Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

show vpn-session remote

We currently have vpn-session-timeout none. We want to disconnect users if the session is inactive for 60 mins. How would I make this chage and any problems with this?

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions

show vpn-session remote

hostname(config)# group-policy attributes
hostname(config-group-policy)# vpn-session-timeout xxx

3 REPLIES

show vpn-session remote

vpn-idle-timeout   = the amount of time the vpn connection is idle ie. no activity seen on the tunnel, before it is disconnected

vpn-session-timeout = the amount of time the VPN tunnel is allowed to stay up regardless of whether there is activity or not.

This if for specific user-

hostname(config)# username anyuser attributes

hostname(config-username)# vpn-session-timeout

Hope this help.

Thanks

Ajay

Community Member

Re: show vpn-session remote

group-policy DfltGrpPolicy attributes

Would I use the above for a group?

Thanks.

show vpn-session remote

hostname(config)# group-policy attributes
hostname(config-group-policy)# vpn-session-timeout xxx

833
Views
0
Helpful
3
Replies
CreatePlease to create content