Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Not applicable

sql connection lost over ipsec VPN

I have an ipsec vpn-tunnel between fg200 and fg60. When a dbconnection is inactive for some time (15minutes or so), the dbclient program looses its connection to the sql-server. On both devices: Keylife: 28800 Nat-traversal enabled Keepalive Fequency: 5 Dead Peer Detection enabled Any tips on how to resolve this?
6 REPLIES 6
abelio
SuperUser
SuperUser

you could try this with CLI, assuming you' re running MSSQL on standard 1433/tcp port (if not, or you' re using another DB or port, modify according to that) config system session_ttl config port edit 1433 set timeout 3600 next end end (Timeout MSSQL session = 1 hour) If you don' t have many dbconnections active at same time you could raise this timeout playing with timeout settings . hope it helps

regards




/ Abel

regards / Abel
Not applicable

Raising the timeout worked fine :-) Do have have to use same value for both sides? Site A <-> Site B Site A hosts the MS-SqlServer it also host a website with lotsa db-connections.
nsantin
New Contributor III

Are you using Oracle? If so then changing the timeout probably won' t work.
abelio

there' s one reference for the oracle situation: http://kc.forticare.com/default.asp?id=593&SID=&Lang=1

regards




/ Abel

regards / Abel
Not applicable

if the sql session goes down, doesnt mean the tunnel goes down too?
nsantin
New Contributor III

nope
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors