You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Snow Leopard Cisco VPN timeout

I am using the built-in Cisco IPSec VPN in Snow Leopard to connect to my company's server. My VPN connection times out after 1 hour regardless whether I am actively using (sending/retrieving information through the VPN).

Any help as to where I can change a setting to keep the connection alive longer or until I disconnect?

MacBook Pro 15" 2.16 gHz, 3GB RAM, Late-2006, Mac OS X (10.6.1)

Posted on Sep 16, 2009 11:20 AM

Reply
21 replies

Sep 21, 2009 12:23 PM in response to mufb74

I have a similar problem but not limited to an hour. My VPN just disconnects sometimes.

I used the Cisco VPN in 10.5 and never had any problems. Since I have upgraded to 10.6 and started using the built in VPN I get disconnects multiple times a day.

Doesn't seem to me like it's a settings issue. Looks more like a bug in the built in VPN.

Sep 30, 2009 8:31 PM in response to Smutticus

I am having this rather annoying problem as well. It's not disconnects - well not straight away. Our gateway is said to re-authenticate after 4 hours. I get a dialog box requesting reconnection after 50 minutes. After four re-authentication requests I get disconnected. I'd like to use the built in VPN client since it is there, but I might have to end up moving to the Cisco VPN client if there is no other option. The nice thing about using the built in getting the proxies and getting the search domains without having to change locations.

Adi.

Nov 17, 2009 1:33 AM in response to mufb74

I have a very simular problem on my new iMac 10.6.2. After about 45-60 min of connection is asking to re-enter my user's password (the one related to vpn connection). If I will do then the connection remains alive, otherwise (if I am not there to re-type the password) the connection is ending. The password is saved into KeyChain as I see and during the initial connection VPN goes on without entering the password. Any idea how could keep VPN alive without re-entering the password?

Nov 30, 2009 8:51 AM in response to direwolf8

I don't think it is a timeout. The console shows the following sequence when a disconnection occurs.

IKE Packet: transmit success. (Information message).
IKEv1 Information-Notice: transmit success. (R-U-THERE?).
IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
IKE Packet: transmit success. (Information message).
IKEv1 Information-Notice: transmit success. (R-U-THERE?).
IKEv1 Dead-Peer-Detection: request retransmitted. (Initiator DPD Request).
... This is repeated a number of times until the following message is seen
IKEv1 Dead-Peer-Detection: maximum retransmits. (DPD maximum retransmits).
IKE Packet: transmit failed. (Information message).
IKEv1 Information-Notice: transmit failed. (Delete IPSEC-SA).
IKE Packet: transmit failed. (Information message).
IKEv1 Information-Notice: transmit failed. (Delete IPSEC-SA).

I have increased the debug level in racoon to see if it will give a little more information but still connected at the moment.

Nov 30, 2009 9:10 AM in response to prbarnard

No additional information from racoon with increased debug level. Looks like (in my case at least) there is no R-U-THERE-ACK being processed when the failure occurs. They do come through at other time though. I see

IKE Packet: transmit success. (Information message).
IKEv1 Information-Notice: transmit success. (R-U-THERE?).
IKEv1 Dead-Peer-Detection: request transmitted. (Initiator DPD Request).
IKEv1 Dead-Peer-Detection: response received. (Initiator DPD Request).

at other points in the log

Snow Leopard Cisco VPN timeout

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.