Random Disconnects on Client VPN after S2S VPN creation
(assuming that 192.168.90.37 is the client's VPN address) 126.96.36.199 is a link local multicast address (compareable to 169.254.0.0/16) for mDNS (multicast DNS), This is used for example by some components of the Adobe Suite for LAN printing or quite heavily on OS X for multiple functions.
Best way to get around this is using a split tunneling configuration which either includes the VPN address range or anything except the multicast (and above) address range. You could use e.g. 192.168.0.0/16 and it wouldn't even collide with adddresses on the client's LAN because a longer prefix would still allow a 192.168.1.0/24 to bypass the tunnel.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...