vpn site-to-site disconnection problem

[pamirian76]

hi,

I have a site-to-site vpn tunnel with a client. and many more with other clients.

with this client, they get disconnected unless they do a ping from their side to the server that is on my side.

so if they keep pinging the server the tunnel stays there, if not they get disconnected.

now what I don't understand is that how come this works just fine with my other clients.

we both have cisco hardware, I use a cisco pix 520 and the client uses a cisco router.

any ideas on why they get disconnected unless they run a ping.

at first I would think of some sort of a timeout but ... then again ... so what else can cause a disconnection problem besides a timeout?

thank you.

[Richard Burts]

There are several things that might cause a disconnection problem such as excessive dropped (or other "lost") packets, or a connection using a dialer interface which does not have the proper configuration of "interesting" traffic, or an inactivity timer at the provider. But I agree with you that the most likely cause of your issue is a timer somewhere. I would start by finding how the IPSec and ISAKMP lifetime timers are configured at both ends of the connection. (Since you have connections to other clients that operate ok I think it is less likely to be an issue on your end - but you should check both ends of the connection).

HTH

Rick