PIX 515 isakmp lifetime 86400

[sgaisie]

When the VPN tunnel betwen our PIX 515 to VPN 3005 Concentrator keeps drops after 24hrs of inactivity it can only be brought up by a ping initiation on the VPN Concentrator end.

WE need it to come up when our customer sends traffic from the other end any ideas?

[bhupinder]

hi

try setting the isakmp keepalive to 30 seconds

so that there is always some traffic :>

[bhupinder]

Hi

other way is to set the isakmp lifetime to 0 seconds

i.e infinite lifetime