Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Latency tolerance for VPN 5000 auto-connect?

Hello,

In our network we have dual VPN 5000 concentrators and (among other access points) an AS5400 with a congested network in between. Unfortunately, we do not own the network in between and correcting the congestion/topology is not an option. The latency between the AS5400 and concentrators is tolerable when a user dials in and connects to the concentrator manually: they dial into the AS5400 and authenticate, double-click the vpn client, click connect, and the vpn client will try to connect until it gets through. It only takes the vpn client a few seconds to connect to the 5000.

However, if we use the "auto-connect before logon" feature, the vpn client does not tolerate this latency. The window pops up in the upper left-hand corner, the user clicks "phonebook" and it dials the AS5400. Once it connects to the AS5400 , in the background the vpn client attempts to connect to the concentrator. But it doesn't just try until it gets through, the user has to click "retry" an average of eleven times before it finally connects to the concentrator and subsequently prompts for a username.

Is there any way of adjusting the delay tolerance on either end? Does anyone have figures on exactly how much latency it will tolerate? Any help on this will be greatly appreciated. Thanks!

Best Regards

1 REPLY

Re: Latency tolerance for VPN 5000 auto-connect?

Often times complex troubleshooting issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, it’s often difficult to do so for this type of issue.

To utilize the resources at our Technical Assistance Center, please visit http://www.cisco.com/tac and to open a case with one of our TAC engineers, visit http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

217
Views
0
Helpful
1
Replies
CreatePlease login to create content