Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

When using a a IPSec VPN in OSX, I'm getting prompted to re-enter my password every ~45 minutes. After a certain amount of re-connects, no further connection will succeed. I have to restart the laptop by then, which means a restart a day.

Is there a way to reset the IPSec cache etc, so that I don't have to restart?

OSX, latest version, using www.witopia.net as provider.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

This is actually a bug in Mac OS X, all Cisco IPSec connections have a timeout (hard limit of the lifetime) of 3600 second (60 minutes) because of the soft and hard limit of IPSec connections it is most of the time around 45 to 50 minutes.

You can check the files (with an active IPSec connection) in

/var/run/racoon/

for the limits. On a Terminal type

sudo more /var/run/racoon/*.conf

and you can see the content of the config file for the active IPSec connection, all lifetime values are 3600 seconds

lifetime time 3600 sec

The bug exists since a long time and is still present for example in Mac OS X Mavericks (10.9.1). There is a workaround (more or less) for this check

Workaround

or

Apple Diskussion #2163407

or

Apple Diskussion #2743319

For Witopia it is easier to use the Mac OS X Client from Witopia

Witopia Client

share|improve this answer
    
Confirming this works now and happily enjoy my VPN. Thank you. –  Sebastian Roth Nov 8 '12 at 4:01
    
Easiest to follow instructions I've seen: wincent.com/wiki/… –  olore Jan 22 at 18:56

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.