Solved

WatchGuard Firebox IPSec VPN Timeout Issue

Posted on 2008-10-09
8
2,345 Views
Last Modified: 2013-11-16
I think my VPN might be timing out in a strange manner.  The MUVPN remains connected but after some time, I am unable to access anything on the network unless I reconnect the VPN.  Once I reconnect, everything is fine again.  My developers who are constantly sending data through the VPN have not mentioned anything about it.  My supervisor and I use the VPN but the connection is often left idle.  We are the ones who lose the ability to communicate to the network unless we reconnect the VPN.
0
Comment
Question by:mansurw02
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 1

Assisted Solution

by:crumber
crumber earned 250 total points
ID: 22682886
We had a similar problem and had the VPN keep alive set with the other IP address.  This eliminated the VPN from going down when left idle for too long.

Hope that helps.
0
 

Author Comment

by:mansurw02
ID: 22683048
I am not sure I understand what you mean.  How would I configure a keep alive with an IP address?  I am using WSM 10.2 and MUVPN with IPSec V. 10.  Thanks!
0
 
LVL 1

Expert Comment

by:crumber
ID: 22683614
We are using the X10e-W (Firebox X).
I am not sure how that differs from your version; however if you go to the VPN configuration, select the VPN Keep Alive section and add the local Host IP address of the other point to the Echo Host list.
Hope that helps.
0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 

Author Comment

by:mansurw02
ID: 22683708
I've got the Firebox X5500e.  I don't see an option like that.  Thanks for helping.
0
 
LVL 32

Accepted Solution

by:
dpk_wal earned 250 total points
ID: 22684701
As crumber said; you are reaching the timeout value and as a result the VPN gets terminated and you need to reconnect; to overcome this you can create a batch file which would send ICMP packets to the remote network every x seconds; this way the connection would not time out.

You can create a batch file as below [remember to execute it once you get connected to VPN]:
ping <remote-machine-ip-adress> -n 1
sleep 60

Here, sleep is an external utility which you can download from the internet [please evaluate it for security based on your company's policy].

Otherwise you can simply configure a ping with -t option as below:
ping <remote-machine-ip> -t

Thank you.
0
 

Author Closing Comment

by:mansurw02
ID: 31504847
It's working fine now.  Thanks for the help!
0
 

Expert Comment

by:BERTLEEMAN
ID: 23393496
The problem is that the firewall is sending a keep alive packet to the muvpn client on udp port 4500. When there's no exception in your windows firewall (udp 4500) then you are disconnected after 3 minutes. this is only applicable with the muvpn software ver 10.00.... and newer
0
 

Expert Comment

by:visionmn2
ID: 38203748
First create a folder in root of C: named Ping (or wherever, whatever)

Then created a batch file png.bat in Notepad or your favorite text editor

Place the following line in the batch file and save where 10.0.0.10 is the IP of a remote resource such as a server:

ping 10.0.0.10 –n 1

Save the batch file

Then create a 2nd file in that same folder called png.vbs (from notepad or text editor). Just copy and pasted the following and change the file path if you are not following this example.

Set WshShell = CreateObject("WScript.Shell")
WshShell.Run chr(34) & "C:\Ping\png.bat" & Chr(34), 0
Set WshShell = Nothing

Save the png file

Set-up a scheduled task in Windows Task Scheduler to run every day starting at 12:01am – and will repeat every 3 minutes or whatever time before it times out until 11:59pm.
0

Featured Post

[Live Webinar] The Cloud Skills Gap

As Cloud technologies come of age, business leaders grapple with the impact it has on their team's skills and the gap associated with the use of a cloud platform.

Join experts from 451 Research and Concerto Cloud Services on July 27th where we will examine fact and fiction.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Like many others, when I created a Windows 2008 RRAS VPN server, I connected via PPTP, and still do, but there are problems that can arise from solely using PPTP.  One particular problem was that the CFO of the company used a Virgin Broadband Wirele…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question