I am in the process of migrating some of our call centers from ISDN circuits to VPN. Currently we have a Cisco 3060 concentrator as our head router and using a pix 501 from the one user call center. Each call center consists of one user a pix 501, business class DSL (SBC Static PPPoe). The problem im experiancing is constant disconnects of the VPN tunnel.I currently have all the timeouts set to 0 and keepalive's going but the tunnel still drops. There are times the tunnel stays up for 10-14 hours and times it dropes every 1-4 hours. I have been bumping my head on this because these disconnects are very client effective since the application we use cant with stand these disconnects. Does anyone know what to look for or anyone experianced this and found a fix
This dropping might be happening due to a poor link that might be causing keepalive packets to drop. To verify the same, try to increase the idle time in the appropriate group on the concentrator. Also, temperorily disable IKE keep-alives.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.