Tunnel collapsed although configured incident time out

[astanislaus]

VPN client left two hours with no traffic. Tunnel collapsed although configured incident time out. SHOW TECH and selected SYSLOG outputs attached.

Customer says it is not necessarily 2 hours all the time. So time idle connections can time out in 40 minutes or so.

Now

vpn-idle-timeout none

command is there under

group-policy DfltGrpPolicy attributes

[thomas.chen]

Try this :

Check the "keepalive" function on ASA, check the isakmp lifetime seconds [retry seconds] cmd configued with life time.

Try this link:

http://www.cisco.com/en/US/products/ps6635/products_white_paper0900aecd8034bd59.shtml