ASA IKEv2 DPD timer settings

[TheSlyOne]

I can not for the life of me see where I set the DPD timers when using IKEv2 on the ASA.  All of the Documentation and guides seem to only talk about it using IOS and/or FlexVPN.  does anyone know what the command is?

[Rob Ingram · Accepted solution]

Hi,
I think it's enabled as default for L2L and RA VPNs on the ASA. It's configured under the tunnel-group

tunnel-group XXXXX ipsec-attributes
isakmp keepalive threshold X retry X

HTH

[TheSlyOne]

Thanks RJI,  I will give it a try.  It's L2L that I am using.  does the isakmp setting apply to IKEv2?  It wouldn't surprise me if it did as Cisco ASA's are inconsistent.  I sooooo much prefer setting up VPN's on IOS. 

[Rob Ingram]

It is the same command for both IKEv1 and IKEv2. Agreed, I much prefer VPNs on IOS routers also.

[TheSlyOne]

Yup that did it.  It doesn't help that isakmp is supposed to only be IKEv1, so that is misleading.