Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When using a a IPSec VPN in OSX, I'm getting prompted to re-enter my password every ~45 minutes. After a certain amount of re-connects, no further connection will succeed. I have to restart the laptop by then, which means a restart a day.

Is there a way to reset the IPSec cache etc, so that I don't have to restart?

OSX, latest version, using as provider.

share|improve this question
up vote 2 down vote accepted

This is actually a bug in Mac OS X, all Cisco IPSec connections have a timeout (hard limit of the lifetime) of 3600 second (60 minutes) because of the soft and hard limit of IPSec connections it is most of the time around 45 to 50 minutes.

You can check the files (with an active IPSec connection) in


for the limits. On a Terminal type

sudo more /var/run/racoon/*.conf

and you can see the content of the config file for the active IPSec connection, all lifetime values are 3600 seconds

lifetime time 3600 sec

The bug exists since a long time and is still present for example in Mac OS X Mavericks (10.9.1). There is a workaround (more or less) for this check



Apple Diskussion #2163407


Apple Diskussion #2743319

For Witopia it is easier to use the Mac OS X Client from Witopia

Witopia Client

share|improve this answer
Confirming this works now and happily enjoy my VPN. Thank you. – Sebastian Roth Nov 8 '12 at 4:01
Easiest to follow instructions I've seen:… – olore Jan 22 '14 at 18:56

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.