I have a Cisco router that works as a VPN server. a remote user uses Cisco VPN client 5.0.05.0290 to connect to the office resources.
Every one hour (or a few minutes less than one hour) after a connections is established, a message pops up on a user's laptop asking to re-authenticate. If you caught the mesage right away and entered same username and password that was used to establish the connection - the connections stays, but if you missed it by a minute or so - there is no indication that username/password is wrong, and it seems that the connection is still working fine, but in a few seconds a disconnect error message pops up:
"Secure VPN Connection terminated locally by the Client"
I am also attaching some debug info from the Client side...(asked for password at 14:44 and typed password 14:54 in the log)
my questions are:
1) How to make VPN client continue the connection without prompting a user to re-authenticate.
2) What's causing the router or the client to ask a user to type username/password again?
here is the config(keep in mind that I use the same crypto map for site2site vpn tunnel as well):
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...