L2TP VPN disconnects on Android Phone in 2mins

2

Comments

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,518  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Hi @PeterUK,
    Nope, The V4.33 is correct behavior. the V4.25 is incorrect since it renew every 30 seconds no matter what value you set.
  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    But thats the idea? when the client is connected it renews the lease just like the SSL VPN when lease is set for 2mins but with L2TP VPN and lease set for 2mins it disconnects in 2min even if the client needs to stay connected for longer.



  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,518  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @PeterUK,

    Thanks for the issue report. We have identified it is an issue.

    We will add this bug fixed in coming firmware release.


  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    This is still a bug and with V4.35(AAAA.0) I now set user with lease time to 1440 it now randomly disconnects within around 10mins

  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited December 2019

    Just when you think it all works a fix that breaks things.

    So the fix that was done here

    https://businessforum.zyxel.com/discussion/comment/9996/#Comment_9996

    breaks the VPN from staying up and disconnects the client randomly with in 10mins if I remove them three rules the VPN stays up but that if the lease time is set to 1440.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,405  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @PeterUK,

    The fix is not merged to 4.35(AAAA.0). It will be merged to the next official firmware release.

    The quick patch firmware will be sent to you in private message for verification.

    Untitled Image

    See how you've made an impact in Zyxel Community this year!
    https://bit.ly/Your2024Moments_Community

  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited December 2019

    Thanks but I think I found another problem which I post after this fix.

    It seems the other problem i was having is also fixed will do more testing later.

  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited December 2019

    So this quick patch firmware you sent me is newer then 4.35(AAAA.2) ?

    So far the firmware you sent me fixed two of my problems.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,405  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @PeterUK,

    The firmware I sent you is released as a hot fix. We merge most fixes to that firmware for users to verify issues. The firmware is not officially verified by Zyxel verification team.

    The official firmware 4.35(AAAA.2) includes fixes of some major issues only. You can find the modification of 4.35(AAAA.2) in the release note.

    Untitled Image

    See how you've made an impact in Zyxel Community this year!
    https://bit.ly/Your2024Moments_Community

  • PeterUK
    PeterUK Posts: 3,577  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Ok after more testing its not fixed its sable at a random amount of time and some times the VPN disconnects and other times the VPN connection looks connected and doing a packet capture on OPT when doing a ping to 8.8.4.4 from the client I see the incoming ESP packet then ping request and reply but no ESP packet back to the client.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）