Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
@CHISHIUNG it sounds like you are describing stateless failover, but you want stateful failover. Stateful failover synchronises the SADB between the active and standby peers, so the remote peer maintains its state with either of the active or standby...
@Stephen Rivera that is incorrect, using DHCP snooping on the switches is supported and recommended. It is used to collect DHCP information on the endpoints connected to the switch, which is then sent to ISE in RADIUS accounting packets and used by I...
@Mushtaq77 this cisco document states that Egypt does restrict VPN services from home connections not business connections. The document is related to Cisco Umbrella, but Umbrella does use a Site-to-Site IPSec VPN. https://www.cisco.com/c/en/us/suppo...
@Ammartehsein so the tunnel now appears up, how often does it stop working? Does it stop during a rekey? What are the configured timers on both the hub and spoke? Is DPD configured?
Provide the configuration of both hub and spoke.
Provide "show crypt...
@Ammartehsein has this tunnel worked before? Has there been any changes?
Shut the tunnel interface on the spoke, clear the SAs on the spoke and hub, turn on isakmp debugs and then re-enable the tunnel interface on the spoke. Provide the full output o...