cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
742
Views
0
Helpful
1
Replies

Get VPN Issue

zahid77
Level 1
Level 1

Hi all,

recently i am tryinng to configure get VPn on my routers, where all the sites are connected over MPLS and cisco 3845 router on the HO as Key server and for testing one GM 2811 on the remote site. After configuring it my tunnel is estabslished but afetr 24 hours once the SA expires i have to manully clear it and then tunnle comes up. i have upgraded the IOS also but no luck. for testing purpose i just decresed the timers to 300 sec to verify the results with some other parameters. but still after 5 minutes tunnel go down. i am attaching the logs and configurations if someone suggest anything i would appreciate.

1 Reply 1

ROBERT DERY
Community Member

this is what I have used and it has worked for almost 2 years.

crypto isakmp keepalive 15

!

crypto ipsec profile GDOI-PROFILE

set security-association lifetime seconds 7200

set transform-set GDOI-TSET