AuthPoint session timeout

Veloso

HI folks
we are using authpoint with IPSEC VPN Client (Watchguard Client by NCP).
Everything works very well, except session timeout.

Every User is always kicked out of the VPN after 5h.38min / 5h:39min.

The session timeout of the IPSEC VPN on the Firebox is configured with 600min / idle 180min.

Logging:
2021-04-19 07:29:26 FWStatus, Authentication of MUVPN user [User1@Radius] from 92.192.99.116 was accepted, pri=6, proc_id=admd, msg_id=1100-0004
2021-04-19 07:29:26 FWStatus, IPSec VPN user User1@Radius from 92.192.99.116 logged in assigned virtual IP is 192.168.12.20, pri=6, proc_id=sessiond, msg_id=3E00-0002
2021-04-19 13:08:00 FWStatus, IPSec VPN user User1@Radius from 92.192.99.116 logged out assigned virtual IP is 192.168.12.20, pri=6, proc_id=sessiond, msg_id=3E00-0004

Watchguard M670 Cluster running 12.6.4U1

Any ideas?

Kind regards, Serafin

james.carson

Hi @Veloso

Since the client is logging out, it's likely a setting the client is getting from the VPN profile. 8hrs is the default rekey time, so I'd suggest starting there.

Check the SA life (in phase 1) and the rekey time (in phase 2). Make sure you get a new copy of the profile from the firewall, and upload it to the NCP client if/when you make a change here.