05-09-2004 04:09 PM
Hi,
We have established a VPN over the Internet. (PIX to PIX). It shows (sh crypto isakmp sa) that the VPN is formed and it allows the traffic as mentioned in the access-list correctly.
Now this VPN keeps vanishing from the sa table.
But as soon as I do a ping from one server (source) to another server (destination) (allowed in the access-list), the VPN comes up.
Although its not harming any of the operations, I would like to know why the VPN status keeps on dropping.
Regards,
Sunil
05-09-2004 04:46 PM
a tunnel will only stay up while there is traffic to support it. so, it is not unlikely that over a weekend, a tunnel may go down if there is no replication traffic or some such between servers that would keep it up
05-09-2004 05:03 PM
Thanks!
But the lifetime for the tunnel is 1 day.
So even after this much lifetime, if the supporting traffic is not there, the tunnel will drop ?
(And this is happening on weekdays as well.Ofcourse there is not much traffic on this tunnel.)
Regards,
Sunil
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide