Hot Downloads

Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1
  • 2

TOPIC: VPN Tunnel Wake Up.

VPN Tunnel Wake Up. 8 years 5 months ago #25766

  • caelwind
  • caelwind's Avatar
  • Offline
  • New Member
  • Posts: 3
  • Karma: 0
I just setup a site to site ipsec VPN tunnel to a client site. After a while of no traffic (overnight) I have to bring the tunnel up again by creating traffic on my side. Is there a way to let the traffic from the client side to bring up the tunnel?

Thanks,
Caelwind
The administrator has disabled public write access.

Re: VPN Tunnel Wake Up. 8 years 5 months ago #25767

  • Elohim
  • Elohim's Avatar
  • Offline
  • Senior Member
  • Posts: 220
  • Karma: 0
Either side can bring up the tunnel. Set up something to send ping across.

I just setup a site to site ipsec VPN tunnel to a client site. After a while of no traffic (overnight) I have to bring the tunnel up again by creating traffic on my side. Is there a way to let the traffic from the client side to bring up the tunnel?

Thanks,
Caelwind
The administrator has disabled public write access.

Re: VPN Tunnel Wake Up. 8 years 5 months ago #25772

  • Chris
  • Chris's Avatar
  • Offline
  • Administrator
  • Posts: 1446
  • Thank you received: 13
  • Karma: 8
caelwind,

As Elohim mentioned, either side can bring the tunnel up if both sides are using Static IP Addresses. If the client side is using dynamic IP addressing, then only the central site can bring up the IPSec tunnel.


Cheers,
Chris Partsenidis.
Founder & Editor-in-Chief
www.Firewall.cx
The administrator has disabled public write access.

Re: VPN Tunnel Wake Up. 8 years 5 months ago #25773

  • skylimit
  • skylimit's Avatar
  • Offline
  • Distinguished Member
  • Posts: 158
  • Thank you received: 1
  • Karma: 0
caelwind,

As Elohim mentioned, either side can bring the tunnel up if both sides are using Static IP Addresses. If the client side is using dynamic IP addressing, then only the central site can bring up the IPSec tunnel.


Cheers,

Hi Chris,

Just out of curiousity, is there a command or a way to bring the tunnel linking the two sites up assuming both ends are using a static IP. i.e. apart from manually pinging the tunnel end IP.

Many thanks
"...you are never too old to learn" anon
The administrator has disabled public write access.

Re: VPN Tunnel Wake Up. 8 years 5 months ago #25776

  • Chris
  • Chris's Avatar
  • Offline
  • Administrator
  • Posts: 1446
  • Thank you received: 13
  • Karma: 8
skylimit,

To the best of my knowledge, I don't think there is. Each IPSec tunnel has a specific lifetime value specified by the crypto map command " set security-association lifetime seconds 86400 " , once this timer is up, the tunnel will go down.

Either case, if you've configured the tunnel correctly, it should come back up immediately after the first packet has gone through, assuming you've got static IP addresses on both ends.

If someone else knows of a command to keep a tunnel up with only one end being a public static IP address , it would be great to hear it!

Cheers,
Chris Partsenidis.
Founder & Editor-in-Chief
www.Firewall.cx
The administrator has disabled public write access.

Re: VPN Tunnel Wake Up. 8 years 5 months ago #25783

  • skylimit
  • skylimit's Avatar
  • Offline
  • Distinguished Member
  • Posts: 158
  • Thank you received: 1
  • Karma: 0
Thanks Chris.
"...you are never too old to learn" anon
The administrator has disabled public write access.
  • Page:
  • 1
  • 2
Time to create page: 0.082 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup