Help with vpn mode on ASA

[HummusChipsSalat]

hi !

i have an ASA55xx which establishes a vpn to a juniper , How can i make the ipsec tunnel as Allways-On , rather then On-Demand behavior ?

so that the ASA would try periodically to establish the VPN regardless of any traffic attempting to traverse it ?

[ lets say for example - just like SVTI interface tunnel ]

Thanks

[Atul Singh]

Try setting vpn-idle-timeout to none or 0 in the group-policy. If not specified explicitly, the group-policy will be DfltGrpPolicy.