[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Site - to - Site VPN on ADSL connection

Posted on 2008-06-11
9
Medium Priority
?
294 Views
Last Modified: 2011-10-19
Hi Expert,

First of all let me admit that i m novice to this technololgy of VPN's & FW's so you may expect all types of silly doubts and questions from my end.

This is in regards to SITE-to-SITE VPN between two offices both on ADSL connection. I was somehow able to fix the VPN between to offices.
It worked for couple of days but later the tunnel went down and it is still down I think when the public IP address changes it is not updated to the hostname registered with DDNS. I have mentioned the configuration in the attached file

Earlier Qlemo suggested me few things to do such as
Clear ike-coo all
enable VPN monitor etc.. It started all working fine but not for very long.

please suggest me if there is anything i am missing for the VPN's to stay stable.


Thanks in advace,
Satish

setup.bmp
0
Comment
Question by:ssatishh08
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
9 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 2000 total points
ID: 21764220
It looks like you are using a DDNS service at both ends. I have never been able to make this work consistently. DDNS at one end works fine but at both ends it seems if the connection is lost even for a second the VPN is not re-established. I have run into this using several different manufacturer's hardware. I think you will find you need a static address at one end for stability.
0
 

Author Comment

by:ssatishh08
ID: 21764337
thanks fpr replying Rob but as if now i dont have that option of static Ip address. i have to make it work, a lot depends upon this.... i have to fix it desperately
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 21764449
The point is I am doubtful there is anything you can do to fix it. Best practices for any VPN states that both ends be static. Cisco insists on this. I have about 20 tunnels running that are very stable using DDNS at one end, but have never successfully maintained a connection with 2 DDNS services for more than 2 days. One thing that helps is to ensure any "keep alive" options are enabled.

Perhaps others will have some suggestions though.
0
Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

 
LVL 77

Expert Comment

by:Rob Williams
ID: 21764819
Not to be difficult but as I understand it from the EE guidelines; "Please remember that if the answer to your question is You can't do that you still received an answer."  Step 4 of http://www.experts-exchange.com/help.jsp#hi36
My comments were not idle guesses but as my profile perhaps backs up, it is from a reasonable amount of experience.
Thanks,
--Rob
0
 

Author Comment

by:ssatishh08
ID: 21766280
I am not doubting ur capabilities rob its only my desperation and nothing else.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 21768252
I understand your desperation, but how does closing and refunding points help your problem?
0
 

Author Comment

by:ssatishh08
ID: 21772432
i dont waht to close or refund unless i get a solution i got a temp solution which i thougt was full proof so i closed the case earlier
0

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Using Windows 2008 RRAS, I was able to successfully VPN into the network, but I was having problems restricting my test user from accessing certain things on the network.  I used Google in order to try to find out how to stop people from accessing c…
If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question