Cisco 837 - VPN only connects if PC is turned on on LAN

[whiteford]

We have an Cisco 837 ADSL router that connects to our Cisco Concentrator. The only way I can get the tunnel up is if a user turns there PC on that is plugged into the ethernet port on the back of the 837. If it's off and the router is rebooted the tunnel stays down. Why does it need a PC to bring the tunnel up?

[mattiaseriksson]

You are using the easy vpn feature?

Verify these statements in the config:

crypto ipsec client ezvpn XXX

connect auto

[whiteford]

It's CLI I'm using:

I have a crypto ipsec transform-set xxx

[mattiaseriksson]

Ok, so you also have a crypto map containing "set peer" and "match address" statements?

Then you use a normal IPSec tunnel that will only initiate when it sees traffic defined as interesting in the crypto ACL (match address).

Check out the EasyVPN feature if you want the router to connect automatically.

Example: http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080809222.shtml