Mobile VPN (client-to-site) disconnect after 8 hr of operativitiy
Users are reporting me that the mobile VPN disconnect after 8 hours of activity.
It's an IPSEC VPN, I've searched for a timeout parameter that could cause this disconnection in the following areas:
- into the gateway settings (phase1)
- into VPN Connection settings (phase2)
- into object > users
Into object > users i've found the Lease Time and the Authentication time parameters which seems interesting, but the default value is 1440 minutes corresponding to 24h so does not match the 8 hr connection timeout people are reporting me.
The clients use the native VPN Client of windows10 accessible from "Start > VPN Settings" or in the taskbar. It could be also the client to close connection but i've found no usefull information online.
Any Idea about this?
Thank you
It's an IPSEC VPN, I've searched for a timeout parameter that could cause this disconnection in the following areas:
- into the gateway settings (phase1)
- into VPN Connection settings (phase2)
- into object > users
Into object > users i've found the Lease Time and the Authentication time parameters which seems interesting, but the default value is 1440 minutes corresponding to 24h so does not match the 8 hr connection timeout people are reporting me.
The clients use the native VPN Client of windows10 accessible from "Start > VPN Settings" or in the taskbar. It could be also the client to close connection but i've found no usefull information online.
Any Idea about this?
Thank you
0
All Replies
-
In my case it is set to 24h (86400) on both phase 1 and 2
Must be something else, thank you anyway : )0 -
Solved:
according to this [SOLVED] Watchguard SSL and L2TP/IPSEC VPN always drop at set time - Spiceworks
Windows native VPN client has a timeout every 7.6hr which trigger a rekey, this rekey fails.
On the firewall, decreasing the SA Life of Phase 1 (Gateway settings) to a value < than 7.6hr will solve the issue since the rekey will be triggered before that the one triggered by Windows.
0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 65 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 831 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight