Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 07 Jul 2011 12:39:42 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        Paul Keusemann <pkeusem@visi.com>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Debugging dropped shell connections over a VPN
Message-ID:  <13D65A4C-F874-4970-A070-AA0392416680@mac.com>
In-Reply-To: <4E159C5A.5090702@visi.com>
References:  <4E159C5A.5090702@visi.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Jul 7, 2011, at 4:45 AM, Paul Keusemann wrote:
> My setup is something like this:
> - My local network is a mix of AIX, HP-UX, Linux, FreeBSD and Solaris machines running various OS versions.
> - My gateway / firewall  machine is running FreeBSD-8.1-RELEASE-p1 with ipfw, nat and racoon for the firewall and VPN.
> 
> The problem is that rlogin, ssh and telnet connections over the VPN get dropped after some period of inactivity.

You're probably getting NAT timeouts against the VPN connection if it is left idle.  racoon ought to have a config setting called natt_keepalive which sends periodic keepalives-- see whether that's disabled.

Regards,
-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?13D65A4C-F874-4970-A070-AA0392416680>