IPsec stops routing after a while
Using the same setup as this bug:
It appears that after a while with no clear trigger, even Shrewsoft VPN client will stop routing traffic after a while. I have noticed that it seems to happen after I have been connected, then left and had my computer hibernate. Upon returning and reconnecting, the VPN will not route any traffic at all until I restart the pfsense box, at which point it starts working again.
It may be the same issue as the other bug above, but I cannot reliably trigger it by simply connecting and disconnecting (whereas with the Cisco client, the first connection breaks things).
EDIT: It looks like a connection interruption triggers this-- I can make it happen by disconnecting and reconnecting the wireless without properly disconnecting from the VPN.
As in the other bug, let me know if access to this test box would be useful-- I have no concerns about giving access to the interface, as it is simply a test box.
pfSense 2.0 (release), i386
on a Dell Dimension 420
Using Mobile IPsec--
Providing a virtual IP and DNS
Phase 1 settings:
Auth Method: Mutual PSK + Xauth
My identifier: My IP address
Peer identifier: UDN (email@example.com)
preshared key: mypks
Policy Generation: on
Proposal checking: obey
Encryption: AES128, with MD5
DH key group 2
Nat Traversal enabled
DPD on, 5 seconds, 5 retries
Local network: 0.0.0.0/0
Encryption: AES, 3des
Updated by c c almost 10 years ago
- File broken_ipsec_connection.txt broken_ipsec_connection.txt added
- File working_ipsec_connection.txt working_ipsec_connection.txt added
- File 22.214.171.124.vpn 126.96.36.199.vpn added
Attached are logfiles. First is a connection while racoon is in a hung state, followed by 4 pings to 188.8.131.52 (all timed out), followed by a disconnection. Second log is the same thing after a restarting racoon (enabling and disabling racoon debug mode).
Both connections were done with Shrewsoft VPN client (configuration is attached). I have altered the IP and PSK in the profile, let me know if you need that info
As I said, issue can be triggered by simply connecting, and then disabling your network connection (unplugging, wifi disconnect, etc), which will break that connection for good until racoon is restarted.
Let me know if you wish to try the vpn connection for testing / have a login to the firewall.