I've been browsing the forum looking for an answer to this question. Most of the replies suggest either disabling keepalives or extending the time-period between them.
Based on our experience even when disabling keepalives, we've noticed the Cisco VPN Client connection goes down while passing traffic if the 86400 secs IKE phase I lifetime expires.
We know the VPN client profile config on the ASA does offer a couple of commands to enable an always-up tunnel. Can this be done with an IOS box?
Your help is greatly appreciated here!