[Vpn-help] trying to connect VPN to Zyxel 2602hwl adsl router

[Paul Webster]

Here's some more information on the connection dropouts. Below is the 
log file off the Zyxel. The log shows:

1) The initial connection is established at 15:21:25
2) Looks like some sort of renegotiation 48 mins later at 16:09:53
3) Two minutes later there is a time out disconnect.
4) "No corresponding tunnel" message at 16:12:40 appears at the same 
time my VNC client told me the connection was down..

But no new messages appear in the Shrew VPN client  connect window. Why 
does the Zyxel say it's built a new tunnel but the VPN client tells me 
nothing?

============== VPN client connect windows ======
configuring client settings ...
attached to key daemon ...
peer configured
iskamp proposal configured
esp proposal configured
client configured
local id configured
remote id configured
pre-shared key configured
bringing up tunnel ...
network device configured
tunnel enabled

============= Router log ==================
01/21/2009 16:12:40 	!! Receive IPSec packet, but no corresponding 
tunnel exists
01/21/2009 16:11:59 	Send:[HASH][DEL]
01/21/2009 16:11:59 	Adjust TCP MSS to 1452
01/21/2009 16:11:59 	Send:[HASH][DEL]
01/21/2009 16:11:59 	Send:[HASH][DEL]
01/21/2009 16:11:59 	Rule [1] idle time out, disconnect
01/21/2009 16:09:53 	Rule [1] Tunnel built successfully
01/21/2009 16:09:53 	Recv:[HASH]
01/21/2009 16:09:53 	Send:[HASH][SA][NONCE]
01/21/2009 16:09:53 	Start Phase 2: Quick Mode
01/21/2009 16:09:53 	Recv:[HASH][SA][NONCE][ID][ID]
01/21/2009 15:21:25 	Rule [1] Tunnel built successfully



Paul Webster wrote:
> Well this is working now after getting the parameters right - well, 
> almost working. The link comes up and I can use it OK but after a time 
> it fails. For example I was halfway though a 10 minute database update 
> when it crashed. The Shrew client appears to think it is still connected 
> i.e. the last line in the connect window is "tunnel enabled".
>
> Are there any tricks to making sure the link stays up?
>
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help
>
>