<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#ffffff">
<div class="moz-text-flowed" style="font-family: -moz-fixed;
font-size: 13px;" lang="x-western">
<br>
I'm not 100% sure what kind of Cisco is on the other side; I
configured shrew
<br>
by importing the .pfc file. Here's a summary of the config
options:
<br>
<br>
- general: hostname and port set, auto config set to "ike config
pull"
<br>
- client: NAT traversal enabled, keep-alive packet rate 15 secs,
ike fragmentation disabled, all "other options" checked
<br>
- phase1: aggressive, group2, auto, key life time limit 86400
secs, 0 data lmit
<br>
- phase2: auto, auto, auto, compress disabled, key life time limit
3600 secs, 0 data limit
<br>
<br>
Symptom:
<br>
Sometimes all VPN traffic stops for a minute or so, then after
that things usually work again.
<br>
When looking at the "Network" tab of the established connection,
it seem to always show
<br>
the number of establish associations as (expired + 2). Then after
a while expired increases
<br>
by 1 and that's when things work again.
<br>
<br>
I'm not sure if it's related, but the shrew client also appears to
take a lot longer to enable the
<br>
initial tunnel than the cisco client ( +-30 seconds vs +-3
seconds)
<br>
<br>
Any idea what the problem is or what to do about it? It's a bit
annoying since the pause is usually long
<br>
enough to make my ssh sessions disconnect.
<br>
<br>
J.
<br>
<br>
</div>
</body>
</html>