cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
281
Views
5
Helpful
3
Replies

ISAKMP keepalive differences and periodically only to specific peers

Yoshiaki Saita
Beginner
Beginner

Hello,

What is differences between "crypto isakmp keepalive XX" config on global mode and keepalive under "crypto isakmp profile".
Also i am seeking how to configure periodic keepalive only to specific peer periodically, like "crypto isakmp keepalive XX periodic"

3 Replies 3

MHM Cisco World
VIP Mentor VIP Mentor
VIP Mentor

you already in right way,
config isakmp profile the set the keepalive, 
set keepalive different for each peer. 
Note:- you must point to isakmp profile in ipsec map.

Hi,

Thank you for your advice. I've just tested config below but keepalive was sent periodically to both sites. I just want to send only first site periodically.


 

!
crypto isakmp keepalive 60 periodic
!
crypto isakmp profile isakmp-prof-site1
   keyring SITE1_KEY
   match identity address XXX.XXX.XXX.XXX 255.255.255.255 
   keepalive 60 retry 5 
   local-address GigabitEthernet1
!
crypto isakmp profile isakmp-prof-site2
   keyring SITE2_KEY
   match identity address YYY.YYY.YYY.YYY 255.255.255.255 
   keepalive 60 retry 5
   local-address GigabitEthernet1
!