IPSec VPN & iOS time out

[Markus_Zimmermann]

Hello,

we use native IPSec-VPN on our iOS-devices against a FortiGate 80D. Unfortunetly the VPN-connection interrupts as soon as no more data are transmitted. Does anyone of you know how to set the idle-time before the fortigate 80D drops the connection?

Thank you in advance, Markus

[pkavin]

Hello Markus,

Can you please try the below commands and see if that makes any difference?

config vpn ipsec phase1-interface
edit <Phase1name>
set idle-timeout enable
set idle-timeoutinterval <value in seconds>
next
end

Also, sometimes DPDs can cause issues with tunnels when traffic is not passing and DPD messages are dropped by the ISP, so you can also try to turn off DPDs and see if that works or not.