Novell 3.8 VPN client through a DSL interface to a NBM 3.8 server. Client authenticates, is working, then gets a disconnect after some minutes. In the activity log I see recurring:

In quick succession:
VPN Control a timeout disconnect has occurred for client
IPSec packet discarded during policy checking, src='server', dst='client' (the server-assigned private dst address)

Then After about 10 seconds:
VPN Control Client removed from IPSEC
IKE Ipsec deleted ESP-SA mySP1=xxxxxx peerSP1=yyyyyyy dst:nn.nn.nn.nn (the public dst IP address)

These look to me related to each other. Concur? If so, what are they telling me about a problem?