VPN TIMEOUT USING PIX 515 2

[marchristensen]

I am using Cisco Pix 515 Firewall to secure a VPN remote connection into my organization's network. Is there some way I can Time-Out the connection. In other words, if a user is logged on from home through the VPN connection and there is no keyboard activity for 15 minutes, can I either:
1- Terminate the connection
or
2- Require a password to continue the connection

Thanks for pointing me in the direction of a solution to this problem.

 

[Bluecrack]

Using an IPsec connection the following commands are for the idle timeout and the total allowable connected time.

vpngroup group_name idle-time idle_seconds
vpngroup group_name max-time max_seconds

Bluecrack

 

[webnetwiz]

Bluecrack is right on the money. That's the command syntax.

 

[marchristensen]

Thanks so much for the right-on info. Is there anywhere I can find documentation on idle-time command. I looked all over Cisco's web site and all it shows is one example (over and over again) of one line of code using idle-time. Would like to read a bit about it, if available. Thanks again.

 

[Bluecrack]

Here's the link the reference manual.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/ipsec/commands.htm#xtocid185914

Bluecrack

 

[marchristensen]

What can I say, Bluecrack. YOu are incredible! I spent over an hour on the Cisco site and could not find it. Thank you so much.

 

[Bluecrack]

No problem.

 

[marchristensen]

OK - Here's the problem - As I understand it, the idle-time command can only be used with IPSec and my Pix setup is a PPTP connection, Version 4.4.

Can I somehow cut off a remote VPN connection through the PIX 515 Firewall using PPTP, if the user does not type something for 10 minutes?

Does Cisco still support Version 4.4?

Thanks for your continued support.

 

[Bluecrack]

Sorry. Now that you mention it I seem to recall having problems with PPTP and timing out the connection as well. I only ran it for a short time so I don't recall exactly. I am not sure there is a way to time out the PPTP connection.

Does anyone else have any thoughts?

Bluecrack

 

[marchristensen]

Last plea - Does anyone know how I can cut off a remote VPN connection through the PIX 515 Firewall using PPTP, if the user does not type something for 10 minutes?

Any advice is appreciated.