Disconnecting a VPN Client/User from the PIX

[anthony.baker]

Just a quick question....

How do I go about disconnecting a client connected to VPN on a Pix? The client is a cisco VPN client (windows based) connecting to a 515E 6.3(4) FW.

I can see the remote IP and other details of the connected using the 'show crypto map' command but can't find a command that will disconnect that one user/session.

An earlier post suggested 'clear crypto remote session <clientip> but the pix doesn't like the command.

Thanks for any help

Anthony

[sbilgi]

I think you will have to use connection timeout for VPN sessions. You can use the option max-time for disconnecting VPN clients after some time of inactivity. Following link may help you

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/tz.html#wp1026093