IP SLA

[SajeshB]

Hi

I have a Ipsec between my cisco router and a cisco asa managed by other team. By any chance is there a way to configure a monitoring between the peer device for udp port 500 or the traffic inside the tunnel. With out configuring anything/ip sla responder on the cisco asa end.

This is because we have multiple issue with the same Ipsec peer where we ended up seeing no upd 500 packet from peer or the there is no decap packet from peer. This implementation is for monitoring or to provide some kind of monitoring mechanism to IPSEC tunnel.

[balaji.bandi]

if that fails your tunnel also will disconnected right ?

on what basis you think that is the issue ?

Just putting thought how we can do this - may be you can try setup EEM script to monitor and make a logs.

#traceroute x.x.x.x numeric probe 1 port 500

[MHM Cisco World]

You can run IP SLA from local LAN to remote LAN, and since this traffic is encrypt by IPSec tunnel then the traffic by default will use UDP 500.