Timeout for remote user coming through a VPN tunnel on a Cisco Pix 515e

Posted on 2004-12-01
Last Modified: 2010-04-10
A remote user's connection times out after about 30-90 minutes when coming through a VPN tunnel from a remote site. I have two Cico 515e pixs acting as peers. These are the timeout paramaters:

timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute

It is my understanding that these do not apply to the VPN tunnel (or do they?) because the firewall will see the remote tunnel as a local connection and treat it like it is on the local LAN.
Question by:truelove258
    1 Comment
    LVL 36

    Accepted Solution

    Hi truelove258,
    The Cisco client has an option to enable keep-alive which is on by default and this will stop the VPN connection from timing out.
    The timeout parameters I would expect would apply to traffic terminating on the VPN end point PIX. The reason why I say this is because the PIX does need to track the connection in order to enable back the replies from the servers. Normal TCP connections have a timeout of 1 hour and UDP has a timeout of 2 minutes.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
    Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now