05-31-2024 12:05 PM - edited 05-31-2024 12:06 PM
Solved! Go to Solution.
06-02-2024 06:17 AM
No need to config Router as redponder
Also you need one more command
Ip sla schedule <ip sla number> life forever start now
06-02-2024 06:27 AM - edited 06-02-2024 06:28 AM
@MHM Cisco World Is this how we have configured the values as default? Or should I not configure anything and it will take the default values?
06-02-2024 06:39 AM
As I mention, if you dont config anything the ip sla will use default value.
No need to change it
MHM
06-03-2024 03:20 AM
Tunnels have been stable so far after configuring ip sla on the Cisco side
06-02-2024 01:06 AM
Hello
As far as i am aware the PA's do not support IPSLA however they do allow tunnel monitoring which you can enable on the creation of the tunnel as/when you add your ike/ipsec crypto profiles.
Optionally you can use its default network monitor profile or create a new one. -->here
06-02-2024 03:07 AM
Thank you for your input, Sir.
I am going to configure IP sla on the cisco router since the clients are behind the cisco router. I shall let you know if it doesn't work.
06-02-2024 04:24 PM
Hello
re-reading this OP
This is not down to any ipsla monitoring or the lack of it- it down to how to dynamically bring up the tunnel as/when if it ever failed or if interesting traffic is initiated or not
Can elaborate on the PA side of things regards the vpn creation -ike/ipsec profiles and if the tunnel is statically addressed or not
06-02-2024 07:47 PM
Do you want to look at the configuration on the PA side?
06-03-2024 03:18 AM
Hello
can you share (in a file)
sh vpn tunnel
sh vpn gateway
sh vpn flow
sh vpn flow name xx
sh vpn ike-sa detail gateway xx
sh vpn ipsec-sa tunnel x
sh vpn ipsec-sa sum
06-03-2024 03:23 AM
Hello sir,
Actually, i configured ip sla on the Cisco side... Tunnels look stable now . I would still keep an eye on the connectivity. If they do down again, I shall let u know. Ok?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide