VPN lost on befsx41 routers after vpn computers turned off

VPN lost on befsx41 routers after vpn computers turned off
Links: home · search · speed test · login · more ·

Links: Reply New Topic
Forums » Up and Running » Virtual Private Networking » VPN lost on befsx41 routers after vpn computers turned off

anon @ 29th Jul 11:09AM:
VPN lost on befsx41 routers after vpn computers turned off

I don't know much of the professional terms in networking. I have two Linksys befsx41 routers and a vpn tunnel set up between home and an off-site office with friends' help. The vpn works and stays totally GOOD once the vpn connection is established.

The VPN connection "regularly" gets lost with the befsx41 each time after both computers were turned off. Both routers then need to be rebooted in order to re-establish the vpn connection. Once the vpn is re-established, the connection stays Good.

The VPN also stays connected if only one side of the two computers is turned off.

My general setups are:
Two BEFSX41 routers on both ends of the VPN tunnel behind the DSL modems; the router's version is 2.1, and the firmware's version is 1.52.15. I use static ips for the routers, 192.168.1.1 and 192.168.2.1,
Use the same DSL internet provider, Grande, on both ends
Internet connection on both ends is always GOOD, regardless of the VPN connection status,
Systems: windows XP pro,
Had used firmware 1.52.10, and had the same problem.

Called Linksys several times with no result. Some Indian supervisor suggested either to throw away these routers and buy new ones or to get a 6 mon. tech support, which, under my persistent request, was found that it does not cover VPN diagnosis.

I guess the hardware in my setup should be OK if the connection can be established and maintained. Might it be some configuration and setting that need to be adjusted? I'm at my wits¡¯ end. Any help will be enormously appreciated. Thanks in advance.
reply

rjs1003 @ 29th Jul 11:35AM:
Re: VPN lost on befsx41 routers after vpn computers turned off

I don't know these routers but a couple of questions might point you in the right direction:

I'm kind of assuming you're using IPSec but most of this applies even if not.

1) Are either of the routers behind another router or NAT device which is doing pass-through (which might be deleting the connection due to lack of traffic even though the two endpoints think it's still up)?

2) Does the BEFSX41 support "keep-alive" on its VPN tunnels? (most routers do, I think)

3) If it can establish the tunnel once but not again then unless 1) is the issue, it sounds like there may be a firmware bug. But 2) may allow you to work around that.
If however 1) is the issue, if the SA lifetimes on your tunnel are long then shortening them (eg 30 mins for phase 1) may help your routers to realise they need to start the connection again.

Bob
reply

anon @ 30th Jul 04:09PM:
Re: VPN lost on befsx41 routers after vpn computers turned off

Hi Bob,

You well did pointed me to a right direction.

Sorry I could not reply earlier, cuse I run a one-man show on two distant locations, and could not turn both sides of the computers off to test your idea till this morning.

This morning, after both computers were off overnight, and after turned on on the two locations, the VPN stayed connected. For the first time in more than a year, I did not need to reboot my routers.

I followed the second of your ideas. Went to the Advance Setting under the VPN, and checked "keep-alive" It was unchecked previously.

I'm trying to understand you first idea, 1. Are either of the routers behind another router or NAT device?

Yes, I guess. Either of my two befsx41s at two distant locations is behind a DSL modem provided by the same DSL company. One is a Motorola modem and the other is a brandless modem, model # u10c018. Can these modems be counted for what you mentioned as "another router or NAT device?

I can't make changes to those two modems' settings, can I?

My current Phase 1, Key Lifetime is 3600 seconds, that is, 60 minutes. Do you think I can change the lifetime to 30 mins to improve the connection, too?

Again, thanks a million for your help. Man, how many months of headache did you save me!

Jing
reply

rjs1003 @ 31st Jul 05:17AM:
Re: VPN lost on befsx41 routers after vpn computers turned off

I think that since one of the suggestions worked you should probably stop changing things at that point!
Only try the others if it's still unreliable.

Glad to have helped.

Bob
reply