Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

problems with applications over vpn ipsec site-to-site

Hi all,

I have some problems with some applications as Xcics and Citrix when client and server are connected through a vpn site-to-site. Clients don't seem to have any problem to connect to the server, but after a period of time, they disconnect even if users are working. Session is not closed correctly on server and stay hung, so users can't connect if the administrator doesn't close the session on the server. Some vpns pass through a Pix515E, others pass through a fwsm and an ASA5510. Does anyone knows something about this issue?

6 REPLIES

Re: problems with applications over vpn ipsec site-to-site

Have you enabled isakmp keepalives?

Regards

Farrukh

New Member

Re: problems with applications over vpn ipsec site-to-site

Yes, and I have a software to monitor the connections which sends a ping every 1 minute. Disconnections happen when users are working, not after a period of inactivity.

New Member

Re: problems with applications over vpn ipsec site-to-site

Try increasing theses values..

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00

New Member

Re: problems with applications over vpn ipsec site-to-site

I have controlled with ASDM.Values you indicate are unchecked on my firewall. ASDM guide says "unchecking the check

boxes means there is no timeout value", so the problem is not caused by timeouts, is it?

New Member

Re: problems with applications over vpn ipsec site-to-site

I resolved the problem configuring connection timeout = 2 hours.

New Member

Re: problems with applications over vpn ipsec site-to-site

problem solved, see my post of 29-apr-2009

369
Views
0
Helpful
6
Replies
CreatePlease to create content