ISAKMP keepalive differences and periodically only to specific peers

[Yoshiaki Saita]

Hello,

What is differences between "crypto isakmp keepalive XX" config on global mode and keepalive under "crypto isakmp profile".
Also i am seeking how to configure periodic keepalive only to specific peer periodically, like "crypto isakmp keepalive XX periodic"

[MHM Cisco World]

you already in right way,
config isakmp profile the set the keepalive, 
set keepalive different for each peer. 
Note:- you must point to isakmp profile in ipsec map.

[Yoshiaki Saita]

Hi,

Thank you for your advice. I've just tested config below but keepalive was sent periodically to both sites. I just want to send only first site periodically.

---

!
crypto isakmp keepalive 60 periodic
!
crypto isakmp profile isakmp-prof-site1
   keyring SITE1_KEY
   match identity address XXX.XXX.XXX.XXX 255.255.255.255 
   keepalive 60 retry 5 
   local-address GigabitEthernet1
!
crypto isakmp profile isakmp-prof-site2
   keyring SITE2_KEY
   match identity address YYY.YYY.YYY.YYY 255.255.255.255 
   keepalive 60 retry 5
   local-address GigabitEthernet1
!

[MHM Cisco World]

in R1 I have config keepalive under iskamp for peer R2 
in R2 I have config Keepalive in global mode 

this make R1-R2 exchange Keepalive 
R1-R3 not exchange keepalive