- Feb 13, 2014
- 23
- 0
- 10,520
Hi everyone,
I have a problem with my VPN Client connection.
I have two profiles I use in VPN Client. One is for connecting to my PC at work and one is for connecting to PC's at the stores that we maintain. The profile that I use to connect to my laptop stays connected forever but the profile I use to connect to the PC's in stores disconnects every cca 30 minutes with the message: "Reason 433: (Reason not specified by peer)".
I found this on cisco.com:
"Verify Idle/Session Timeout
If the idle timeout is set to 30 minutes (default), it means that it drops the tunnel after 30 minutes of no traffic passes through it. The VPN client gets disconnected after 30 minutes regardless of the setting of idle timeout and encounters the PEER_DELETE-IKE_DELETE_UNSPECIFIED error.
Configure idle timeout and session timeout as none in order to make the tunnel always up, and so that the tunnel is never dropped even when using third party devices.
PIX/ASA 7.x and later
Enter the vpn-idle-timeout command in group-policy configuration mode or in username configuration mode in order to configure the user timeout period:
hostname(config)#group-policy DfltGrpPolicy attributes
hostname(config-group-policy)#vpn-idle-timeout none
Configure a maximum amount of time for VPN connections with the vpn-session-timeout command in group-policy configuration mode or in username configuration mode:
hostname(config)#group-policy DfltGrpPolicy attributes
hostname(config-group-policy)#vpn-session-timeout none
Note: When you have tunnel-all configured, you do not need to configure idle-timeout because, even if you configure VPN-idle timeout, it will not work because all traffic is going through the tunnel (since tunnel-all is configured). Therefore, the interesting traffic (or even the traffic generated by the PC) will be interesting and will not let Idle-timeout come into action."
but unfortunately this doesn't help me at all because I have no idea where to type those commands. Is there a way to stop that profile from disconnecting because it is so annoying to type in the pass every 30 minutes and sometimes we have to act fast if the shopper is at the cash register at the moment.
Thanks in advance,
Tom
I have a problem with my VPN Client connection.
I have two profiles I use in VPN Client. One is for connecting to my PC at work and one is for connecting to PC's at the stores that we maintain. The profile that I use to connect to my laptop stays connected forever but the profile I use to connect to the PC's in stores disconnects every cca 30 minutes with the message: "Reason 433: (Reason not specified by peer)".
I found this on cisco.com:
"Verify Idle/Session Timeout
If the idle timeout is set to 30 minutes (default), it means that it drops the tunnel after 30 minutes of no traffic passes through it. The VPN client gets disconnected after 30 minutes regardless of the setting of idle timeout and encounters the PEER_DELETE-IKE_DELETE_UNSPECIFIED error.
Configure idle timeout and session timeout as none in order to make the tunnel always up, and so that the tunnel is never dropped even when using third party devices.
PIX/ASA 7.x and later
Enter the vpn-idle-timeout command in group-policy configuration mode or in username configuration mode in order to configure the user timeout period:
hostname(config)#group-policy DfltGrpPolicy attributes
hostname(config-group-policy)#vpn-idle-timeout none
Configure a maximum amount of time for VPN connections with the vpn-session-timeout command in group-policy configuration mode or in username configuration mode:
hostname(config)#group-policy DfltGrpPolicy attributes
hostname(config-group-policy)#vpn-session-timeout none
Note: When you have tunnel-all configured, you do not need to configure idle-timeout because, even if you configure VPN-idle timeout, it will not work because all traffic is going through the tunnel (since tunnel-all is configured). Therefore, the interesting traffic (or even the traffic generated by the PC) will be interesting and will not let Idle-timeout come into action."
but unfortunately this doesn't help me at all because I have no idea where to type those commands. Is there a way to stop that profile from disconnecting because it is so annoying to type in the pass every 30 minutes and sometimes we have to act fast if the shopper is at the cash register at the moment.
Thanks in advance,
Tom
Facebook
Twitter
Instagram