PIX 515 - conn table

[opers13]

all,

TCP connections stay open after a VPN user logs out. I don't see anything on "sh xlate" but "sh conn" shows the connections.

Is there a "clear conn" command? I been searching but can't find anything.

TX

[wharrison2000]

Main problems is that your xlate timeout is shortier and your sa lifetime. So pix is closing the translation while the tunnel is up. Two ways to solve this, Adjust your xlate timeout or adjust your iskamp alive timer.

Bill Harrison

Cisco Instructor