[vpn-help] VPN client times out on Windows 7 with Killer e2200

[Alexis La Goutte]

Bonjour Claude,

What say VPN Pfsense gateway logs ? received the packet ?

There is sometimes some issue with NIC (in this case, the nic have TCP/IP
hardware stack... may be why there is this problem !)
Do you have try a another vpn client ? (like SoftEther VPN ?)

Cheers

On Sat, Nov 28, 2015 at 5:21 PM, DUVERGIER Claude <
vpn-help.shrew.ml at claude.duvergier.fr> wrote:

> Hello,
>
> I'm having troubles connecting to VPN using v2.2.2 client on a Windows 7
> 64-bits machine that has "Killer e2200 Gigabit Ethernet Controller" NIC:
> it times out ("negotiation timout occurred").
>
> The same "VPN configuration" works just fine on other Windows 7
> computers and even on a VMware virtual machine hosted on my "Killer
> e2200" machine (where it does not work natively).
>
> I have found multiple occurrences of such incompatibilities between
> Shrew Soft and Killer e2200:
> * http://www.tomshardware.co.uk/forum/36203-43-shrew-soft-wireless-windows
> *
>
> http://www.techpowerup.com/forums/threads/intel-nic-network-interface-controller-vs-killer-e2200.200606/page-2#post-3163550
>
> Some suggests to disable the "Microsoft Virtual Wifi Adapter" (so as
> your FAQ) but I don't have any.
>
> I tried updating the Killer e2200 drivers to their last version, all the
> "NAT Traversal" possible values: no luck.
>
> Is it a known issue? Is there a workaround?
>
>
> Client and Gateway Information:
> * VPN Client Version =  2.2.2
> * Windows OS Version = Windows 7 Pro SP1 64 bits
> * Gateway Make/Model = pfSense (strongSwan)
> * Gateway OS Version = 2.2.5
>
>
> Here are the connection window logs:
> -----
> config loaded for site 'Foobar'
> attached to key daemon ...
> peer configured
> iskamp proposal configured
> esp proposal configured
> client configured
> local id configured
> remote id configured
> pre-shared key configured
> bringing up tunnel ...
> negotiation timout occurred
> tunnel disabled
> detached from key daemon
> -----
>
> Also see attached iked.log, here is an excerpt:
> -----
> [...]
> 15/11/28 17:11:35 >= : cookies dff03a917b3e80f1:0000000000000000
> 15/11/28 17:11:35 >= : message 00000000
> 15/11/28 17:11:35 -> : send IKE packet 192.168.0.10:500 ->
> 12.34.56.78:500 ( 1209 bytes )
> 15/11/28 17:11:35 DB : phase1 resend event scheduled ( ref count = 2 )
> 15/11/28 17:11:40 -> : resend 1 phase1 packet(s) [0/2] 192.168.0.10:500
> -> 12.34.56.78:500
> 15/11/28 17:11:45 -> : resend 1 phase1 packet(s) [1/2] 192.168.0.10:500
> -> 12.34.56.78:500
> 15/11/28 17:11:50 -> : resend 1 phase1 packet(s) [2/2] 192.168.0.10:500
> -> 12.34.56.78:500
> 15/11/28 17:11:55 ii : resend limit exceeded for phase1 exchange
> 15/11/28 17:11:55 ii : phase1 removal before expire time
> 15/11/28 17:11:55 DB : phase1 deleted ( obj count = 0 )
> 15/11/28 17:11:55 DB : policy not found
> 15/11/28 17:11:55 DB : policy not found
> 15/11/28 17:11:55 DB : policy not found
> 15/11/28 17:11:55 DB : policy not found
> 15/11/28 17:11:55 DB : removing tunnel config references
> 15/11/28 17:11:55 DB : removing tunnel phase2 references
> 15/11/28 17:11:55 DB : removing tunnel phase1 references
> 15/11/28 17:11:55 DB : tunnel deleted ( obj count = 0 )
> 15/11/28 17:11:55 DB : removing all peer tunnel references
> 15/11/28 17:11:55 DB : peer deleted ( obj count = 0 )
> 15/11/28 17:11:55 ii : ipc client process thread exit ...
> -----
>
> Regards
>
>
> --
> DUVERGIER Claude
>
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> https://lists.shrew.net/mailman/listinfo/vpn-help
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20151211/05d776a2/attachment.html>