cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
273
Views
5
Helpful
3
Replies

ISAKMP keepalive differences and periodically only to specific peers

Yoshiaki Saita
Beginner
Beginner

Hello,

What is differences between "crypto isakmp keepalive XX" config on global mode and keepalive under "crypto isakmp profile".
Also i am seeking how to configure periodic keepalive only to specific peer periodically, like "crypto isakmp keepalive XX periodic"

3 Replies 3

you already in right way,
config isakmp profile the set the keepalive, 
set keepalive different for each peer. 
Note:- you must point to isakmp profile in ipsec map.

Hi,

Thank you for your advice. I've just tested config below but keepalive was sent periodically to both sites. I just want to send only first site periodically.


 

!
crypto isakmp keepalive 60 periodic
!
crypto isakmp profile isakmp-prof-site1
   keyring SITE1_KEY
   match identity address XXX.XXX.XXX.XXX 255.255.255.255 
   keepalive 60 retry 5 
   local-address GigabitEthernet1
!
crypto isakmp profile isakmp-prof-site2
   keyring SITE2_KEY
   match identity address YYY.YYY.YYY.YYY 255.255.255.255 
   keepalive 60 retry 5
   local-address GigabitEthernet1
!

 

dfhfgjgkjkkjkjkjkj.png

in R1 I have config keepalive under iskamp for peer R2 
in R2 I have config Keepalive in global mode 

this make R1-R2 exchange Keepalive 
R1-R3 not exchange keepalive 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers