Pix PPTP VPN Timeout

[slohnes]

Good evening

I've been trying to find an answer to my question in the Cisco documentation without much success. I've had good luck with the folks around here in the past so I figured I'd try again.

I've got a Pix 506E running as a PPTP VPN server. Everything is functioning fine and has been for some time now.

The "problem" is, can I set an idle timeout for the PPTP clients? If so, how? I'd like to have a client automatically disconnected after X minutes of inactivity...

Using IPSEC, I could set an SA lifetime but not in PPTP.

Any assistance (even just to tell me it's not possible and put me out of my misery!) would be greatly appreciated.

Thank

Scott

[kbeltz]

Try this option,

pptp echo echo_timeout - Specifies the PPTP keep-alive echo timeout value in seconds. PIX Firewall terminates a tunnel if an echo reply is not received within the timeout period you specify.

[slohnes]

Thanks for the response but unfortunately, I don't think this will achieve the result I was looking for.

Basically, I want the client session disconnected after X minutes of client inactivity. A keep-alive won't close the session if the client is still online but idle.

I'm thinking that this isn't possible with a PPTP VPN. Might be time to move to IPSEC...

Thanks

Scott