Solved

Router VPN Log shows "Sending phase-I notify of type R_U_THERE_ACK" repeatedly

Posted on 2008-06-17
2
2,260 Views
Last Modified: 2008-06-18
I have Netgear VPN Firewall Router FVS124G.
It has a VPN link to 2 other routers.
For about a week ago now the vpn log shows:

TUE JUN 17 15:25:50 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK
TUE JUN 17 15:25:51 2008  INFO :: received NOTIFY PAYLOAD of notify type R_U_THERE
TUE JUN 17 15:25:51 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK
TUE JUN 17 15:25:54 2008  INFO :: received NOTIFY PAYLOAD of notify type R_U_THERE
TUE JUN 17 15:25:54 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK
TUE JUN 17 15:26:01 2008  INFO :: received NOTIFY PAYLOAD of notify type R_U_THERE
TUE JUN 17 15:26:01 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK
TUE JUN 17 15:26:02 2008  INFO :: received NOTIFY PAYLOAD of notify type R_U_THERE
TUE JUN 17 15:26:02 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK
TUE JUN 17 15:26:03 2008  INFO :: received NOTIFY PAYLOAD of notify type R_U_THERE
TUE JUN 17 15:26:03 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK
TUE JUN 17 15:26:11 2008  INFO :: received NOTIFY PAYLOAD of notify type R_U_THERE
TUE JUN 17 15:26:11 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK
TUE JUN 17 15:26:12 2008  INFO :: received NOTIFY PAYLOAD of notify type R_U_THERE
TUE JUN 17 15:26:12 2008  INFO :: Sending phase-I notify of type R_U_THERE_ACK

It won't stop and users have been reporting slower connection speeds.

How can I tell what is causing this?

Any help would be appreciated.



0
Comment
Question by:cah00ts
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 21804354
Those are DPD (Dead Peer Detection) messages from the remote end (a keepalive if you will).  This is a normal and good thing for IPSEC tunnels as it allows the tunnel to be torn down if communication is lost between the client and server.  I doubt this is the cause of your slow performance issues.  You may be able to disable the DPD functionality if you want to rule it out (maybe not on the Netgear though).
0
 

Author Comment

by:cah00ts
ID: 21810977
Thanks for the explanation JFrederick29
0

Featured Post

Webinar May 25: Cloud Security Strategies for SMBs

Small and mid-sized businesses are a driving force behind cloud adoption, and it’s no wonder: cloud benefits are BIG.  But for all the convenience that moving to the cloud provides, where does security come into play?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
What is the VPn crypto table on a Cisco ASA? 2 40
Cisco Anyconnect on MS Surface 12 51
Routing Issue 26 69
Remote ARP query 1 6
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question