OpenForum RSS: �� VPN ��

�� VPN �� (motok)

Thu, 12 Jul 2018 06:33:30 GMT

>[�� ]
>>> �� ? RADIUS, TACACS? �� Idle-Timeout.
>> �� . �� :
>> https://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/gtIPSctm.html#wp1083582
> �� aaa attribute list
> [code]
> asr-1002x-621(config)#aaa attribute list test
> asr-1002x-621(config-attr-list)#attribute type idle?
> idle-threshold idle-timeout-direction idletime
> [/code]
> �� .

�� .

aaa attribute list VPN-CLIENT
attribute type idle-threshold 60 (�� idletime � idle-timeout-direction)

crypto isakmp client configuration group EVPN-GROUP
crypto aaa attribute list VPN-CLIENT

�� VPN �� (��)

Wed, 11 Jul 2018 14:28:41 GMT

>[�� ]
>>> Jul 11 10:35:05.915: IPSEC(rte_mgr): Delete Route found ID 5
>>> Jul 11 10:35:05.915: IPSEC(rte_mgr): VPN Route Refcount 1 Virtual-Access2
>>> Jul 11 10:35:05.915: IPSEC(key_engine): got a queue event with 1 KMI message(s)
>>> cisco#
>>> Jul 11 10:35:05.915: IPSEC(key_engine_delete_sas): rec'd delete notify from ISAKMP
>>> �.�. �� . �� 60 �� . ��
>>> �� , �� .
>> �� , �� ...
>> �� ?
> ��

�� , �� ....
�� attribute list - �� .
� �� idle-timeout

�� , �� ...
>>> idle-time Automatically delete IPSec SAs after a given idle period.
>>> lifetime security association lifetime

�� VPN �� (motok)

Wed, 11 Jul 2018 13:44:57 GMT

>>[�� ]
> �� , �� ...

�� ?

�� VPN �� (motok)

Wed, 11 Jul 2018 11:17:09 GMT

>[�� ]
>> remote_proxy= 192.168.3.84/255.255.255.255/0/0 (type=1)
>> Jul 11 10:35:05.915: IPSEC(rte_mgr): Delete Route found ID 5
>> Jul 11 10:35:05.915: IPSEC(rte_mgr): VPN Route Refcount 1 Virtual-Access2
>> Jul 11 10:35:05.915: IPSEC(key_engine): got a queue event with 1 KMI message(s)
>> cisco#
>> Jul 11 10:35:05.915: IPSEC(key_engine_delete_sas): rec'd delete notify from ISAKMP
>> �.�. �� . �� 60 �� . ��
>> �� , �� .
> �� , �� ...
> �� ?

��

�� VPN �� (��)

Wed, 11 Jul 2018 11:11:48 GMT

>[�� ]
> (identity) local= 84.47.*.*:0, remote= 188.35.*.*:0,
> local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
> remote_proxy= 192.168.3.84/255.255.255.255/0/0 (type=1)
> Jul 11 10:35:05.915: IPSEC(rte_mgr): Delete Route found ID 5
> Jul 11 10:35:05.915: IPSEC(rte_mgr): VPN Route Refcount 1 Virtual-Access2
> Jul 11 10:35:05.915: IPSEC(key_engine): got a queue event with 1 KMI message(s)
> cisco#
> Jul 11 10:35:05.915: IPSEC(key_engine_delete_sas): rec'd delete notify from ISAKMP
> �.�. �� . �� 60 �� . ��
> �� , �� .

�� , �� ...
�� ?

�� VPN �� (motok)

Wed, 11 Jul 2018 10:47:40 GMT

>>>>>> idle-time Automatically delete IPSec SAs after a given idle
>> set security-association idle-time 60
>> �� . �� .
>> �� - crypto ipsec security-association idle-time 60
>> �� .
> �� ...

�� 60 ��. �� debug crypto ipsec

�� , �� :
Jul 11 10:34:53.847: IPSEC(create_sa): starting idle timer, 60 seconds
Jul 11 10:34:53.847: IPSEC(create_sa): sa created,
(sa) sa_dest= 84.47.*.*, sa_proto= 50,
sa_spi= 0xF6F90895(4143515797),
sa_trans= esp-3des esp-sha-hmac , sa_conn_id= 77
sa_lifetime(k/sec)= (4418854/3600)
Jul 11 10:34:53.847: IPSEC(create_sa): sa created,
(sa) sa_dest= 188.35.*.*, sa_proto= 50,
sa_spi= 0xB8F9956(193960278),
sa_trans= esp-3des esp-sha-hmac , sa_conn_id= 78
sa_lifetime(k/sec)= (4418854/3600)
Jul 11 10:34:53.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access3, changed state to up
Jul 11 10:34:53.851: I

�� VPN �� (motok)

Tue, 10 Jul 2018 16:44:25 GMT

�� VPN �� (��)

Tue, 10 Jul 2018 10:49:18 GMT

>>>>> idle-time Automatically delete IPSec SAs after a given idle
> set security-association idle-time 60
> �� . �� .
> �� - crypto ipsec security-association idle-time 60
> �� .

�� ...

�� VPN �� (motok)

Tue, 10 Jul 2018 09:39:59 GMT

>>>> idle-time Automatically delete IPSec SAs after a given idle

set security-association idle-time 60

�� . �� .

�� - crypto ipsec security-association idle-time 60
�� .

OpenForum RSS: ���������� VPN ������

���������� VPN ������ (motok)

���������� VPN ������ (�����)

���������� VPN ������ (motok)

���������� VPN ������ (motok)

���������� VPN ������ (�����)

���������� VPN ������ (motok)

���������� VPN ������ (motok)

���������� VPN ������ (�����)

���������� VPN ������ (motok)

OpenForum RSS: �� VPN ��

�� VPN �� (motok)

�� VPN �� (��)

�� VPN �� (motok)

�� VPN �� (motok)

�� VPN �� (��)

�� VPN �� (motok)

�� VPN �� (motok)

�� VPN �� (��)

�� VPN �� (motok)