Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 21 replies
  • Subscribers 1 subscriber
  • Views 22291 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cisco VPN Disconnects after an hour

Rogue Agent
Following the manual for setting up the Cisco VPN client for a remote VPN to the Astaro gateway, I've got my VPN up and working.  However, each time I connect to the VPN my connection will only stay active for an hour.  After and hour it disconnects.  I am running version 4.9.01.0280 of the cisco vpn client on OS X 10.6.7 and ASG v8.102.

I cannot figure out why it is auto disconnecting me on a regular (very) basis.  Anyone seen this before?


This thread was automatically locked due to age.
Parents
  • 0
    I found this in the KIL:
    ID14692 8.000 Terminating Cisco Remote access connections after end of phase 2 lifetime
    ------------------------------------------------------------------------
    Description:
    Workaround: Increase the lifetimes for IKE and IPsec on the ASG. Since
    Cisco VPN uses a fixed policy you need to edit it on the
    command line via confd-client. It's at
    OBJS:ipsec->policy->REF_IPsecPolicyCisco. Values to be
    increased are ike_sa_lifetime and ipsec_sa_lifetime.
    Maximum value accepted by pluto is 86400.


    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    I found this in the KIL:
    ID14692 8.000 Terminating Cisco Remote access connections after end of phase 2 lifetime
    ------------------------------------------------------------------------
    Description:
    Workaround: Increase the lifetimes for IKE and IPsec on the ASG. Since
    Cisco VPN uses a fixed policy you need to edit it on the
    command line via confd-client. It's at
    OBJS:ipsec->policy->REF_IPsecPolicyCisco. Values to be
    increased are ike_sa_lifetime and ipsec_sa_lifetime.
    Maximum value accepted by pluto is 86400.


    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
Unfiltered HTML