The parameters you should be concerned with are: isakmp policy 10 lifetime 86400 crypto ipsec security-association lifetime seconds 3600 After 24 hours, phase I key will be re-nego. Phase II key will be re-nego. after 1 hours.
Simer Mayo wrote: I have a site to site tunnel between 2 sites with PIX 515e. The tunnel between the sites goes in a sleep mode every morning and I have to ping site 2 PC IP address from a PC behind the PIX in site 1 to get the tunnel back online. timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute uauth 00:25:00 inactivity Please advice. Thanks --------------------------------- Do you Yahoo!? The New Yahoo! Search - Faster. Easier. Bingo. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74018&t=74018 -------------------------------------------------- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
