cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
763
Views
0
Helpful
2
Replies

VPN Client getting dropped without notice

jimmiejoe
Level 1
Level 1

Over the last week one of our off site employees has had their vpn connection dropped quite often, and without explanation. This employee is at a client's site, and uses their private network to access our network, which is connected. This individual is the only person of about 15 who is experiencing this to my knowledge, but it has been going on for at least 3 days.

The employee's laptop has VPN Client 3.5.1 on it, and is connecting to a 3005 concentrator. I asked the employee to log the client, and send me the results when kicked off. The following caught my eye, and makes me wonder what's happening in the following log lines (IP changed for confidentiality, but is concentrator outside IP):

3553 11:07:52.602 12/11/03 Sev=Warning/3 IKE/0xE3000068

Failed to send 84 bytes to 00.00.00.00, error = 0xFFFFFFFF

3554 11:07:54.615 12/11/03 Sev=Info/4 CM/0x63100025

Detected adapter address change

3555 11:07:54.615 12/11/03 Sev=Info/4 CM/0x6310001F

Adapter address changed. Terminate secure connections

The concentrator says:

Dec 11 10:30:23 BSO-VPN-3005 71602: 2003 Dec 11 10:27:52.390 CST -6:00

%IKE-6-50: RPT=2133: (user IP): Group [group name]

User [Username] Connection terminated for peer (username)

(IPSec SA Idle Timeout) Remote Proxy (inside IP), Local Proxy (outside IP)

Can someone help me figure this out? I want to think that it's caused by the local PC or some network device in between. Thanks in advance

Jim

2 Replies 2

owillins
Level 6
Level 6

Check if the "start before logon" feature is enabled on his client. Also it is very common for isps to reasign ip addresses on a regular basis. This could be a reason too. You could also try reducing the MTU size setting on your VPN client, this would eliminate the chances of packets being dropped in the tunnel.

o-kostine
Level 1
Level 1

You might want to check IKE keepalives option on your client (ForceKeepAlives=1 in your .pcf file)

If you're bihind a firewall - our client ESP connection will time out on that firewall and you lose your vpn connection.