Initial Contact
If a Cisco VPN Client is suddenly disconnected, the gateway might not immediately detect
this, so the current connection information (IKE and IPSec security associations [SA]) will
still be valid. Then, if the VPN Client attempts to reestablish a connection, the new
connection will be refused because the gateway still has the previous connection marked
as valid. To avoid this scenario, Initial Contact has been implemented in all Cisco VPN
products. Initial Contact enables the VPN Client to send an initial message that instructs
the gateway to ignore and delete any existing connections from that client, thus preventing
connection problems caused by SA synchronization issues.