Quick confirmation please: L2L VPN SLA- ping outside or inside int?

[jmaxwellUSAF]

Hello.

When setting up an L2L VPN SLA to confirm the remote device is up, the config persistently pings the outside public IP address of that remote device, not any inside remote IP address, correct?

Thank you.

[Rob Ingram]

@jmaxwellUSAF if this relates to your question yesterday to keep a VPN established when the timers expire. You need to ping a device that is defined as interesting traffic (on the inside of the remote firewall). That is unlikely to be the outside IP address of the remote firewall itself.

[jmaxwellUSAF]

This is a completely different question. This is a coincidence. 

Thank you.

[MHM Cisco World · Accepted solution]

Ip sla to outside check remote peer is life 

Tunnel is up and we want to keep it up

Ip sla to inside keep the l2l vpn up.