Related commands
crypto
map,
crypto isakmp
crypto-group,
ip
transform-set
crypto isakmp invalid-spi-recovery
Use the crypto isakmp invalid-spi-recovery command to enable invalid SPI
recovery (default setting). Use the no form of the command to disable invalid SPI recovery.
Syntax
[no] crypto isakmp invalid-spi-recovery
User level
read-write
Context
general
Example
G350-001(super)# no crypto isakmp invalid-spi-recovery
Related commands
ip crypto-group
crypto isakmp nat keepalive
NAT Traversal keepalive is enabled in the device by default. Use the crypto isakmp nat
keepalive command to re-enable NAT Traversal keepalive if it was disabled, and configure
the keepalive interval. The purpose of this command is to keep the NAT devices tables updated.
Use the no form of the command to disable NAT Traversal keepalives.
Tip:
Set the NAT Traversal keepalive interval to be less than the NAT translation aging
Tip:
time on the NAT device.
Syntax
[no] crypto isakmp nat keepalive [seconds]
peer,
crypto isakmp
crypto-list, mode,
set
peer-group,
pfs,
set security-association
Alphabetical listing of CLI commands
crypto isakmp
policy,
lifetime,
show crypto ipsec
Issue 1.1 June 2005
ip
141