How to make VPN client auto timeout when it still idle?

How to make VPN client auto disconnect when it still idle?
Hi,I found some user still connected the VPN evenif they dose not use the VPN resouse.
I try to set a "idle timeout" for the VPN configuration.
We use PIX515 8.0.3 and CISCO ACS 4.2 for the VPN's connection and authentication,and the user use cisco vpn client for the connection.
I have tried many methods,but all failured.
First,I configed "vpn-idel-timeout 5" on PIX.It can not worked.
so,I add Radius(CISCO VPN 3000/ASA/PIX 7.0+) attribute "[026/3076/050] Authenticated-User-Idle-Timeout" on CISCO ACS,It still not worked.
And I also add IETF RADIUS Attributes "[028] Idle-Timeout" on group setting on ACS,it always not worked.
i found in vpn client's statistics,it always has some byte sended or received, i thought it maybe IPsec keepalive message or Radius message.
This maybe the reason because the PIX or ACS think the vpn user is keep working.
Can someone tell me how to make a "idle time out"?
best regard.
Roger

  here is the configuration on PIX,
group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value mydomain.com
address-pools value vpnpool group-policy DfltGrpPolicy attributes
wins-server value 10.0.0.67 10.0.0.68
dns-server value 10.0.0.67 10.0.0.68
vpn-simultaneous-logins 20
vpn-idle-timeout 5
split-tunnel-policy tunnelspecified
split-tunnel-network-list value vpn-acl
default-domain value want-want.com
address-pools value vpnpool

Similar Messages

  • How to make menu to auto close when a menu item is selected?

    hi ...my question is described above..
    to make things clearer i have written a mini code to demonstrate my problem
    import java.awt.event.ActionEvent;
    import java.awt.event.ActionListener;
    import javax.swing.*;
    /* just a frame with a JMenuBar with a JMenu with two RadioButtons
    public class myFrame2 extends JFrame implements ActionListener{
         JMenuBar mb ;
         JMenu mi;
         JRadioButton rb1;
         JRadioButton rb2;
         public myFrame2(){
              super();
              mb = new JMenuBar();
              mi = new JMenu("New");
              rb1 = new JRadioButton("Button 1");
              rb1.addActionListener(this);
              rb1.setActionCommand("action1");
              rb2 = new JRadioButton("Button 2");
              rb2.addActionListener(this);
              rb2.setActionCommand("action2");
              mi.add(rb1);
              mi.add(rb2);
              mb.add(mi);
              setJMenuBar(mb);
              pack();
              setVisible(true);
         @Override
         public void actionPerformed(ActionEvent e) {
              // Do something......
         public static void main(String args[]){
              new myFrame2();
    }If you run this program you will see that when you select a RadioButton the menu doesn't hide ...
    How can i make it hide when a menu item (JradioButton) is selected?
    thanks in advance
    Edited by: Pitelk on Jun 10, 2008 7:42 AM

    On a menu use JRadioButtonMenuItem.
    import java.awt.*;
    import java.awt.event.*;
    import javax.swing.*;
    public class JRadioButtonMenuItemExample {
        public static void main(String[] args) {
            EventQueue.invokeLater(new Runnable(){
                public void run() {
                    launch();
        static void launch() {
            JMenuBar mb = new JMenuBar();
            JMenu menu = new JMenu("menu");
            mb.add(menu);
            ButtonGroup bg = new ButtonGroup();
            JRadioButtonMenuItem item1 = new JRadioButtonMenuItem("alpha");
            bg.add(item1);
            menu.add(item1);
            JRadioButtonMenuItem item2 = new JRadioButtonMenuItem("beta");
            bg.add(item2);
            menu.add(item2);
            JRadioButtonMenuItem item3 = new JRadioButtonMenuItem("gamma");
            bg.add(item3);
            menu.add(item3);
            JFrame f = new JFrame();
            f.setJMenuBar(mb);
            f.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
            f.setSize(400, 300);
            f.setLocationRelativeTo(null);
            f.setVisible(true);
    }

  • How to make 2 clients on same VLAN communicate to each other when tunnel-loop-prevention is enabled?

    Requirement:
    How to make two clients on same VLAN communicate to each other when tunnel-loop-prevention is enabled on tunneled-node configuration at controller?
    Whenever we enable tunnel-loop-prevention on controller while we configure tunneled-node, the communication between two tunneled-node client on same VLAN is blocked or dropped.
    If the tunneled-node clients are of different VLANs then they can communicate between them even when the tunnel-loop-prevention is enabled on the controller.
    Solution:
    To make two tunneled-node client on same VLAN to communicate between them, we need to enable "local-proxy-arp" for the interface VLAN on the controller.
    Once it is enabled now the tunneled-node clients on same VLAN can communicate between each other. 
    Configuration:
    To enable "local-proxy-arp":
    Get to the interface of the VLAN on the controller
    Example :
    (config)#interface vlan 5
    (config)#ip local-proxy-arp
    To enable tunnel loop prevention on controller
    (config)# tunnel-loop-prevention
    Verification
    Show commands:
    To check if tunnel-loop-prevention is enabled or disabled
    #show tunneled-node config
    Tunnelded node Server: Enabled
    Tunnel Loop Prevention: Enabled
    To check if local-proxy-ap is enabled:
    #show interface vlan 5
    Look for in the output "ProxyARP enable"

    streetfi8er wrote:
    Server ready,waiting for client:
    Exception in thread "New THREAD" java.lang.NullPointerException
         at server4$server4Thread.run(server4.java:88)
    Failed to accept client
    when i run the second client programme on different a console in the same system i get the error that:
    Unknown HostOK, I'm no socket programming expert; but I can see a few potential problems with what you've written.
    1. First off, which line is line 88? Line numbers would be useful. Also, indenting your code properly would make it easier to read.
    2. Your 'while(!str.equalsIgnoreCase("close"))' will always fail with a NullPointerException because 'str' is initially set to null.
    3. Your 'while(true)' loop worries me. How does it exit? Relying on an exception is usually very bad practise.
    4. You are not handling SecurityExceptions. While it's unlikely to happen on your machine; it could easily happen on another.
    5. It might be worth indicating the actual exception thrown in your "Failed to accept client" message. accept() can throw three different types of IOException.
    6. All the threads you create will be called "New THREAD", which doesn't provide much value.
    HIH
    Winston

  • How many concurrent VPN client sessions available for cisco 2621XM?

    I have cisco router 2621XM with IOS c2600-advipservicesk9-mz.124-11.T4.
    I want to know, how many concurrent VPN client sessions can be available in this image.

      here is the configuration on PIX,
    group-policy DfltGrpPolicy attributes
    wins-server value 10.0.0.67 10.0.0.68
    dns-server value 10.0.0.67 10.0.0.68
    vpn-simultaneous-logins 20
    vpn-idle-timeout 5
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value vpn-acl
    default-domain value mydomain.com
    address-pools value vpnpool group-policy DfltGrpPolicy attributes
    wins-server value 10.0.0.67 10.0.0.68
    dns-server value 10.0.0.67 10.0.0.68
    vpn-simultaneous-logins 20
    vpn-idle-timeout 5
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value vpn-acl
    default-domain value want-want.com
    address-pools value vpnpool

  • How to make the backlight stay on when charging? N...

    Hi
    How to make the backlight stay on when charging?  or it is not possible?
    Thanks  

    Did you select HIDE under the Options (in the application) ? Its working fine on my Nokia 5800xm
    There is one more.. KeepItOn also available at OVI Store..
    --------------------------------------------------​--------------------------------------------------------​--------------------------------------------------​--If you find this helpful, pl. hit the White Star in Green Box...

  • How to make icons of photos bigger when selecting to attach to email?

    how to make icons of photos bigger when selecting to attach to email?

    Changing the DPI to 120 won't affect the font size of the menu bar in the Editor.  See this FAQ for what happens when you change the DPI:
    http://www.johnrellis.com/psedbtool/photoshopelements-6-7-faq.htm#The_Organizers_Menu_Bar_ doesnt_show

  • How to make pdf file auto open with adobe reader after downloaded

    how to make pdf file auto open with adobe reader after downloaded

    I note from your system details that you have the plugin for adobe pdf s so I would have expected the files should open in firefox '''without''' you needing to explicitly download them.
    Once the files are open in firefox, you will also get the option to save them permanently to a location on your computer. If you wish I suppose you could set the file type pdf to be associated with and be opened by firefox instead of with the Adobe Acrobat Reader, but that would just seem to be an additional complexity.

  • How to make a rubber effect like when you swipe between apps using 4 fingers on iPad ?

    Hey guys,
    So how to make a rubber effect like when you swipe between apps (first or last app) using 4 fingers on iPad iOS7 ? Any examples ?
    Thanks!
    Ivan

    Please do not double post the same question.
    Just like I said before. Animate X scale and position. Set the anchor point of the left image to the left side. You can then use an expression or just generate keyframes for scale. When you flip to the next screen then animate position. Easy basic animation except for the bounce. Key framing the bounce so that it looks natural takes a lot of experience or an expression.
    Google bounce expression after effects and find this. http://www.motion-graphics-exchange.com/after-effects/Wiggle-rubber-bounce-throw-inertia-e xpressions/4ad0f32a944ad
    There are a bunch of other solutions.
    There is no single click solution to this problem and it is not an effect, it is an animation.

  • How to make a button stay down when I click on it in  CSS nav bar.

    So I have created a horizontal navigation bar, I use the CSS
    Sprites/Pixy method to get the hover working with the same image as
    the link/in active stage of the buttons.
    Now how do I make the button stay down when someone click on
    them?
    These are the codes for the nav bar.
    #nav{
    width: 780px;
    list-style: none;
    margin-top: 0;
    margin-right: auto;
    margin-bottom: 0;
    margin-left: auto;
    padding: 0;
    height: 40px;
    #nav li{
    font-family: Arial, Helvetica, sans-serif;
    font-size: 14px;
    font-weight: bold;
    float: left;
    padding: 0;
    #nav a{
    width: 125px;
    display: block;
    color: #000000;
    text-decoration: none;
    text-align: center;
    background-image: url(ZITTO_IMAGES/button_set1a.jpg);
    background-repeat: no-repeat;
    background-position: center 2px;
    padding-top: 14px;
    padding-bottom: 10px;
    background-color: #000000;
    #link2,#link3,#link4,#link5,#link5,#link6 { margin-left:
    6px;}
    #nav a:hover{
    background-image: url(ZITTO_IMAGES/button_set1a.jpg);
    background-repeat: no-repeat;
    background-position: center -36px;
    color: #FFFFFF;
    width: 125px;
    padding-top: 14px;
    padding-bottom: 10px;
    background-color: #000000;
    Everything works so far, the hover works when you roll the
    mouse but when you click the button goes right back.
    How can I make it stay down and then go back to normal when
    you click on another link/button?
    Thanks very much.
    Patrick

    Read my suggestion again. You are missing a critical point. I
    show you
    exactly where to put the stylesheet. And it doesn't matter
    how many
    stylesheets you have on a page.
    Murray --- ICQ 71997575
    Adobe Community Expert
    (If you *MUST* email me, don't LAUGH when you do so!)
    ==================
    http://www.projectseven.com/go
    - DW FAQs, Tutorials & Resources
    http://www.dwfaq.com - DW FAQs,
    Tutorials & Resources
    ==================
    "Webethics" <[email protected]> wrote in
    message
    news:[email protected]...
    >
    quote:
    Originally posted by:
    Newsgroup User
    > Change this -
    >
    > #nav a{
    > width: 125px;
    > display: block;
    > color: #000000;
    > text-decoration: none;
    > text-align: center;
    > background-image: url(ZITTO_IMAGES/button_set1a.jpg);
    > background-repeat: no-repeat;
    > background-position: center 2px;
    > padding-top: 14px;
    > padding-bottom: 10px;
    > background-color: #000000;
    > }
    >
    > #link2,#link3,#link4,#link5,#link5,#link6 { margin-left:
    6px;}
    >
    >
    > #nav a:hover{
    > background-image: url(ZITTO_IMAGES/button_set1a.jpg);
    > background-repeat: no-repeat;
    > background-position: center -36px;
    > color: #FFFFFF;
    > width: 125px;
    > padding-top: 14px;
    > padding-bottom: 10px;
    > background-color: #000000;
    > }
    >
    > to this -
    >
    > #nav a{
    > width: 125px;
    > display: block;
    > color: #000000;
    > text-decoration: none;
    > text-align: center;
    > background-image: url(ZITTO_IMAGES/button_set1a.jpg);
    > background-repeat: no-repeat;
    > background-position: center 2px;
    > padding-top: 14px;
    > padding-bottom: 10px;
    > background-color: #000000;
    > }
    >
    > #link2,#link3,#link4,#link5,#link5,#link6 { margin-left:
    6px;}
    >
    >
    > #nav a:hover{
    > background-position: center -36px;
    > color: #FFFFFF;
    > }
    >
    > Then on each individual page, change this -
    >
    > </head>
    >
    > to this -
    >
    > <style type="text/css">
    > #nav a#link4 {
    > background-position:center - 36px;
    > }
    > </style>
    > </head>
    >
    > (for link4, for example)
    >
    >
    > --
    > Murray --- ICQ 71997575
    > Adobe Community Expert
    > (If you *MUST* email me, don't LAUGH when you do so!)
    > ==================
    >
    http://www.projectseven.com/go
    - DW FAQs, Tutorials & Resources
    >
    http://www.dwfaq.com - DW FAQs,
    Tutorials & Resources
    > ==================
    >
    >
    > "Webethics" <[email protected]> wrote
    in message
    > news:[email protected]...
    > >
    quote:
    Originally posted by:
    Newsgroup User
    > > When they click on a button, do they go to another
    page? And is each
    > > button
    > > uniquely identified?
    > >
    > > If so, then put a little stylesheet on each such
    page that sets the
    > > particular button to the down sprite settings,
    e.g.,
    > >
    > > a#link6 { downspritevalues }
    > >
    > > --
    > > Murray --- ICQ 71997575
    > > Adobe Community Expert
    > >
    > >
    > > This is the link to the page.
    > >
    http://www.patrickjudson.com/zitto_web1d.html
    > > What state do I use to get this effect? The active
    or the visited?
    > >
    > > I want the buttons to remain down when click or
    even better, how do I
    > > get
    > > the
    > > welcome button to appear down when a person visits
    the page to show them
    > > they
    > > are at the home page.
    > >
    > > Thanks so much. Patrick
    > >
    > >
    > >
    >
    >
    >
    > Hey! Murray, thanks very much for the efforts. However
    I'm still confused
    > as
    > to where to insert the individual styles on each page.
    >
    > The pages already have a style sheet, in fact they all
    share the same
    > style
    > sheet. The following codes below is what you instructed
    but I'm confused
    > as to
    > where to insert them since the page already has a head
    opening and closing
    > as
    > well as a style opening and closing tags. Can you please
    add the codes you
    > instructed so I can see where they go and how to
    implement them?
    >
    > Thanks - Patrick
    >
    >
    > Then on each individual page, change this -
    >
    > </head>
    >
    > to this -
    >
    > <style type="text/css">
    > #nav a#link4 {
    > background-position:center - 36px;
    > }
    > </style>
    > </head>
    >
    > (for link4, for example)
    >
    >
    >
    >

  • How to make J2EE engine auto load The JSP Pages

    After I modify some JSP pages, If I just copy them to  the folder in the Server, The pages didn't update.
    How to make it auto update?

    Hello Shen,
    please take in consideration, that JSP page is translated to HttpServlet  component when deployed. It's not accessed via original JSP file.
    You can try to modify the final HttpServlet class file, but then you have to go through pre-compiling.
    Hope it helps,
    regards.
    mz

  • How to manage VPN clients in SCCM 2012

    Hi,
    In my environment, I have multiple clients over VPN in multiple sites, 
    now I have problem, I how can I manage those clients for VPN, coz n CM 2012 I have to give boundary group and n boundary group  have to give the site server references, and I have only one IP subnet in whole environment, but from that subnet, some clients
    are from A site, B site and C site, now can you tell me how to manage them, 
    How to configure DP for them??
    How they can get correct MP?  
    Sharad Singh | My blogs: SharadTech | Twitter:
    @SinghSharaad | | Please remember to click “Mark as Answer” on the post that helps you.This can be beneficial to other community members reading the thread.

    Jason, 
    I have only one IP subnet means I have only one IP subnet for VPN clients n all environment, all clients from all sites which are connecting with VPN they will fall on that VPN IP subnet.
    other than  have LAN/WAN link for all sites, which I have already configured according to Sites/DP and there s no problem, every thing is working fine.
    but for VPN i have only one network which is worldwide, and that network used by all sites, this is the problem, How can I manage that network, and where should I add for boundary/DP for site references??? 
    Sharad Singh | My blogs: SharadTech | Twitter:
    @SinghSharaad | | Please remember to click “Mark as Answer” on the post that helps you.This can be beneficial to other community members reading the thread.

  • How to make cost element field appear when create network activity service

    Hi All,
    Please help. We create a project ,wbs and network activity using external service. How can we make appear the cost element when the service master appear. The system require cost element but we cannot see the cost element field.
    Steps :
    *. CJ20n.
    *. Create WBS and network header
    *. Then network activity for external service.
    *. Then it appears service specifications : ext specs Task List Maintain
    *. I Put Service no, and the error message appears :
    Please enter a cost element
    Message no. SE121
    *. But we can find where the cost element is. It seems the field disappear.
    PLease help.
    Thank you.
    Nies

    Hi,
    Yes. It is already blank. But the cost element field still not appears when we create activity service. It shows :
    Please specify a valid account assignment
    Message no. SE181
    Diagnosis
    You have entered an account assignment category in the document item for which an account assignment is mandatory.
    All account assignment lines in the service specifications either have been deleted or are inactive (e.g. account assignment lines of a contingency item).
    Procedure
    Please enter an account assignment for the services or value limits.
    The entry of an account assignment is unnecessary if you choose "unknown account assignment" in the document item.

  • How to make email client account setup automatically select inbound mail and smtp server.

    I have the mail service successfully running on OS X Server 10.8.2.  I am able to send and receive email as well as setup email accounts on various email clients (iphone, ipad, mac, etc).  I notice that when I set up a new account that I have to specify both the inbound and smtp mail servers as well as specifying the user id for each.  I am using an SSL certificate that appears to be working.  The ports are selected (993/995 and 587) automatically and the default is to use SSL.
    However, when I set up a Comcast account - (configured as "other") - I only have to enter Full name, email address and password - and from this it is able to determine that the incoming mail server is "mail.comcast.net" and outgoing smtp server is "smtp.comcast.net".  It also fills in the userid and password for both inbound and smtp servers - as well as the ports.  I have been trying to get this to work automatically when setting up accounts for my mail server - but have not been able to figure out how to do this - or if it is possible.
    In googling - I have found that I can set up several different SRV records such as (_submission._tcp, _imap._tcp, _imaps._tcp, _pop3._tcp, _pop3s._tcp) and these are supposed to provide this functionality to email clients that are able to use the SRV records.  I have set these up externally at my registered domain provider - and I am able to query them via nslookup, dig and host.
    Is Comcast using some other special method of providing the server names to the mail client setup - or am I doing something wrong - or is this a functionality that needs to be supported on the mail server side as well.  I am relatively new to mail servers and trying to work my way through the learning process.

    Understand the functionality you are wanting, basically one can use Outlook / Exchange mail server as an example. It just happens.
    As I understand in the background the DNS _SRV records point to a machine which serves up an XML file and that is the information which tells the client how to configure itself.
    I did some research before posting my first reply and found that, in the Apple client situation, even when someone setup the the SRV records + the XML it didn't work seamlessly.
    https://discussions.apple.com/message/12949449#12949449
    Here's some other links that give some more background.
    https://groups.google.com/forum/#!msg/macenterprise/qIKUMxMae8o/iLnIkMgeOX0J
    http://www.virtuworks.com/how-to-setup-outlook-autodiscovery-for-your-domain/
    If you were going to persue it you will need to find out the format for the autodiscovery XML file. Also the XML file will have to be hosted on your server, you couldn't likely put it on the public DNS server.

  • How to make iMac run less hot when in Bootcamp?

    When I play a game in win7 trough bootcamp, my iMac gets real hot.
    How to make it run cooler?
    It sounds like fans could be running faster; but I want it to do it automaticly.

    Download Lubbo Fancontrol for MacBook Pro to help with the fans.
    Lubbo FanControl for MacBook Prohttp://sourceforge.net/projects/lubbofancontrol/
    Also these
    AIDA64 Extreme Editionhttp://www.aida64.com
    http://www.aida64.com/product/aida64-extreme-edition/overview
    CCleaner
    http://www.piriform.com/ccleaner

  • How to make VPN TCP session stateful?

    I found if I set up interface rules for VPN, even from higer security level interface to lower security level interface, the TCP session is not stateful. I have to open relative ports on both interface. Is there anyway can make VPN connection TCP session stateful, just like using normal interfaces (like with out VPN?) ? Thanks!

      here is the configuration on PIX,
    group-policy DfltGrpPolicy attributes
    wins-server value 10.0.0.67 10.0.0.68
    dns-server value 10.0.0.67 10.0.0.68
    vpn-simultaneous-logins 20
    vpn-idle-timeout 5
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value vpn-acl
    default-domain value mydomain.com
    address-pools value vpnpool group-policy DfltGrpPolicy attributes
    wins-server value 10.0.0.67 10.0.0.68
    dns-server value 10.0.0.67 10.0.0.68
    vpn-simultaneous-logins 20
    vpn-idle-timeout 5
    split-tunnel-policy tunnelspecified
    split-tunnel-network-list value vpn-acl
    default-domain value want-want.com
    address-pools value vpnpool

Maybe you are looking for