So about every 8-10 hours, my site to site VPN drops and won't reconnect itself. I have to go log back into astaro, and click the green light to turn it to red then turn it back again to green to get it to come back up. The log entries I'm getting are these:
2011:01:28-13:32:25 asg-fw pluto[16323]: | find_connection: concluding with "S_GSW" [pri:12632072]{0x94660c8} kind=CK_PERMANENT
2011:01:28-13:32:25 asg-fw pluto[16323]: | delete narrow %hold eroute 10.1.11.104/32:2478 -> 10.1.10.2/32:8014 => %hold:6
2011:01:28-13:32:25 asg-fw pluto[16323]: | Queuing pending Quick Mode with 173.14.15.xx "S_GSW" already done
2011:01:28-13:32:25 asg-fw pluto[16323]: | next event EVENT_RETRANSMIT in 25 seconds for #21
2011:01:28-13:32:30 asg-fw pluto[16323]: |
2011:01:28-13:32:30 asg-fw pluto[16323]: | *received whack message
2011:01:28-13:32:30 asg-fw pluto[16323]: | next event EVENT_RETRANSMIT in 20 seconds for #21
2011:01:28-13:32:31 asg-fw pluto[16323]: |
2011:01:28-13:32:31 asg-fw pluto[16323]: | *received whack message
2011:01:28-13:32:31 asg-fw pluto[16323]: | next event EVENT_RETRANSMIT in 19 seconds for #21
2011:01:28-13:32:39 asg-fw pluto[16323]: |
2011:01:28-13:32:39 asg-fw pluto[16323]: | *received kernel message
2011:01:28-13:32:39 asg-fw pluto[16323]: | initiate on demand from 10.1.11.4:1197 to 10.1.10.245:161 proto=17 state: fos_start because: whack
2011:01:28-13:32:39 asg-fw pluto[16323]: | find_connection: looking for policy for connection: 10.1.11.4:17/1197 -> 10.1.10.245:17/161
2011:01:28-13:32:39 asg-fw pluto[16323]: | find_connection: conn "S_GSW" has compatible peers: 10.1.11.0/24->10.1.10.0/24 [pri: 12632072]
2011:01:28-13:32:39 asg-fw pluto[16323]: | find_connection: concluding with "S_GSW" [pri:12632072]{0x94660c8} kind=CK_PERMANENT
2011:01:28-13:32:39 asg-fw pluto[16323]: | delete narrow %hold eroute 10.1.11.4/32:1197 -> 10.1.10.245/32:161 => %hold:17
2011:01:28-13:32:39 asg-fw pluto[16323]: | Queuing pending Quick Mode with 173.14.15.xx "S_GSW" already done
2011:01:28-13:32:39 asg-fw pluto[16323]: | next event EVENT_RETRANSMIT in 11 seconds for #21
2011:01:28-13:32:49 asg-fw pluto[16323]: |
And does that constantly.. until I click the green/red turn off/turn on icon. Then it comes right back up. Here's the info on the tunnel:
IKE: Auth PSK / Enc 3DES_CBC / Hash HMAC_MD5 / Lifetime 3600s / PFS MODP_1024 / NAT-T / DPD
IPSec: Enc 3DES_CBC / Hash HMAC_MD5 / Lifetime 3600s / COMPRESSED
This is matched on the other side (had to match or I couldn't get the tunnel to work at all).
This is on Astaro 8.101
Can anyone provide assistance? this is frustrating me mad having to log back in just to turn off and turn on the tunnel again...
This thread was automatically locked due to age.
