new to this crypto ipsec.I have four sites set up for vpn connection.every now and then a site drops off and i loose communication locally but can still hit the vpn. after rebooting router 819, communication comes back. one site is the head and i have the other to communicate with head. an example of my typical config is below.
crypto isakmp policy 1
encr aes
hash md5
authentication pre-share
group 2
crypto isakmp key test1 xxxxxxxx address xx.xx.xxx.xxx
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10
!
!
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
mode tunnel
!
!
!
crypto map test1_VPN_Tunnel 10 ipsec-isakmp
set peer xx.xx.xxx.xxx
set transform-set ESP-3DES-MD5
match address headrouter
I am missing something? should i be using aes/sha
