DPD with multiple ISAKMP policies

[Harutyun Hakobyan]

Hi all,

I have one ISAKMP policy on my router without DPD and need to add second one with DPD.

DPD configuration will be:

crypto isakmp keepalive 10 periodic

So if I add that configuration, will it affect to first policy ?

I want to configure DPD only for second ISAKMP policy.

Thanks

[Flavio Miranda]

Hi @Harutyun Hakobyan

You can play with profile:

"To allow the gateway to send dead peer detection (DPD) messages to the peer, use the keepalive
command in Internet Security Association Key Management Protocol (ISAKMP) profile configuration mode. "

Refers to this link for profile:

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/117259-trouble-ios-ike-00.html

-If I helped you somehow, please, rate it as useful.-