Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

ADSL line goes down, long time needed to vpn start again

Status
Not open for further replies.

muki385

IS-IT--Management
Jul 11, 2012
1
HR
The problem is when the ADSL line goes down and the tunnel drops. It needs long time to vpn start working again. Sometime 30 minutes.

Commands on main office router: 'crypto session current status' and 'show crypto isakmp sa' shows:

Interface: Virtual-Access4
Username: bjelis_r1
Profile: sdm-ike-profile-1
Group: vpngrupa
Session status: UP-ACTIVE
Peer: 93.143.178.247 port 24184
IKE SA: local xxx.xxx.xxx.xx/500 remote 93.143.178.247/24184 Active
IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
Active SAs: 2, origin: crypto map

Interface: Virtual-Access6
Username: kopanica_r1
Profile: sdm-ike-profile-1
Group: vpngrupa
Session status: UP-ACTIVE
Peer: 93.143.225.57 port 59893
IKE SA: local xxx.xxx.xxx.xx/500 remote 93.143.225.57/59893 Active
IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
Active SAs: 2, origin: crypto map

Interface: Virtual-Access5
Username: draganec_r1
Profile: sdm-ike-profile-1
Group: vpngrupa
Session status: UP-ACTIVE
Peer: 78.1.136.4 port 12294
IKE SA: local xxx.xxx.xxx.xx/500 remote 78.1.136.4/12294 Active - old adsl connection, why is still active??
IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
Active SAs: 2, origin: crypto map

Interface: Virtual-Access11
Username: draganec_r1
Profile: sdm-ike-profile-1
Group: vpngrupa
Session status: UP-ACTIVE
Peer: 93.141.77.248 port 20937
IKE SA: local xxx.xxx.xxx.xx/500 remote 93.141.77.248/20937 Active - new adsl connection
IPSEC FLOW: permit ip 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0
Active SAs: 2, origin: crypto map

Sometimes i see UP-IDLE on old adsl connection too.

IPv4 Crypto ISAKMP SA
dst src state conn-id slot status
xxx.xxx.xxx.xx 93.143.178.247 QM_IDLE 3038 0 ACTIVE
xxx.xxx.xxx.xx 78.0.68.86 QM_IDLE 2091 0 ACTIVE
xxx.xxx.xxx.xx 93.143.225.57 QM_IDLE 2078 0 ACTIVE
xxx.xxx.xxx.xx 93.141.77.248 QM_IDLE 2096 0 ACTIVE - new adsl connection
xxx.xxx.xxx.xx 78.1.136.4 QM_IDLE 2095 0 ACTIVE - old adsl connection


As you can see there are few locations, but just this one is making problems.
What can i do to speed this up?

Thanks
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top