Step 3.1 (Optional) As an intermediate step, after configuration changes have been saved, you could choose Preview Config in order to ensure the FlexConfig commands are ready to be pushed at the end of the configuration. In the left pane search for it and drag it to the right pane with the button >. Inside that policy create a FlexConfig object as follows: Under Devices > FlexConfig create a new FlexConfig Policy (if one does not already exist) and attach it to the FTD where the Site-to-Site VPN is configured. Configure Configure FlexConfig Policy and FlexConfig Object This timer is set to 30 minutes by default.
By default, the FTD terminates the VPN connection if there is no communication activity over the tunnel in a certain period of time called vpn-idle-timeout. Background Informationīoth Internet Key Exchange version 1 (IKEv1) and Internet Key Exchange version 2 (IKEv2) Policy Based (Crypto map) Site-to-Site VPNs are on-demand tunnels. If your network is live, ensure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment. The information in this document is based on these software versions: Prerequisites RequirementsĬisco recommends that you have knowledge of these topics:
#DISABLE WINDOWS 7 IDLE TIMER HOW TO#
This document describes how to modify the vpn-idle-timeout attribute of a VPN with FlexConfig Policies in Cisco Firepower Management Center (FMC) in order to prevent tunnel downtime due to Inactivity or Idle Timeout.
0 kommentar(er)
