Hi, we've got several Internet IPSec/ISAKMP VPNs. HQ is using a VPN3030 Concentrator and the remote sites are using Pix 501s. Looking at the session statistics on the VPN3030 some of the tunnels stay up for days and some won't stay up for more than a few hours.
I've got a couple of questions:
1). Should traffic from either side bring the tunnel up?
2). When the tunnel comes up should it stay up for a certain number of hours even if there is no more traffic sent? i.e. if the tunnel is brought up by a ping will it stay up? Or more specifically should it stay up? And if it goes down after an hour or so on a reqular basis then should I be investigating the remote site's DSL line Internet connection as the first port of call?