Solved

PIX 515e 7.1(1) Tunnels Dropping at about 31 mins %PIX-4-113019

Posted on 2006-06-20
8
410 Views
Last Modified: 2010-07-27
I have some tunnels on the firewall that are coming down if there is no interesting traffic.  They are all coming down right around 31m:3xs.  I can't seem to find the timeout issue here and would like to keep the tunnels up if possible.

%PIX-4-113019: Group = <group-ip-address>, Username = <Group-ip-address>, IP = <Group-ip-address>, Session disconnected. Session Type: IPSecLAN2LAN, Duration: 0h:31m:43s, Bytes xmt: 60, Bytes rct

Thanks in advance
0
Comment
Question by:ort11
  • 2
  • 2
8 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 16946720
>are coming down if there is no interesting traffic.
This is by design. IPSEC tunnels are dynamic and depend on interesting traffic. Setup a periodic (like every 15 minutes) ping on a cron job or something from one workstation to something on the other side.

You can adjust the security association lifetime:
 >crypto map mymap 10 set security-association lifetime seconds 2700  <== 45 minutes



0
 
LVL 1

Author Comment

by:ort11
ID: 16950656
Ok, is 2700 the max on the lifetime?

0
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 16950936
I don't think so. It's just an example
The default is 28,800 seconds (eight hours).
By shortening the lifetime you force re-negotiation earlier.
0
 
LVL 1

Author Comment

by:ort11
ID: 17145579
Please do not stop this thread.  We are still having an issue and would like to keep this open.  Thanks
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 17239299
If no response is received to LRMoores last post to you or an update on the current position is not posted I will be putting this back in the queue on my next round of cleanups which will be next week.

Thanks
Keith
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Can't locate my firewall, not sure if one is in place 2 65
Checkpoint books 3 86
FortiGate - Unable to delete Traffic Shaper 2 65
iptables ubuntu BLOCK all 2 84
If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question