[vpn-help] Timeouts?

kevin shrew-vpn klmlk at hotmail.com
Wed Jul 28 21:35:05 CDT 2010


On Wed, 28 Jul 2010 20:41:44 -0500
Matthew Grooms <mgrooms at shrew.net> wrote:

> >
> > Is assigning a new IP normal/permitted? Or is this a sign that I
> > haven't quite got the configs right between the client and gateway?
> >
> > For what it's worth, the client is only able to connect if it is
> > set to 'ike config pull'.
> 
> Hmmm. Odd that it would assign a different address after an ISAKMP SA 
> renegotiation. A replacement SA is required when the original
> expires. Depending on the gateway, this involves another Xauth and an
> additional modecfg negotiation as well. What kind of gateway do you
> use?
> 

Hi Matthew, the gateway in question is an Aruba wireless controller.
I'll send you some logs in a direct email.






More information about the vpn-help mailing list