ASA to ASA - IPSEC LAN-To-LAN VPN - Telnet sessions die

[smunzani]

Hi,

I have observed that after a few minutes of idle time(no  key strokes) the telnet sessions drop for my lan-to-lan tunnel between an ASA5505 and ASA5510. Since telnet doesn't have keepalive function, is there any cisco option for lan to lan VPN keeplive that I can leverage? An alternative here is make changes to IPSEC timeout values but that's not a good thing to do. I disabled PFS just in case that's causing the session to drop but that didn't help.

Thanks,

Sam

[Roman Rodichev]

Disable DPD under tunnel-group (isakmp keepalive disable)

[smunzani]

I just changed it. I will know how it goes in a few.

So PFS has nothing to do with this and I can potentially enable PFS?

Thanks,

Sam

[Roman Rodichev]

PFS makes IPSEC SA keys more secure, and shouldn't cause what you are experiencing