<div>
<div class="content wysiwyg-content">
Hi,<br />
<br />
I have a site to site VPN between a ASA 5520 and a 2801. &nbsp;The connection has been setup for many<br />
years and I have never had any problems.<br />
<br />
However over the last few days the VPN Tunnel resets every 60 Secs causing a small &quot;reconnection pause&quot;<br />
between subnets. &nbsp;This happens even with a constant ping from both ends causing a &quot;Request Timed Out&quot;<br />
<br />
The IKE Rekey is set to 28800, the idle Timeout is 30 Mins and the IPsec Rekey is 3600 secs.<br />
<br />
I have tried deleting and recreating the tunnel and its stills drops and restarts every 60 secs.<br />
<br />
Other tunnels stay up without any problems.<br />
<br />
I'm guessing it's a mismatch in a ACL but wondered if there was a easier way to find out which one.<br />
<br />
Can some give me a few areas to check.<br />
<br />
Thank you in advance.
</div>
</div>


Hi,

I have a site to site VPN between a ASA 5520 and a 2801.  The connection has been setup for many
years and I have never had any problems.

However over the last few days the VPN Tunnel resets every 60 Secs causing a small "reconnection pause"
between subnets.  This happens even with a constant ping from both ends causing a "Request Timed Out"

The IKE Rekey is set to 28800, the idle Timeout is 30 Mins and the IPsec Rekey is 3600 secs.

I have tried deleting and recreating the tunnel and its stills drops and restarts every 60 secs.

Other tunnels stay up without any problems.

I'm guessing it's a mismatch in a ACL but wondered if there was a easier way to find out which one.

Can some give me a few areas to check.

Thank you in advance.

Cisco VPN Tunnel Drops every 60 secs

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.