IPsec L2L vpn not stable

[ronald.su]

hey guys,

I have a lan 2 lan ipsec vpn (thur 2 ASA ), but it's not stable, it will disconnect 2 to 5 time per day randomly.

as I check , it's not cause by sa / isakmp expired, and the internet network connection is good.

i wondering if there any command or switch can let me check the log?

thanks

[mclaughlinm9]

Under the group policy associated to the vpn tunnel, can you try changing the idle timeout value and also the maximum connect time?

[ronald.su]

i didn't set any idle time, and policy set as below:

crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime none

[mclaughlinm9]

This is a default, that is probably getting inherited from the default group policy if you didn't set it on the group policy attached to the vpn. You can check this:

show run all group-policy <vpns group policy>

If you don't find " vpn-idle-timeout " after running this, then it's being inherited from the default group policy.
you can check the value for the default group policy using:

show run all group-policy DfltGrpPolicy