VPN Connection timeout

[marco01]

Hello,

can I configure a VPN connection timeout on a Cisco Pix 501 firewall? How can I change this entry?

[a-vazquez]

Here are the commands to do that.

crypto map map-name seq-num set security-association lifetime secondsseconds | kilobytes kilobytes

This is the lifetime for phase 2.

You can also set lifetime for the ISAKMP policy for phase 1 as follows.

crypto isakmp policy 10 lifetime 7200

here 7200 seconds means 2 hours.