Idle timeout issues after concentrator IOS Upgrade
After a recent IOS upgrade on our concentrator to vpn3005-4.7.2.B-k9.bin to enable the SSL VPN function, we noticed that the clients version 4.6.01.0019 timeout and lose connection when the connection is idle (approx 8mins) regardless of any settings on the concentrator being unchanged (Idle timeout set to 480). However if there is constant traffic the VPN stays up indefinitely
I have tested a new client 4.7.00.0533 which works perfectly with the upgraded version of IOS on the concentrator. As the logistics of addressing all the clients is extensive, is there potential a version of IOS for the concentrator with SSL VPNs which would be more suited to the version of client (4.6.01.0019)????
Re: Idle timeout issues after concentrator IOS Upgrade
The root cause of the watchdog timeout can be hardware- or software-related. Here are the common symptoms through which you can identify the source of the problem:
If a router that has been properly operational for months suddenly starts to reload every 20 minutes, or if it continuously reboots and you can no longer access it, the problem is most likely a hardware-related issue. This is also the case if a new module has been installed recently, and the router crashes by watchdog timeout afterwards.
If the router starts to crash after a configuration change or a change in the Cisco IOS software version, it is probably a software-related issue.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...