cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
613
Views
5
Helpful
3
Replies

ISAKMP SA is not clearing even Remote Router is down IPSEC- LAN to LAN

arun428750
Level 1
Level 1

 

IPSEC_LAN-LAN: ISAKMP-SA is not clearing for some of the site even peer router is down. 
But still HO Router is sending--> ISAKMP<206> Identity Protection (Main Mode).

I have DPD: crypto isakmp keepalive 40 20 periodic

But still observing HO Router is keep sending packets for IKE1. Keepalive is configured globally to the HO

3 Replies 3

Hi, I do the test, 
if you config keepalive after the ISAKMP is active the keepalive not effect, 
try clear isakmp and then check the keepalive again. 

Hi Sir, Keepalive is set only in HO Router and its global configuration. Keepalive already configured in HO Router in beginning and we have more than 400 remotes.