[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Linksys RV082 VPN tunnels won't stay up

Posted on 2004-10-27
11
Medium Priority
?
1,632 Views
Last Modified: 2010-05-18
Linksys RV082 VPN tunnels won't stay up

I have 4 sites all have RV082s running the latest firmware 1.1.5.  I have gateway to gateway vpn tunnels from every site to every other site so each router has 3 tunnels defined on it.  I have keepalive, aggresive mode, dead peer detection and NetBIOS broacdastin checked in the advanced properties the Phase I and Phase II settings are default and the settings are the same for every tunnel at every site.  We determined the optimum MTU for each site by doing ping -f -l until we got unfragmented replies.  Still our tunnels don't stay up.  Over the last 2 days the most problematic has been site 1 (this site is a Savvis POP so it has the cleanest internet connection and the closest to the internet backbone) and site 2 (TimeWarner Roadrunner cablemodem).  Site 3 (Adlelpia cable modem) and Site 4 (Optimum Online cablemodem) seem to stay up and connected to themselves as well as Site 1.  Site 2 seems to stay connected to Site 3 but site 2 loses connection to Site 4 a good bit (not as bad as Site 1 to Site 2 though).  When the tunnels are disconnected I can still ping the WAN interface of the routers where the tunnel is terminated.  Additionally I have  Anyway I've used the RV082s in the past establishing Site-to-Site VPNs with a Cisco VPN3015 and that worked quite nicely.  Now I don't have the luxury of the 3015 and I've read posts from alot of people who are doing exactly what I'm doing and don't seem to have the problems I'm having.  Any thoughts, suggestions or comments (other than Linksys sux) would be greatly appreciated!

Thanks,
TD
0
Comment
Question by:tdalton69
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
11 Comments
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12452003
DSL / Cable modem lines usually only ever guarantee outgoing traffic, so it could be that contention rates are too high and incoming traffic (eg when one end is acting as a VPN peer) is dropped ?
Do you have any way to benchmark your ADSL performance ?

0
 
LVL 7

Expert Comment

by:HoweverComma
ID: 12458943
I have a few clients with problematic VPN's.
Use Task Scheduler and schedule a .BAT file to execute every couple of minutes to ping a PRIVATE address on the inside of the remote end.
This keeps the tunnel established more reliably.
0
 

Author Comment

by:tdalton69
ID: 12546110
I have been persistant pings running but still not seeing the stability that I was seeing when I had a site-to-site from the Rv082 to a Cisco 3015.  Now I know the 3015 should be more stable but an RV082 to RV082 should be pretty stable as well, this isn't rocket science but if the code is flakey then there is no work around except a firmware upgrade.  
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 23

Expert Comment

by:Tim Holman
ID: 12583822
>I have keepalive, aggresive mode, dead peer detection and NetBIOS broacdastin.......

Maybe disable these features ?

Also, what error messages are you getting here ?
0
 

Author Comment

by:tdalton69
ID: 12586874
I have tried w/out keepalive, aggressive mode, dead peer detection and Netbios (unchecked one at a time and tested for a couple of hours) with no improvement.  The error logs don't give any clue it just looks like the tunnel is dropping and Dead Peer Detection notices and tries to reinitiate the tunnel.  Some of it may very well be my Road Runner connection for my particular site problems but again it's not as stable as it was to the 3015.  
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12618982
I'm not too sure then.  I'm leaning toward an ISP problem - they could well be responsible for dropping packets and causing the VPN to fail.  Linksys devices need a pretty stable connection to work, but the Cisco stuff seems more resilient to drop outs.
0
 

Expert Comment

by:mac_3ce
ID: 12980192
Haveyou tried changing your MTU setting to a lower #. i have several RV042 and it helped me.
0
 
LVL 23

Expert Comment

by:Tim Holman
ID: 12998393
Good resource for MTU sizes etc - http://www.dslreports.com/faq/695
0
 

Author Comment

by:tdalton69
ID: 15560198
We adjusted the MTU per site and it made no difference.  The tunnels seemed to mysteriously stabilize somewhat over time but every now and then they'd flake on us and it always seemed to be at the worse possible moment (Murhpy's Law of course)  ended up going with OpenWRTs running OpenVPN and haven't had a problem since and it is much more feature packed w/ full QoS, etc.  
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 15584330
PAQed with points refunded (500)

Computer101
EE Admin
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Juniper VPN devices are a popular alternative to using Cisco products. Last year I needed to set up an international site-to-site VPN over the Internet, but the client had high security requirements -- FIPS 140. What and Why of FIPS 140 Federa…
Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question