VPN - Not holding up

[sunilyk]

Hi,

We have established a VPN over the Internet. (PIX to PIX). It shows (sh crypto isakmp sa) that the VPN is formed and it allows the traffic as mentioned in the access-list correctly.

Now this VPN keeps vanishing from the sa table.

But as soon as I do a ping from one server (source) to another server (destination) (allowed in the access-list), the VPN comes up.

Although its not harming any of the operations, I would like to know why the VPN status keeps on dropping.

Regards,

Sunil

[mostiguy]

a tunnel will only stay up while there is traffic to support it. so, it is not unlikely that over a weekend, a tunnel may go down if there is no replication traffic or some such between servers that would keep it up

[sunilyk]

Thanks!

But the lifetime for the tunnel is 1 day.

So even after this much lifetime, if the supporting traffic is not there, the tunnel will drop ?

(And this is happening on weekdays as well.Ofcourse there is not much traffic on this tunnel.)

Regards,

Sunil