vpn drops every 10 minutes: likely causes

TL;DR

Regular-interval drops are almost always a timer: IKE rekey, NAT session timeout, or an idle timeout. Check the client logs for the exact drop time pattern, then compare with the gateway's rekey and timeout settings. Random drops are the ISP; clockwork drops are configuration.

The error

(The VPN disconnects and reconnects every ~10 minutes, like clockwork.)

Steps

1. Confirm the pattern: check client logs for three consecutive drops and measure the interval. Expected: consistent interval (e.g. 600 seconds). Clockwork means timer; random means network.
2. Check the gateway's IKE/IPsec rekey lifetimes. Expected: noted. If the lifetime matches the drop interval, rekey is failing; the network team must investigate phase 2 rekey.
3. Check for NAT timeouts: the user's router may expire UDP mappings. Expected: identified if on a home router. Enabling NAT keepalives or MOBIKE on the client usually fixes it.
4. Check idle timeouts on the gateway and any "disconnect on idle" client setting. Expected: noted. A 10-minute idle timeout with light traffic looks exactly like this.
5. Test on a different network (phone hotspot). Expected: pattern persists or disappears. Disappears means the user's router/ISP; persists means gateway or client config.

When to use

• Disconnects on a regular schedule
• Rekey-related failures

When not to use

• Random, irregular drops (ISP or Wi-Fi issue)
• Drops only on specific networks

Compatibility

• IPsec-based VPNs (AnyConnect, GlobalProtect, native IPsec); timer concepts apply broadly

Variants

Drops every 8 hours

Typical IKE lifetime expiry; same diagnosis, longer timer.

Drops when the laptop sleeps

Power management killing the tunnel; adjust sleep and adapter power settings.

Why it happens

VPN tunnels are maintained by periodic rekeying and keepalives. When any timer in the chain fails (rekey rejected, NAT mapping expired, idle timeout hit), the tunnel drops and rebuilds on schedule.

Edge cases

• Carrier-grade NAT on the ISP side has aggressive timeouts; keepalives are the fix.
• Dual WAN routers flipping paths mid-tunnel cause drops that look periodic but are not.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_ZPqYflaTvXmi7ths1CSMSA

Resolved from the public thread: https://vectle.com/posts/pst_ZPqYflaTvXmi7ths1CSMSA

Thread query: vpn drops every 10 minutes: likely causes

TL;DR: Regular-interval drops are almost always a timer: IKE rekey, NAT session timeout, or an idle timeout. Check the client logs for the exact drop time pattern, then compare with the gateway's rekey and timeout settings. Random drops are the ISP; clockwork drops are configuration.