Link to home
Start Free TrialLog in
Avatar of dlg654
dlg654

asked on

Cisco VPN client to Fortigate 110c

Hi,

We have a Cisco Client etsablishing an IPSEC vpn to a Fortigate 110C. Works like a charm for all users except one, this user is using 3 G mobile broadband as is getting disconnected every five minutes. All othe users a up most of the working day.

David
Avatar of sstone55423
sstone55423
Flag of United States of America image

"Works like a charm for all users except one, this user is using 3 G mobile broadband as is getting disconnected every five minutes"
So, you think that this one user is getting connected to the VPN successfully, at least occasionally?
If so, then the issue is not a VPN encryption issue, but an Internet provider reliability issue, I think.
Here is a link regarding iPhone on AT&T o er 3G, and VPN issues due to network congestion.
http://discussions.info.apple.com/thread.jspa;jsessionid=4F5F15EBFAC570A34228E326273BBBCF.node0?messageID=11289312�
 
Avatar of dlg654
dlg654

ASKER

User is getting connected and then every five to 10 minutes gets disconnected. Dont think the problem is congestion as a few weeks ago when they were connecting to a Cisco box they did not get dropout. Don't think it is the Fortigate as the non wireless connected users are getting less dropouts then when they were connecting to the Cisco.

David
Hi dlg654,

We had a similar issue with a mobile network provider in the UK, it turned out to be a limitation of the particular APN they provided.

They provided an alternative one that was only for VPN users which gave users a public IP and did not go through their DPI process.

Does your 3G operator provide a similar setup?

The only other thing I can think is to enable autokey keep alive on the firewall and set the keylife to sub 10 minutes so the tunnel can rekey before it drops.

Cheers,
ASKER CERTIFIED SOLUTION
Avatar of dlg654
dlg654

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial