Reg. VPN Tunnel disconnecting when no traffic

ankurs2008 · ‎04-07-2010

Hi

I have a Site to Site tunnel between ASA and a non ASA Device . After a period of time when no traffic go across the tunnel, it disconnects itself. In order to keep the tunnel up always irrespective of traffic flowing or not ,what is the recommended config ?. Before implementing i would like to take suggestions if it is fine to lower the threshold of DPD in ASA and (or) to disable the vpn-idle-timeout value in the group-policy ?

droeun141 · ‎04-07-2010

That's just the nature of site-to-site tunnels. You can extend the timers, but not indefinitely; the only way to make it permanent is to run it with GRE. The vpn-idle-timeout command only applies to remote access tunnels.