Solved

Netgear FVS 318 Dropping VPN Connection

Posted on 2006-11-08
5
1,888 Views
Last Modified: 2012-06-27
Hello Experts,

We have several VPN tunnels that connect Windows 2003 Servers to an AIX box. At the Windows servers we are using the Netgear FVS 318 (version 2.4 - 3.1) and on the AIX side we connect to a BSD box that functions as a VPN router. These tunnels are IPSec based with AES 256 encryption (Healthcare Information) and transfer data back and forth through FTP services. Some of the connections are getting Dropped at night when the system is Idle. The Netgears show the connection as Established but the AIX is unable to FTP into it, we have to go in and DROP then re-establish the connection on the Netgears, then all is good again.

We have 12 of these running and its getting tiresome to have to do this every morning. Before we throw the Netgears out and drop the big bucks on Cisco does anyone have any suggestions? I have of course set the IKE Keep Alive and the Ping IP address to the AIX Server.

Any help will be greatly appreciated,

Jack W
0
Comment
Question by:JackW9653
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 500 total points
ID: 17901130
A few things you might want to check:
-Are these PPPoE connections by any chance?  If so, in the router wan configuration, make sure The "idle Time out" is set to 0  this will disable time outs.
-Also on the Net gears, under the VPN policy, there is a keep alive option where you can provide an IP, preferably at the remote VPN site, to ping on a regular basis to maintain the connection.
-On any servers or PC's check the Power Management section of the network adapter. Most newer cards have this option and Windows seems to enable "allow this computer to turn off this device to save power" by default.
0
 

Author Comment

by:JackW9653
ID: 17901365
Hello Rob,

Thanks for the reply. I will answer your questions in order:
- I don't think that any of the connections are over DSL which is where I have seen the PPPoE issue, but I will verify that. Also I could not find a WAN Configuration area of the router setup.
- As I mentioned in my original question I have checked the IKE Keep Alive and used the address of the remote AIX box
- I hadn't thought of the NIC going to sleep on me - I will check that out.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 17902565
-quite right if not a DSL connection it will not be PPPoE.
The WAN section on an FVS318 is actually called "Basic Settings". If you have PPPoE connection the First item "Does your Internet Connection require a logon" will be marked Yes.
-sorry I somehow missed your comment about having enabled the keep alive. Having that enabled should make the PPPoE  alive feature, if you had PPPoE, and power management, not an issue anyway, as it would maintain an active connection. Sorry no other ideas.

I often set up a small utility called IPMonitor when having connection issues. It is basically a ping tool that can be set to monitor multiple IP's by pinging them every minute and then create an error log when the connection is dropped. I set it up to monitor a local machine, the router's LAN IP, the ISP's modem (your ISP's gateway address), and Internet IP such as a DNS server, and a device at the other end of the VPN tunnel. Though this won't solve anything, it does help to show where the connection is dropped, how often and for how long.
http://ipmonitor.tsarfin.com/
0
 

Author Comment

by:JackW9653
ID: 17909295
The NIC card was the key! Thanks Rob - I wonder who at Dell decided that they needed to PowerSave on a Server? The total resolution was to increase the SA Life time to 16 hours and turn off the powersave on the NIC.

Thanks Again,

Jack
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 17909399
>>"wonder who at Dell decided that they needed to PowerSave on a Server"
I think that is actually Microsoft. Can't be live it is even an option, but it has been common lately.

Thanks Jack
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Overview Often, we set up VPN appliances where the connected clients are on a separate subnet and the company will have alternate internet connections and do not use this particular device as the gateway for certain servers or clients. In this case…
Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question