Re: Periodically losing connection

Les Mikesell <[email protected]> Thu, 10 Jun 2004 20:13:58 -0500
Newsgroups gmane.comp.encryption.cipe
Message-ID <[email protected]>
On Thu, 2004-06-10 at 19:06, Abraham Pearson wrote:
> We are using Cipe through a Pix firewall and a Microsoft ISA server. 
> We can get the connection up, but we are losing the connection 
> periodically.  The connection lasts anywhere from three minutes
> to twenty minutes.  Any ideas?

If one end or the other is doing dynamic NAT, the UDP entries
are timing out in periods of no activity. If possible, make
the NAT static - if not, set up a ping or something to generate
traffic often enough to maintain the NAT table entry.  If you
aren't using NAT you can have a similar issue with firewalls
that dynamically allow return packets to the source of UDP
packets.  You can fix that by configuring it to always allow
the CIPE packets based on source, destination and port.

---
  Les Mikesell
   [email protected]



--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>