Forum Discussion

Tutor

Nov 28, 2016

IPSec VPN Connection lost

My client is a Netgear Prosafe VPN Client Lite 6.4 (Windows 10 Prof x64) and I connect to a FVS336Gv3 firewall in the office.I can connect usually without any problem, I can open a Windows Remote Des...

Troubleshooting

BGy

Tutor

Dec 07, 2016

I found something something. In my prevoius comment the time of loosing connection was 10:05:00. And at the beginning of the log I found this:

20161207 09:13:06:804 Default (SA CTC-ctc-P2) is opening.
20161207 09:13:07:847 Default (SA CTC-P1) SEND phase 1 Main Mode  [SA] [VID] [VID] [VID] [VID] [VID]
20161207 09:13:07:964 Default (SA CTC-P1) RECV phase 1 Main Mode  [SA] [VID] [VID] [VID]
20161207 09:13:07:974 Default (SA CTC-P1) SEND phase 1 Main Mode  [KEY_EXCH] [NONCE] [NAT_D] [NAT_D]
20161207 09:13:08:201 Default (SA CTC-P1) RECV phase 1 Main Mode  [KEY_EXCH] [NONCE] [NAT_D] [NAT_D] [VID]
20161207 09:13:08:210 Default (SA CTC-P1) SEND phase 1 Main Mode  [HASH] [ID] [NOTIFY]
20161207 09:13:08:482 Default (SA CTC-P1) RECV phase 1 Main Mode  [HASH] [ID]
20161207 09:13:08:482 Default phase 1 done: initiator id local.com, responder id xxxxxxxxxxx.dnsalias.com
20161207 09:13:08:483 Default (SA CTC-P1) renewal in 3088 seconds (10:04:36)

"renewal in 3088 seconds (10:04:36)" The renewal time is the exact time of loosing connection. Something goes wrong about renewal...

Thanks,

Gyula

BGy

Tutor

Dec 07, 2016

And one more thing: I noticed that I have 3 active SA in firewall with 3 different IP addresses.The last one (ends with 105) is my current IP, the two line above it are my earlier ones. But the Tx amount are the same. The DPD shouldn't kill earlier ones?