Solved

PIX 515e 7.1(1) Tunnels Dropping at about 31 mins %PIX-4-113019

Posted on 2006-06-20
8
411 Views
Last Modified: 2010-07-27
I have some tunnels on the firewall that are coming down if there is no interesting traffic.  They are all coming down right around 31m:3xs.  I can't seem to find the timeout issue here and would like to keep the tunnels up if possible.

%PIX-4-113019: Group = <group-ip-address>, Username = <Group-ip-address>, IP = <Group-ip-address>, Session disconnected. Session Type: IPSecLAN2LAN, Duration: 0h:31m:43s, Bytes xmt: 60, Bytes rct

Thanks in advance
0
Comment
Question by:ort11
  • 2
  • 2
8 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 16946720
>are coming down if there is no interesting traffic.
This is by design. IPSEC tunnels are dynamic and depend on interesting traffic. Setup a periodic (like every 15 minutes) ping on a cron job or something from one workstation to something on the other side.

You can adjust the security association lifetime:
 >crypto map mymap 10 set security-association lifetime seconds 2700  <== 45 minutes



0
 
LVL 1

Author Comment

by:ort11
ID: 16950656
Ok, is 2700 the max on the lifetime?

0
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 16950936
I don't think so. It's just an example
The default is 28,800 seconds (eight hours).
By shortening the lifetime you force re-negotiation earlier.
0
 
LVL 1

Author Comment

by:ort11
ID: 17145579
Please do not stop this thread.  We are still having an issue and would like to keep this open.  Thanks
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 17239299
If no response is received to LRMoores last post to you or an update on the current position is not posted I will be putting this back in the queue on my next round of cleanups which will be next week.

Thanks
Keith
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question