OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • IPSec VPN connection not stable
« previous next »
  • Print
Pages: [1]

Author Topic: IPSec VPN connection not stable  (Read 1163 times)

elvinmammadov

  • Newbie
  • *
  • Posts: 44
  • Karma: 0
    • View Profile
IPSec VPN connection not stable
« on: January 14, 2022, 04:01:10 pm »
Hello,

We have a problem with the stability of IPsec connection. It shows the connection is up, it works normal for a short period of time, then no traffic passes through. I restart the IPsec service, then it works for 2-3 minutes, then the same problem happens again. When this problem happens, I check also "Bytes in and Bytes out" in Status overview, they don't update.

Could you please help me on how I can solve this problem? Thanks.

Code: [Select]
2022-01-14T16:15:07 charon[77951] 15[CFG] <210> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:15:07 charon[77951] 15[CFG] <210> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:15:07 charon[77951] 15[CFG] <210> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:57 charon[77951] 15[CFG] <209> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:57 charon[77951] 15[CFG] <209> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:56 charon[77951] 15[CFG] <209> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:46 charon[77951] 15[CFG] <208> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:46 charon[77951] 10[CFG] <208> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:46 charon[77951] 10[CFG] <208> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:35 charon[77951] 10[CFG] <207> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:35 charon[77951] 10[CFG] <207> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T16:14:35 charon[77951] 06[CFG] <207> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:57:00 charon[77951] 13[CFG] <90> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:59 charon[77951] 13[CFG] <90> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:59 charon[77951] 13[CFG] <90> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:49 charon[77951] 13[CFG] <89> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:49 charon[77951] 13[CFG] <89> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:48 charon[77951] 09[CFG] <89> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:38 charon[77951] 13[CFG] <88> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:38 charon[77951] 13[CFG] <88> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:38 charon[77951] 13[CFG] <88> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:28 charon[77951] 14[CFG] <87> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:27 charon[77951] 02[CFG] <87> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:56:27 charon[77951] 02[CFG] <87> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 09[CFG] <26> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 05[CFG] <25> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 05[CFG] <26> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 05[CFG] <25> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 05[CFG] <26> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 05[CFG] <25> ike config match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 04[NET] sending packet: from Source IP[500] to Destionation IP[500]
2022-01-14T15:50:12 charon[77951] 05[NET] <con78|24> sending packet: from Source IP[500] to Destionation IP[500] (240 bytes)
2022-01-14T15:50:12 charon[77951] 05[KNL] <con78|24> using 213.157.13.177 as nexthop to reach Destionation IP
2022-01-14T15:50:12 charon[77951] 05[CHD] <con78|24> SPI 0x444e3674, src Source IP dst Destionation IP
2022-01-14T15:50:12 charon[77951] 05[CHD] <con78|24> SPI 0xce3e44e0, src Destionation IP dst Source IP
2022-01-14T15:50:12 charon[77951] 05[IKE] <con78|24> IKE_SA con78[24] established between Source IP[Source IP]...Destionation IP[Destionation IP]
2022-01-14T15:50:12 charon[77951] 05[IKE] <con78|24> authentication of 'Destionation IP' with pre-shared key successful
2022-01-14T15:50:12 charon[77951] 05[CFG] <24> peer config "con78", ike match: 3100 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:12 charon[77951] 05[CFG] <24> looking for peer configs matching Source IP[%any]...Destionation IP[Destionation IP]
2022-01-14T15:50:12 charon[77951] 05[NET] <24> received packet: from Destionation IP[500] to Source IP[500] (240 bytes)
2022-01-14T15:50:12 charon[77951] 03[NET] received packet: from Destionation IP[500] to Source IP[500]
2022-01-14T15:50:12 charon[77951] 08[CFG] <17> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:11 charon[77951] 04[NET] sending packet: from Source IP[500] to Destionation IP[500]
2022-01-14T15:50:11 charon[77951] 15[NET] <24> sending packet: from Source IP[500] to Destionation IP[500] (481 bytes)
2022-01-14T15:50:11 charon[77951] 15[IKE] <24> Destionation IP is initiating an IKE_SA
2022-01-14T15:50:11 charon[77951] 15[CFG] <24> found matching ike config: Source IP...Destionation IP with prio 3100
2022-01-14T15:50:11 charon[77951] 15[CFG] <24> candidate: Source IP...Destionation IP, prio 3100
2022-01-14T15:50:11 charon[77951] 15[CFG] <24> ike config match: 3100 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:11 charon[77951] 15[CFG] <24> looking for an IKEv2 config for Source IP...Destionation IP
2022-01-14T15:50:11 charon[77951] 15[NET] <24> received packet: from Destionation IP[500] to Source IP[500] (440 bytes)
2022-01-14T15:50:11 charon[77951] 03[NET] received packet: from Destionation IP[500] to Source IP[500]
2022-01-14T15:50:11 charon[77951] 08[CFG] <22> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:11 charon[77951] 08[CFG] <22> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:11 charon[77951] 15[CFG] <19> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:11 charon[77951] 02[CFG] <20> peer config "con78", ike match: 0 (Source IP...Destionation IP IKEv2)
2022-01-14T15:50:11 charon[77951] 02[CFG] <22> ike config match: 0 (Source IP...Destionation IP IKEv2)
« Last Edit: January 14, 2022, 04:20:41 pm by elvinmammadov »
Logged

elvinmammadov

  • Newbie
  • *
  • Posts: 44
  • Karma: 0
    • View Profile
Re: IPSec VPN connection not stable
« Reply #1 on: January 14, 2022, 04:49:02 pm »
Solved.
Logged
  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • General Discussion »
  • IPSec VPN connection not stable
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy     | XHTML | RSS | WAP2