributes
securityappliance(config-tunnel-ipsec)isakmp keepalive threshold 15 retry 10
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2009 10:19 AM
ok... I'll apply.
I post the result
Thanks
Tauer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2009 06:00 PM
Enable dead peer detection with the following group level command:
isakmp keepalive
