Bug #1970
closedIPsec stops routing after a while
100%
Description
Using the same setup as this bug:
http://redmine.pfsense.org/issues/1969
It appears that after a while with no clear trigger, even Shrewsoft VPN client will stop routing traffic after a while. I have noticed that it seems to happen after I have been connected, then left and had my computer hibernate. Upon returning and reconnecting, the VPN will not route any traffic at all until I restart the pfsense box, at which point it starts working again.
It may be the same issue as the other bug above, but I cannot reliably trigger it by simply connecting and disconnecting (whereas with the Cisco client, the first connection breaks things).
EDIT: It looks like a connection interruption triggers this-- I can make it happen by disconnecting and reconnecting the wireless without properly disconnecting from the VPN.
As in the other bug, let me know if access to this test box would be useful-- I have no concerns about giving access to the interface, as it is simply a test box.
Configuration details:
pfSense 2.0 (release), i386
on a Dell Dimension 420
Using Mobile IPsec--
Providing a virtual IP and DNS
Phase 1 settings:
Interface: WAN
Auth Method: Mutual PSK + Xauth
Negotiation: Agressive
My identifier: My IP address
Peer identifier: UDN (user@domain.com)
preshared key: mypks
Policy Generation: on
Proposal checking: obey
Encryption: AES128, with MD5
DH key group 2
Nat Traversal enabled
DPD on, 5 seconds, 5 retries
Phase 2:
Mode: tunnel
Local network: 0.0.0.0/0
Protocol: ESP
Encryption: AES, 3des
Hash: md5
PFS off
Files
Updated by c c about 13 years ago
- File broken_ipsec_connection.txt broken_ipsec_connection.txt added
- File working_ipsec_connection.txt working_ipsec_connection.txt added
- File 98.175.1.1.vpn 98.175.1.1.vpn added
Attached are logfiles. First is a connection while racoon is in a hung state, followed by 4 pings to 8.8.8.8 (all timed out), followed by a disconnection. Second log is the same thing after a restarting racoon (enabling and disabling racoon debug mode).
Both connections were done with Shrewsoft VPN client (configuration is attached). I have altered the IP and PSK in the profile, let me know if you need that info
As I said, issue can be triggered by simply connecting, and then disabling your network connection (unplugging, wifi disconnect, etc), which will break that connection for good until racoon is restarted.
Let me know if you wish to try the vpn connection for testing / have a login to the firewall.
Updated by Jim Pingle about 13 years ago
Might be related to #1351
Also this post to the ipsec-tools list sounds similar:
http://sourceforge.net/mailarchive/forum.php?thread_name=1319197654-sup-3163%40pruts.nl&forum_name=ipsec-tools-devel
Updated by Dim Hatz about 13 years ago
Updated by Ermal Luçi almost 13 years ago
- Status changed from New to Feedback
- % Done changed from 0 to 100
Applied in changeset commit:d2a5443f5d0f9747be874a4f8787ca18348a8461.
Updated by Jim Pingle over 12 years ago
- Status changed from Feedback to Resolved