This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM/LANCOM: Tunnel active, but no Traffic after a while

Hello, i need your help.

Some days ago i create a Site2Site VPN between a LANCOM and a Sophos UTM Firewall (booth fixed IPs, used the IP addresses - not the FQDN).

I create it at first on the LANCOM with the Site2Site VPN and on the Sophos site manually - the Tunnel goes directly active and works (muchTraffic for Remotebackup).

But at the next days, the Tunnel is active, but there goes no traffic between the Sites. I create for testing an permanently Ping, they work at the first time, but next morning the Ping doesn't work.

What can i do? Is there any error in my configuration?

The Lancom is not managed from an other admin and in Webgui in german - sorry for that.

For your information - it looks like the connection is lost after round 8 hours (28800 seconds).

Thanks a lot for your help.

Here are the Connection Details:

This thread was automatically locked due to age.

0 Jaydeep over 5 years ago

Hi Peter Leibling

Why do I see a mismatch in IKE SA lifetime? Also, please keep a different lifetime for IKE and IPSec SA if possible.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Peter Leibling over 5 years ago in reply to Jaydeep

Thanks a lot for your fast reply.

Is this better:
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 5 years ago in reply to Peter Leibling

I don't know about the other device you're using and I'm not able to translate the language but the second screenshot of the IKE settings does show different settings than the one configured in Sophos UTM. I might be reading it wrong though. What is the status of the IPSec tunnel? Is it stable now and flows the traffic properly?

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Peter Leibling over 5 years ago in reply to Jaydeep

Thanks a lot, same problems - first time it works, then the Tunnel are "green", but no Traffic.

Did you mean the second Image for IKE-Proposals (Name/Bezeichnung WIZ-PSK-AES256SHA)?

Which setting do you mean in detail? Lifetime (called Gültigkeitsdauer)? Has it to be 86400?

Thanks a lot for your help.
Cancel
Vote Up 0 Vote Down

Cancel