Keep alives on IPsec VPN

[alunemanuel]

Hi,

I've configured a multi-site VPN using SDM. I've attached the config for the central router. It's an 1801 running IOS 12.3. There are 877's in the remote offices.

What I'd like to know is that whether it's possible to stop the VPN links being dropped when there is no traffic - i.e. using keep alives or something?

Thanks in advance for any help,

-A

[kaachary]

To enable keepalives on Router:

crypto isakmp keepalive 10 2

*Please rate if helped.

-Kanishka

[alunemanuel]

Thanks for the suggestion but i'm afraid it didn't work. I've just logged on and all the VPN tunnels are down. Any other ideas?

[alunemanuel]

BTW - I just entered the keepalive command on the central router - not on any of the outer ones.

[Arthur Kant]

Did you have any success with this command? My understanding is in order for keepalives to function properly you must have them enabled on both ends. I would like to add to the conversation and ask:

- How can we verify that keep alivess are functioning?

- Is there any security considerations for this feature?