Cisco ASA Drops connection and won't reconnect

[Sheridan]

We've been having some fairly regular issues with some clients on our Cisco (ASA) vpn - clients are running 5.1.8.22

 

The issue seems to be that once connected they may disconnect (which could be down to their home wifi) but the big issue that happens is that they won't reconnect for sometimes over an hour or more

 

I don't think the vpn is the issue as we often have clients connected for days on end, but I did test this and managed to replicate the issue:

 

- Laptop connected to home wifi - connected to VPN no issue

- Vpn dropped connected after 30 mins or so and didn't automatically connect - sits in the taskbar with the spinning connection

- Many reboots and vpn still won't connect (at the login screen) - the client simply times out or says no network connection despite being connected to the wifi

- Switched to another wifi (i.e hotspot) and the vpn connects immediately and things work as normal

 

So it appears if the vpn drops it will not reconnect until the network is changed, but I'm baffled as to what would cause this? Its not just one client as its happened across different ones. Its happened on different hardware as well (both home wifi and laptop)

 

I can't find any configuration on the ASA that would block reconnection on the same connection either - we have reconnection allowed anyway

[Joeloman]

There are a few things you can check:

Are you using Dead Peer Detection?
There may also be a group policy that a new tunnel should be created after 30 minutes and not just rekey, which doesn't always work.
Try changing the rekey to 60 minutes to see if that's where the problem is.

[Sheridan]

9 minutes ago, Joeloman said:

There are a few things you can check:

Are you using Dead Peer Detection?
There may also be a group policy that a new tunnel should be created after 30 minutes and not just rekey, which doesn't always work.
Try changing the rekey to 60 minutes to see if that's where the problem is.

Hmm I don't think so but I'll have a search for that thanks