Cisco ASA - how long a network dropout before a tunnel will drop out and stay dropped out?
Posted on 2013-11-09
I have this situation:
VPN between local ASA and application service provider ASA.
(the ASAs are controlled by our application service provider).
Our local ISP was resetting a Radius server that interrupted our internet connection every 8 hours (how rude).
The VPN tunnel was dropping out and staying that way. Well, at least it appeared to be staying that way during normal working hours when it happened.
I have no idea what happened during the other 2 times in 24 hours .. but it must have come back in order to be working in the morning.....
It would take a large number of minutes to:
1) staff to realize that there was no connection
2) fiddle around ... finally decide to call the application service provider
3) the ASP would see the tunnel was down and "reset" it.
So, it must have been down for a pretty long time!
So, my question is:
How long does a network dropout need to last before an ASA will drop a tunnel?
Along with that:
Can an ASA tunnel be set to "stay alive" and re-connect after a network outage?
If so, how long might it take to reconnect under reasonable circumstances?
Does our experience above say anything about how these two ASAs might be configured re: "keep alive"?