VPN Clients Disconnection

[paltel]

i have the following error when users connect to VPN Concentrator 3015 through IPSec, disconnection problem with the following log at the concentrator

Session Type: IPSec/UDP

Duration: 0:50:01

Bytes xmt: 41469440

Bytes rcv: 3243248

Reason: Max time exceeded

and

ending IKE Delete With Reason message: Maximum Configured Connection Time Excee

ded.

i.e: the idle timeout is 3 hours.

Thanks in advance

[6callert]

what's your SA lifetime set to, and do you allow clients to override concentrator set SA lifetimes. Additionally do you Re-auth users on SA Re-key or not?

[jackko]

there are 2 time-related settings: idle timeout and max connection time.

configuration>user management>groups>...>general

the 5th from the top is idle timeout

the 6th from the top is the max connection time

please verify the defined values.

[paltel]

Connection terminated for peer user2

Reason: IPSec SA MAX time exceeded

Lifetime measrument is to take time (Time lifetime 28800), and the Data lifetime is 10000 KB, but it is set to take "Time lifetime"