[vpn-help] 2.1.5 -> 2.1.6b10 -- Connection silently dies after 5minutes

[Aaron Sarazan]

I'm actually on ethernet when this happens. As far as I can tell there 
are no network-related events correlated to the drop. There also isn't 
any DHCP going on via the gateway router. It keeps its same IP from home 
network.

Forgot to post the specs in the first post, for what it's worth.

Win7-x64
Shrew 2.1.*
Netgear FVS338
PSK+Xauth
Mode Config OFF
Use Existing Adapter settings
DPD+IKE Fragmentation ON (allegedly)
NAT-T ON

On 7/7/2010 9:11 AM, kevin shrew-vpn wrote:
> Are you on wireless?  I get "silent death" problems on Windows XP all the time when the wireless network connection re-associates.  Our wireless is both a and g and Windows seems to like flipping back and forth between them.  It also seems to have a very short dhcp lease time which may contribute.
>
> -----Original Message-----
> From: Aaron Sarazan<aaron.sarazan at gmail.com>
> Date: Wed, 7 Jul 2010 13:01:26
> To:<vpn-help at lists.shrew.net>
> Subject: [vpn-help] 2.1.5 ->  2.1.6b10 -- Connection silently dies after 5
> 	minutes
>
> This is an old problem that plagues my Win7-64 machine with all client versions, but doesn't seem to even affect my Ubuntu machine (or any coworkers' machines for that matter).
>
>
> I'll successfully connect to the gateway, ping inside the network, and all is happy. After about five minutes, the connection will silently fail and pings will time out. According to the "Network" tab, it is still established, and the trace utility doesn't show anything but a bunch of keep-alives for phase 1:
>
>
> 10/07/07 08:53:59 DB : phase1 found
> 10/07/07 08:53:59 ->  : send NAT-T:KEEP-ALIVE packet 192.168.2.101:4500<http://192.168.2.101:4500>    ->  98.101.134.218:4500<http://98.101.134.218:4500>
>
>
> Also the "VPN Connection Status" on the Netgear admin page lists it as "IPsec SA Established". The connection won't return until I do a manual disconnect/reconnect.
>
>
> On a possibly related note, it's listing Dead Peer Detection as disabled, even though I've enabled it on both the client and server side. Any thoughts on that?
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help
>