[vpn-help] Connection dropping with Ubuntu 14.04

[Jason Lewis]

Corey,

Thanks for chiming in here; maybe we can find something in common that will help here.  Here's everything I can think of that could affect  this (some of it should have been in my first post...):


*         I'm connecting to a Palo Alto Networks (PAN) device.

*         The client is running on 64-bit Ubuntu 14.04.

*         The client is v2.2.1, compiled from source.

*         At work, I have no trouble with it.

*         At home is where it acts up, but only on Linux.  I have no such trouble at home with Windows or Mac.

*         I am connecting through an IPCop firewall at home, but again, the problem only occurs on my Ubuntu system.

*         Disabling rp_filter has no effect.

You mentioned that you stayed with the default settings.  My connection settings were imported from my old Windows system, so they stayed the same, but I did use the default (sample) iked.conf.  I'll have to start playing with that and see if anything changes.  Have you tinkered any with the settings?

Jason Lewis
Systems Administrator - 2Checkout<https://www.2checkout.com/>
---------------------------------------------------------------------
jlewis at 2co.com<mailto:jlewis at 2co.com>
1.614.921.2450 x127
1.614. 260.3967 (mobile)

From: vpn-help [mailto:vpn-help-bounces at lists.shrew.net] On Behalf Of coremd at thedoctor-is-in.com
Sent: Thursday, July 31, 2014 11:00 PM
To: vpn-help at lists.shrew.net
Subject: Re: [vpn-help] Connection dropping with Ubuntu 14.04

Jason

I have been having the exact same problem and no one has helped me yet!
I have also tried the following

*         I installed Shrewsoft on Windows XP, Vista and window 7 (both 32 and 64 bit editions).

*         I have re-installed Shrewsoft more time than I can count

*         I have stopped and restarted the Shrewsoft and ISPec services.

*         Tried it when no one else was on the remote or local networks (2:00 AM)

*         Connected the computer directly into the remote router (no switch or hub in between)
None of this helps

The only thing I have noticed is that the VPN router does not show the user logged in anymore which explains why all functionality disappears.

I am using a Cisco SA540 router. What are you using?

I assume the problem has something to do with Dead Peer detection or Keep Alive but I have no idea how to set this properly on either the router or in Shrewsoft. I have just kept the default settings.

I would love to keep Shrewsoft since it is much easier and faster to connect than what Cisco provides.
But my users (and me) are complaining bitterly and if I can't get this resolved soon I will have to give up on Shrewsoft.

Corey


From: vpn-help [mailto:vpn-help-bounces at lists.shrew.net] On Behalf Of Jason Lewis
Sent: Thursday, July 31, 2014 6:50 PM
To: vpn-help at lists.shrew.net<mailto:vpn-help at lists.shrew.net>
Subject: Re: [vpn-help] Connection dropping with Ubuntu 14.04




________________________________
From: Jason Lewis
Sent: Thursday, July 31, 2014 5:21 PM
To: vpn-help at lists.shrew.net<mailto:vpn-help at lists.shrew.net>
Subject: Connection dropping with Ubuntu 14.04


All,



I recently compiled and installed Shrewsoft 2.2.1 on Ubuntu 14.04. It worked great at first, but recently I've had a problem where the connection will be made, then drop about 30 or so seconds later. I see these messages in iked.log after the drop:



14/07/31 17:10:33 K! : unhandled pfkey message type EXPIRE ( 8 )
14/07/31 17:10:33 K! : recv UPDATE message failure ( errno = 3 )
14/07/31 17:11:01 K! : recv DELETE message failure ( errno = 3 )



The VPN software stays connected, but the connection no longer works. Also, the first line is the error message I get when the connection quits working. The other two show up after I drop the connection



Does anyone know what causes thankis and what can be done about it?



Thank you.
All information in this email is subject to the 2Checkout confidentiality statement. <https://www.2checkout.com/policies/confidentiality-statement>
All information in this email is subject to the 2Checkout confidentiality statement. <https://www.2checkout.com/policies/confidentiality-statement>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20140801/86a790bd/attachment-0001.html>