VPN Tunnels timing out

bericaleb · ‎12-01-2008

Hi

What will be the cause of a VPN tunnel disconnection even though the Internet link is Up. Our VPN link between our External client is disconnecting.

How can I check where the disconnection is being caused. Is there a part in the tunnel configuration to specify the bandwidth of a VPN tunnel?

JORGE RODRIGUEZ · ‎12-01-2008

Bernadette,

It could be a number of things, how over utilized is your internet link overall? I think you would probably have to start collecting some basic diagnistics from a physycal perspective first , internet link utilization etc to rule out this frist.. to sort of get you a base line.

Look at your ASDM logs or syslogs can tell you why tunnel drops, is the tunnel dropping becuase of no traffic activity? or ongoing connections through that tunnel suddenly drop?

There was a similar question on this last week, you may want to have a look at this thread and try those suggested solutions.

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&topicID=.ee6e1fa&fromOutline=true&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc26eb5/0

[edit]

Also you may want to look into isakmp lifetime, and isakmp keepalive

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807e0aca.shtml

Rgds

Jorge

Jorge Rodriguez

bericaleb · ‎12-01-2008

The tunnel drops when there is no traffic activity and also when there is ongoing connections. The internet link to our Local ISP is OK and it is not overutilized. It is an E1 connection to the local ISP. Internet browsing and other VPN tunnels are up and available, it is only this particular tunnel that drops.