Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Session timeout when suing IPsec VPN


Is SA life time same as Key life time?? Is there any default value for this??when a key/SA expires and new SA becomes live ..does it affect the data traffic..does packets gets dropped at the timeof change over?? or does the TCP sessions breaks??

IF my TCP sesion is idle at the time of key renewal ..does the session break?? Suppose the SA lifetime is 1 hrs..and my TCP session is idle for 1 hrs or more does it breaks the connection ??

Thanks and Regards,



Re: Session timeout when suing IPsec VPN

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center ( or speak with a TAC engineer. You can open a TAC case online at

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

New Member

Re: Session timeout when suing IPsec VPN

I believe the default lifetimes for SAs are 10000 for time and 3600 for data,SA rekeys should not effect traffic at all, the session should stay alive.

CreatePlease to create content