In our network we have dual VPN 5000 concentrators and (among other access points) an AS5400 with a congested network in between. Unfortunately, we do not own the network in between and correcting the congestion/topology is not an option. The latency between the AS5400 and concentrators is tolerable when a user dials in and connects to the concentrator manually: they dial into the AS5400 and authenticate, double-click the vpn client, click connect, and the vpn client will try to connect until it gets through. It only takes the vpn client a few seconds to connect to the 5000.
However, if we use the "auto-connect before logon" feature, the vpn client does not tolerate this latency. The window pops up in the upper left-hand corner, the user clicks "phonebook" and it dials the AS5400. Once it connects to the AS5400 , in the background the vpn client attempts to connect to the concentrator. But it doesn't just try until it gets through, the user has to click "retry" an average of eleven times before it finally connects to the concentrator and subsequently prompts for a username.
Is there any way of adjusting the delay tolerance on either end? Does anyone have figures on exactly how much latency it will tolerate? Any help on this will be greatly appreciated. Thanks!
Often times complex troubleshooting issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, its often difficult to do so for this type of issue.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :