On 13/10/2005 17:00, Luan Nguyen wrote: >Cisco default is 3600 for ipsec which the same as NS. So yeah, try changing >the lifetime of isakmp to 28800. > > Unfortunately that just means it breaks a couple of times a day instead of hourly...