DMVPN - IPSEC - no disconnects between 3 to 5 seconds

[mguzman4158]

Hi all,

I have a DSL line connection at the spoke site running DMVPN back to HQ (running eigrp stub).  I thought that if you lose for a second the connection on the DSL, the tunnels will drop, but I was testing it today and I disconnected the DSL line for about 3 to 5 seconds and tunnels do not drop, if time lapses beyond the 5 second mark, then eigrp and the tunnels drop and eigrp reconvergences.  Does this make any sense? Why the tunnels won't drop a soon as the DSL line is out? Wouldn’t this be a security risk?  Can this behaviour be change?

Thank you very much for your inputs. 

[Marcin Latosiewicz]

Hi,

I can't have a test right now but...

Do you see tunnel interface line protocol going down when you disconnect the DSL line?

If the line stays up you will need to wait until IKE/EIGRP/NHRP detects the fault,whichever comes first.

Marcin