Re: Periodically losing connection
Les Mikesell <[email protected]> Thu, 10 Jun 2004 20:13:58 -0500
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <[email protected]> |
On Thu, 2004-06-10 at 19:06, Abraham Pearson wrote: > We are using Cipe through a Pix firewall and a Microsoft ISA server. > We can get the connection up, but we are losing the connection > periodically. The connection lasts anywhere from three minutes > to twenty minutes. Any ideas? If one end or the other is doing dynamic NAT, the UDP entries are timing out in periods of no activity. If possible, make the NAT static - if not, set up a ping or something to generate traffic often enough to maintain the NAT table entry. If you aren't using NAT you can have a similar issue with firewalls that dynamically allow return packets to the source of UDP packets. You can fix that by configuring it to always allow the CIPE packets based on source, destination and port. --- Les Mikesell [email protected] -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>