cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
520
Views
0
Helpful
2
Replies

[VPN Site to Site] Keep connection up

Patrick Tran
Level 1
Level 1

Hi,

I got a Site to Site VPN connection that works properly.

Extended Office does not have a static IP address so I used a connection profile "ExtOffice" on main site.

ASA on Extended Office has a certificate that match on this connection profile.

 

If there is no traffic on VPN, there is a timeout and VPN goes down.

Main site can't reconnect VPN because there is no IP address for extended office.

Extended Office can connect VPN without problem.

There is few traffic on this tunnel but we need main site to contact extended office.

 

How can I keep VPN up?

 

Thanks for your help,

 

Patrick

2 Replies 2

MOHAMMAD RAZA
Level 1
Level 1

Hi Patrick,

Pls increase security-association time and life time value. 

 

 

Regards,

Md Raza

Hi Md Raza,

Thanks for your quick answer.

This time cant be infinite.

I would like to keep connection as longer as possible even without traffic.

Is there a way on VPN configuration? (with keepalive)

Or should I use a script ping continuously from extended office? 

 

Regards,

Patrick

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: