Hi,
Experiencing odd behaviors over new IPSEC VPN tunnel. Astaro Support forwarded to Astaro developers already, but wanted to post for ideas/help.
Running IPSEC VPN's from one central ASG220 to five separate remote ASG units. All WebAdmin access, pinging, remote access is fine/normal.
Added a sixth ASG 120 (v7.502) to a new location, repeating same IPSEC VPN setup to the central ASG220 (v7.500).
Communication was normal over new IPSEC tunnel, initially. Used the default auto-packet filters for allowed networks in our setup.
Internal traffic issue(s):
1. A short time later (12-48 hrs possibly), the new remote LAN subnet is not accessible via ping, RDP, http/s (including WebAdmin), although the VPN tunnel is alive.
2. Upon reboot of the remote ASG120, access and pings will be normal for a short time, then fail (duration unknown...attempting to track in the logs).
* Using an SSL VPN tunnel between Central office ASG 220 and remote ASG 120, internal LAN WebAdmin access and internal lan pings respond as desired.
* Alternatively, using a PPTP connection from a desktop at central office to remote MS server allowed by a packet filter on the remote ASG sees WebAdmin & pings perform as desired (I've heard of PPTP/L2TP issues with 7.502, but this instance is passing traffic, not performing the PPTP directly on the ASG).
External traffic issue:
The External WebAdmin(4444) is not accessible by external IP for users on the central office LAN(ASG220 side), although the User Portal(443) loads ok (via ext. ip).
External WebAdmin loads fine out-of-network/from home/air card/etc.
Since SSL, PPTP and out-of-network connections all work properly with pings and WebAdmin, we started to look at IPSEC as the issue.
We then established an IPSEC connection from one of the other remote ASGs(on v7.4xx) to the new ASG. Results were same as the central ASG220 (no ping/WebAdmin/etc.).
7.502 possibly a factor, or a mismatch with 7.500 and earlier. We have looked at the logs, packet filters, ICMP, all Network IP's for correct settings, also verifying against other setups.
We are up & running on SSL for the time being. Any additional opinions as to which is better (SSL vs. IPSEC) are also appreciated.
Thanks for any/all input on this puzzle.
This thread was automatically locked due to age.
