SIte to Site VPN

Ahmad Khalifa · ‎03-02-2015

Hi

i have small Question about the LifeTime=86400 for the SIte to Site VPN between two ASA5515

how to achieve lifetime Connection not limited open 24/7 , can i set lifetime =0 for unlimited time

if you know any reference to help me just share it with me

thank you

petenixon · ‎03-02-2015

The lowest value possible on a 5500 series ASA is 120 seconds.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/ike.html

rizwanr74 · ‎03-02-2015

hello Ahmad,

IPSec vpn tunnel must have a tunnel life-time, it is for a security reason it has been created a such.

Reestablishing a tunnel after life-time is expired is seamless reestablishment, users cannot notice it.

thanks

Rizwan Rafeek

Kanwaljeet Singh · ‎03-02-2015

Yeah i agree with below and also even if you don't specify anything then the default value would used during the negotiation of SA's.

Regards,

Kanwal

Note: Please mark answers if they are helpful.