Cisco VPN client vpn disconnection problem

[acleri]

Hi,

we have a Cisco ASA 8.2(3) and several vpn client ipsec that connect to it ( 5.0.07.0290-k9 and 5.0.07.0410-k9).

ExExactly after 4 hours the vpn connections of these clients are dropped even if the client is still sending traffic. I can't find any setting on the configuration in order to avoid this connection drop. Anyone have an idea how to solve it?

I

I

Af

[jonathanaxford]

Hi,

If the conenction drops after exactly four hours each time, then it does seem to be some sort of timer that is expiring and then not re-initiating the connection.

It might be worthwhile trying to run some debugs to see if you can see exactly what is causing the connection to drop? Things like debug crypto isakmp and debug crypto ipsec are always handy.

If you manually re-initiate the connection, I am assuming that it comes straight back up?

Many thanks

Jonathan

[andamani · Accepted solution]

Hi,

Please paste the output of "sh run cry". we can check the lifetime values.

also you can enable the following debugs like half an hour before the Client expected time to disconnect.

deb cry isa 127

deb cry ips 127.

We can check the reason from the debugs with the help of the client ip address.

Hope this helps.

regards,

Anisha

P.S.:Please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

[acleri]

After an analisys fo the configuration I found under the vpn group policy the command vpn-session-timeout 240.

once removed the vpn stay up.

thank you for your suggestions.

regards.