L2TP VPN disconnects on Android Phone in 2mins

Options
2

Comments

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,450  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Hi @PeterUK,
    Nope, The V4.33 is correct behavior. the V4.25 is incorrect since it renew every 30 seconds no matter what value you set.
  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    But thats the idea? when the client is connected it renews the lease just like the SSL VPN when lease is set for 2mins but with L2TP VPN and lease set for 2mins it disconnects in 2min even if the client needs to stay connected for longer.



  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,450  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @PeterUK,

    Thanks for the issue report. We have identified it is an issue.

    We will add this bug fixed in coming firmware release.


  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    This is still a bug and with V4.35(AAAA.0) I now set user with lease time to 1440 it now randomly disconnects within around 10mins

  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited December 2019
    Options

    Just when you think it all works a fix that breaks things.

    So the fix that was done here

    https://businessforum.zyxel.com/discussion/comment/9996/#Comment_9996

    breaks the VPN from staying up and disconnects the client randomly with in 10mins if I remove them three rules the VPN stays up but that if the lease time is set to 1440.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,296  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @PeterUK,

    The fix is not merged to 4.35(AAAA.0). It will be merged to the next official firmware release.

    The quick patch firmware will be sent to you in private message for verification.

  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited December 2019
    Options

    Thanks but I think I found another problem which I post after this fix.

    It seems the other problem i was having is also fixed will do more testing later.

  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited December 2019
    Options

    So this quick patch firmware you sent me is newer then 4.35(AAAA.2) ?

    So far the firmware you sent me fixed two of my problems.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,296  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @PeterUK,

    The firmware I sent you is released as a hot fix. We merge most fixes to that firmware for users to verify issues. The firmware is not officially verified by Zyxel verification team.

    The official firmware 4.35(AAAA.2) includes fixes of some major issues only. You can find the modification of 4.35(AAAA.2) in the release note.

  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Ok after more testing its not fixed its sable at a random amount of time and some times the VPN disconnects and other times the VPN connection looks connected and doing a packet capture on OPT when doing a ping to 8.8.4.4 from the client I see the incoming ESP packet then ping request and reply but no ESP packet back to the client.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）