From: Richard Dumoulin (richard.dumoulin@vanco.es)
Date: Fri Apr 30 2004 - 04:35:24 GMT-3
You have IPSec keepalives also. The command is "crypto isakmp keepalive".
Also, if yoou are not running a routing protocol on the IPSec tunnels why
are you using GRE ?
--Richard
-----Original Message-----
From: ccielab@cox.net [mailto:ccielab@cox.net]
Sent: viernes, 30 de abril de 2004 2:36
To: ccielab@groupstudy.com
Subject: OT: GRE Ipsec Tunnel Keepalive
Sorry for the off topic, but I need some opinions.
I have multiple gre tunnels between sites and I use ipsec to encrypt traffic
over them. When I need something encrypted, I point a static route to the
tunnel interfaces. Works great, however, the ipsec sa expires after 24 hour,
and there is s slight delay upon re-establishment of the ipsec ike sa. I
need the ipsec sa to be permenantly established. Should I run a routing
protocol between the tunnel interfaces? Any other ideas will be appreciate.
Thanks,
This archive was generated by hypermail 2.1.4 : Mon May 03 2004 - 19:48:58 GMT-3