Hi All,
I have successfully setup one site-to-site VPN connection between ASA5510 and 851 router. The VPN connection dropped twice last week. According to the monitoring system, the first disconnection lasted 2 minutes and 2nd one lasted 49 minutes. WAN connection in 851 router is through a bridged WiMAX connection. I checked the 851 router's log and didn't find any disconnection about WAN. No LAN disconnection either. So there was no obvious physical disconnection when the VPN dropped.
The only thing I can come up with is the WiMAX wan connection may have some larger delay some time which could cause VPN connection drop. The current IKE keepalive in ASA is 10 seconds. I didn't change the keepalive setting in 851. Is there any possiblity that long delay cause the keepalive fail? But 10 seconds should be long enough to cause the WAN disconnection. I can do a debug on the routers, but this disconnection is not very often. The connection has been stable for 3 days since last drop.
By the way, is there any optimized setting which can make reconnection faster if VPN dropped?
Please help. Any ideas will be greatly appreciated.
Lou
