6-8
Cisco AnyConnect VPN Client Administrator Guide
OL-12950-012
Chapter 6 Configuring AnyConnect Features Using CLI
Configuring, Enabling, and Using Other AnyConnect Features
hostname(config-group-policy)# webvpn
hostname(config-group-policy)# sv
c dpd-interval gateway 30
hostname(config-group-policy)# sv
c dpd-interval client 10
Enabling AnyConnect Keepalives
You can adjust the frequency of keepalive messages to ensure that an AnyConnect client or SSL VPN
connection through a proxy, firewall, or NAT device remains open, even if the device limits the time that
the connection can be idle. Adjusting the frequency also ensures that the client does not disconnect and
reconnect when the remote user is not actively running a socket-based application, such as Microsoft
Outlook or Microsoft Internet Explorer.
To set the frequency of keepalive messages, use the svc keepalive
command from group-policy webvpn
or username webvpn configuration mode:
[no] svc k
eepalive {none | seconds}
none disables client k
eepalive messages.
seconds en
ables the client to send keepalive messages, and specifies the frequency of the messages
in the range of 15 to 600 seconds.
The default is keepalive messages are disabled.
Use the no form
of the command to remove the command from the configuration and cause the value
to be inherited:
In the following example, the security appliance is conf
igured to enable the client to send keepalive
messages with a frequency of 300 seconds (5 minutes), for the existing group-policy sales:
hostname(config)# group-policy sales attributes
hostname(config-group-policy)# we
bvpn
hostname(config-group-webvpn)# sv
c keepalive 300