Ask the Expert

Dropping the connection at both ends of VPN tunnel

My VPN connects two sites (FW-1 to FW-1) and when there is a fairly long period with no traffic, the VPN drops and needs to be renegotiated. It appears, however, that only one VPN end device drops the VPN with the other thinking that it is still up. This results in failure to connect to remote devices at the first attempt. All subsequent attempts to connect to remote devices succeed.

Is there anything that I can do to ensure that both ends of the VPN tunnel drop the connection when it times out?

    Requires Free Membership to View

FW-1 has been known to have these problems in site to site configurations so you are not alone. A good site for FW-1 info that covers issues such as the one you are having is Phoneboy (don't ask me why they chose that name) I have heard that the simplest way to fix the problem is to create an artificial heartbeat between two devices on either side of the connection. If you have two windows machines it's real easy, just put them in the same workgroup; netbios will handle the rest (it's very chatty). If you don't want to do that, you can configure FW-1 properly to fix the problem. You'll have to check the site for the exact steps.

This was first published in January 2002

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: