Re: VPN and dead peer detection
Russell Meyer <rmeyer-pedKuh61NU8MLht0+yDdMwC/[email protected]>
| Newsgroups | gmane.comp.security.ipcop.user |
|---|---|
| Message-ID | <[email protected]> |
Even a "restart" doesn't help...all Vpn gateways are static ips and latest rev with no plugins... I set some clients to leverage DNS across the tunnel, didn't even budge, stayed in a closed state Sent from my iPhone > On Aug 15, 2015, at 8:55 AM, Spyros Tsiolis <stsiol-/[email protected]> wrote: > > >> >> I can't say as I have any answers for >> you - only more questions. I have a >> similar situation in that I have a couple of 1.4.something >> setups. One >> with a static IP, the other a dynamic IP. That tunnel >> goes down all the >> time. Sometimes it will come back up on its own, other >> times not so much. >> I can't figure out any rhyme or reason for it. >> >> I have also had a config with 4 different units, two on >> 1.4.somenum and two >> on 2.2.somenum. This had a mesh config where each node >> had connections to >> the other 3. All static IPs. With all of those >> tunnels, if one of the >> nodes went down, most of the time everything would just >> recover when it >> came back up. Sometimes (again - not sure why) one or >> two of the tunnels >> would stay down and require a manual restart... >> >> So - you're not alone in the VPN funk is my point... >> >> Matt > > > Nop . He is definitely not alone. > > Same here . An assortment of v1.4s, v2.xs and Mikrotik routerboards > Some using static ip addresses, others using dyn ips with dyndns. > The installations with dynamic ips have the same behaviour as the one > you described. > > I have to manually restart the vpn tunnel from the ipcop side (if it's ipcop > to mikrotik that is). > > That has been going for years now. > > s. > > [REVERSEVISION USER CONFERENCE]<http://www.reversevision.com/rv-user-con/> Confidentiality Notice: This communication may contain information that is proprietary, privileged or confidential, or otherwise legally exempt from disclosure. If you are not the named addressee, you are not authorized to read, print, retain, copy or disseminate any part of this message. If you have received this message in error, please notify the sender immediately by email and delete all copies of the message. ReverseVision, Inc. expressly disclaims that any legal, binding or valid contract was created or modified or exists as a result of the transmission of this e-mail. ------------------------------------------------------------------------------ _______________________________________________ IPCop-user mailing list [email protected] Manage your subscription or unsubscribe https://lists.sourceforge.net/lists/listinfo/ipcop-user