Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Connections through 506E dropping

Corp has asa 5520 set up to accept vpn from clients. At remote site using cisco vpn client and going through a 506e we can initiate a vpn connection for several minutes. Then the connection is lost and can not be reistablished until the 506e is rebooted.

If I remove the 506e from the picture and only go through the cable/dls router I can connect clients without any issues.

What should I be looking at for the source of this issue on the PIX? Thanks

2 REPLIES
Green

Re: VPN Connections through 506E dropping

Does it drop when a 2nd client is attempting to connect or just when 1 client is connected? If you are not running nat-t only 1 client would connect, 2nd client would connect and knock off 1st client. You would then reboot pix and knock off 2nd client. 1st client would be able to connect again until 2nd client connected and the process would repeat. Just a guess.

Cisco Employee

Re: VPN Connections through 506E dropping

Hi,

You might also want to look at the xlate timeout. Please also let us know if the hosts behind the PIX 506 have static IP addresses or dynamic IP addresses. If dynamic, then does it happen when the IP changes?

Please make sure that the ASA has keepalive configured.

isakmp keepalive 10 2

HTH,

Please do rate if it helps.

Regards,

Kamal

121
Views
0
Helpful
2
Replies
CreatePlease login to create content