Re: Periodically losing connection
Tommi Kyntola <[email protected]> Tue, 15 Jun 2004 12:56:18 +0300
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <[email protected]> |
Abraham Pearson wrote: > We are using Cipe through a Pix firewall and a Microsoft ISA server. > We can get the connection up, but we are losing the connection periodically. > The connection lasts anywhere from three minutes to twenty minutes. Any ideas? Probably masquerading nat somewhere in between. I suggest putting ping=60 or similar line to your cipe configs. That way cipe sends an internal "ping" packet every 60 seconds keeping the connection up also for the server. Best part about cipe's internal ping is that you don't need extra firewall rules for the icmp packets as you would with ordinary ping. On the otherhand if you're using a gsm or gprs or similar link where you want to avoid needless traffic I suggest you put snat and dnat entries (man iptables) to your firewall making the nat static. (effectively port forwarding the cipe port from the server to the firewall) cheers, Kynde [email protected] -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>