Cisco ASA 5510 - recycling services

We have two Cisco ASA 5510's in different cities using site to site vpn, it seems like the connection times out or gets lost every couple of weeks, is there a way to recycle the site to site service or setup a job to recycle it daily or weekly? We had a similar problem with regular users vpn connection this morning, is there a way to recycle the vpn service? I basically want to find a way to refresh these connections without rebooting the ASA everytime one of these issues come up.

Thank You!!
paclaiborneAsked:
Who is Participating?
 
Pete LongConnect With a Mentor Technical ConsultantCommented:
Here you go, I've written it up for you and that's me doing it :)

Cisco ASA 5500 - Reset / Recycle VPN Tunnels


Pete
0
 
Pete LongTechnical ConsultantCommented:
issue the following command

clear crypto isakmp sa

or if you know the IP of the other end and you have multiple tunnels i.e.  youdont want to restart them all

clear crypto isakmp sa 123.123.123.123

Or if your an ASDM junkie untick the enable ISAKMP on the outside Interface click apply, then retick and click apply
0
 
Pete LongTechnical ConsultantCommented:
oops to do one tunnel, clear the ipsec sa like so..............

clear ipsec sa peer 123.123.123.123

I feel an interesting web article coming on :)

Pete
0
 
paclaiborneAuthor Commented:
Sorry we left this question open and never approved the answer.
0
All Courses

From novice to tech pro — start learning today.