VPN works, causes periodic freezes of BEFSX41

I use a BEFSX41 as a firewall/router and site to site vpn.

While the vpn tunnel is up the router seems to freeze every minute (sometimes after 45 seconds or 30 seconds.

This is easily evindent when ping the router from another machine on the side of the intranet. While the average ping time is less than 1 milliseconds, every minute it will be 500 milliseconds or more. A ping to a machine on the remote side of the vpn is usually 80 milliseconds and every minute or so it goes up to 2 seoconds for a few pings.

If I take the vpn to the bottom of the judgment of the problem (i.e. ping the router/firewall to the intranet side is consistently below 1 millisecond)

I discovered that these freezes/delays coincides with information in the vpn log file, it looks like this:

2008-12-04 12:46:01 IKE[1] Set up ESP tunnel with 206.xxx.xxx.xx Success !2008-12-04 12:46:012008-12-04 12:46:34 IKE[1] Rx << QM_I1 : 206.xxx.xxx.xx HASH, SA, NONCE, ID, ID2008-12-04 12:46:34 IKE[1] **Check your Local/Remote Secure Group settings !2008-12-04 12:47:012008-12-04 12:47:01 IKE[1] Tx >> MM_I1 : 206.xxx.xxx.xx Error !2008-12-04 12:47:02 IKE[1] Rx << MM_R1 : 206.xxx.xxx.xx SA, VID2008-12-04 12:47:02 IKE[1] ISAKMP SA CKI=[342ed619 c59fed01] CKR=[kkkk1954 ffff4e87]2008-12-04 12:47:02 IKE[1] ISAKMP SA 3DES / MD5 / PreShared / MODP_1024 / 3600 sec (*3600 sec)2008-12-04 12:47:02 IKE[1] Tx >> MM_I2 : 206.xxx.xxx.xx KE, NONCE2008-12-04 12:47:03 IKE[1] Rx << MM_R2 : 206.xxx.xxx.xx KE, NONCE2008-12-04 12:47:03 IKE[1] Tx >> MM_I3 : 206.xxx.xxx.xx ID, HASH2008-12-04 12:47:05 IKE[1] Rx << MM_R3 : 206.xxx.xxx.xx ID, HASH2008-12-04 12:47:05 IKE[1] Rx << QM_R1 : 206.xxx.xxx.xx HASH, SA, NONCE, ID, ID2008-12-04 12:47:05 IKE[1] Tx >> QM_I2 : 206.xxx.xxx.xx HASH2008-12-04 12:47:05 IKE[1] ESP_SA 3DES / MD5 / 3600 sec / SPI=[nnnn7daf:mmmm9ee9]2008-12-04 12:47:05 IKE[1] Set up ESP tunnel with 206.xxx.xxx.xx Success !2008-12-04 12:47:052008-12-04 12:47:32 IKE[1] Rx << QM_I1 : 206.xxx.xxx.xx HASH, SA, NONCE, ID, ID2008-12-04 12:47:32 IKE[1] **Check your Local/Remote Secure Group settings !2008-12-04 12:48:012008-12-04 12:48:01 IKE[1] Tx >> MM_I1 : 206.xxx.xxx.xx Error !2008-12-04 12:48:02 IKE[1] Rx << MM_R1 : 206.xxx.xxx.xx SA, VID2008-12-04 12:48:02 IKE[1] ISAKMP SA CKI=[60e98e30 f5831f66] CKR=[kkkk6675 ffff38d1]2008-12-04 12:48:02 IKE[1] ISAKMP SA 3DES / MD5 / PreShared / MODP_1024 / 3600 sec (*3600 sec)2008-12-04 12:48:02 IKE[1] Tx >> MM_I2 : 206.xxx.xxx.xx KE, NONCE2008-12-04 12:48:03 IKE[1] Rx << MM_R2 : 206.xxx.xxx.xx KE, NONCE2008-12-04 12:48:03 IKE[1] Tx >> MM_I3 : 206.xxx.xxx.xx ID, HASH2008-12-04 12:48:05 IKE[1] Rx << MM_R3 : 206.xxx.xxx.xx ID, HASH2008-12-04 12:48:05 IKE[1] Rx << QM_R1 : 206.xxx.xxx.xx HASH, SA, NONCE, ID, ID2008-12-04 12:48:05 IKE[1] Tx >> QM_I2 : 206.xxx.xxx.xx HASH2008-12-04 12:48:05 IKE[1] ESP_SA 3DES / MD5 / 3600 sec / SPI=[nnnn65e5:mmmm2ea9]2008-12-04 12:48:05 IKE[1] Set up ESP tunnel with 206.xxx.xxx.xx Success !2008-12-04 12:48:05

The situation described above repeats adfinium

To be clear, the vpn works (with the exception of periodic delays) throughout several days

I think that my settings may not completely right, butI don't know how to interpret the log above

Found.

I had disabled PFS. I enabled PFS and the problem disappeared.

http://en.Wikipedia.org/wiki/Perfect_forward_secrecy

See sections 8-10 http://www.ietf.org/rfc/rfc2409.txt to see why

Tags: Linksys Routers

Similar Questions

  • common causes for freezing?

    Hello


    My code sometimes causes Flash Player to freeze so bad, that I have to kill the host application or stand-alone player. I don't know where to start troubleshooting.

    I suspect the following:

    -dynamic generation of tween objects that are pushed on the tables to avoid the garbage collector; memory problem?

    -an unparalleled amount of add/removeEventListener

    These are my only clues.

    What are some common causes for freezing Flash Player? I have confirmed that it is not related to video drivers or the OS.

    Any help is very appreciated.

    zestwan

    Throughout my experience working with AS2/AS3, the known causes were:

    Bad code written

    Poor application design

    Operation garbage collection performed poorly or not at all

    Improper performance of XML

    Poorly written TimerEvents and eventHandlers (but they are very easy to catch)

    I think that if the developers get in the habbit of debugging since the beginning, he would help them identify the pitfalls and issues way ahead.

  • VPN works with Sierra?

    I understand that the VPN does not yet, with the Sierra

    Is this a Bug? or, if this possibility has been deleted?

    Can we expect support once again with one of the 10.12. # updates?

    This is a very important feature to my office with it, we will not update for Sierra.

    Thank you

    VPNS work very well in Sierra as long as they don't use PPTP. Support for PPTP has been removed because it is not safe. By using a PPTP based VPN is useless. Your data is not safe.

  • I can't access my email works through outlook over a VPN. The signin VPN works ok, I can see my network co., but can not use outlook. 'Microsoft Exchange Server' reported an error (0 x 80040115)

    prospects for bt infinity

    I recently changed my home to infinity of BT broadband.  Now I can't access my email works through outlook over a VPN.  The signin VPN works ok, I can see my network co., but can not use outlook.   I get the following error at startup of outlook.

    Task 'Microsoft Exchange Server' reported an error (0 x 80040115): ' the connection to the Microsoft Exchange Server is unavailable.  Outlook must be online or connected to complete this action. »

    Anyone have any ideas?

    Allan M

    Hello

    Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows 7 networking forum.

    Ramata Thakur

  • ABC causes system freeze

    I would be very grateful if someone could please tell me how to troubleshoot the cause of a system freeze.

    After that a BSOD caused by the premature elimination of a DVD of my d: drive, a program that I use frequently, ABC, was originally a complete system to freeze any moment, I try to run... it is Exact Audio Copy, a program that allows you to burn a cd, content analysis of files for loss/lossless music.  The only way to address the gel is through reboot cold.

    Here are the steps that I took so far... and maybe this will give you an idea:

    1. I uninstalled, but when I tried to re-install it ALSO caused a freezing of the system.

    2. in Safe Mode, I was able to reinstall them and run the program without problem.

    3. after the installation in Mode safe, but chasing after systematic startup, the system froze.

    So, I assume that there is a driver conflict...

    EventViewer does not seem to grasp the issue... nothing showed up.

    Are there other ways to understand the question?

    I am running XP Pro SP3, all the installed updates, on a Dell Vostro 220 s computers.

    Thanks a lot if someone can help me with this.

    Pter

    Just note if EAC still causes crashes while all other programs/processes are not running. If this is the case, then it has a bug or there may be a problem with one of your drivers. If there is no blocking, systematically add pack programs/process until there is a blockage. Essentially, you need to use the process of elimination until you isoliez the villain.

    Start by adding half back and then see if there is a blockage or not. You'll understand!

  • Under Vista, after doing the update of Windows, affected by the half second periodic freezes

    Vista Home Premium SP2 with all updates.

    For about a week now (since the last round of updates or more) my GUI everything will freeze.  The mouse stops, all text I type stops, and can contain any game I'm running.  This happens regularly (but not constantly) and co incident with the HD LED blinks on the front panel (sometimes).

    When I open the Task Manager and moving to different charts, I see normal activity of the CPU to 1%-4% suddenly spike to 50% very briefly.  That's when the freeze happens.  It doesn't happen all the time however.  I see a lot of services are popping up with increased use of the processor but have not been able to establish a correlation between those to whom they are.  Most of what I see are simply "svchost" which basically can be anything.

    My normal operating mode must have three elements running: Firefox, Thunderbird, and MS Live Messenger.  Individually and together, none of them appear to be involved, although I thought that maybe one, or more, can be simply "looking for things.  Even without anything going (all programs closed), I can slowly be the mouse on the screen and detect the second gel front of "catch-up".  This, I suppose, tells me that the mouse is still playing, but not moved to the screen.

    Similarly, if I change a Word document, or a text file, my typing stops at the screen, but when the freeze is finished, it "catches up".  However, if I beat the exit screen more of 5 or 6 characters, they get missed completely (I'm a fast typist).

    Anyone can shed some light on this?  It happens to someone else, or is it just me?

    Bill

    We seem to have some confusion in terminology. The program from Sysinternals which replaces the task manager's Process Explorer. With that, I would like to keep an eye on interrupts and deferred procedure calls that would indicate a driver problem. Process Monitor gives you a trace of all the system calls that can help find what's going on just before and after the frost. You cannot set to stop on a trigger. There is another tool Sysinternals, ProcDumpTechNet.Microsoft.com/Sysinternals/dd996900,http://technet.microsoft.com/en-us/sysinternals/dd996900 , that allows you to perform a dump when certain events occur. You then can it analyze with the debugging tools for Windows. Here's an example of it in action: http://blogs.technet.com/b/markrussinovich/archive/2010/08/24/3351213.aspx .

    To cause a freeze something must either be maxing out carrots time allowing anything to pre-empt it rather than holding on to a resource which prevents anything else running. For me, the most likely cause would be a pilot.

  • Remote Access Auto Connection Manager and error with a VPN work

    I use my laptop to connect to my VPN working. It has not worked since June 24, 2010. I get a message indicating that the connection to network access device is not found. I also have a problem with the connection manager automatic remote access. I'm trying to launch and get an error code 5, unauthorized. The Auto Connection Manager remote access has something to do with the vpn access problem and if so how can I solve this problem?

    Hello hitherandthee,

    Your question of Windows Vista is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the platform of networking on TechNet. Following your question thanks for posting the link below:

    http://social.technet.Microsoft.com/forums/en-us/winserverPN/threads?page=10

    Thank you
    Irfan H, Engineer Support Microsoft Answers. Visit our Microsoft answers feedback Forum and let us know what you think.

  • VPN works only on windows 7

    I have windows 7 professional 64 bit. I can't VPN works with the Iphone. I don't have another computer to try out it. Someone at - it a good guide?

    I think that the VPN is not configured on my win7. Any guide or help will be appreciated.

    OK... as test that I have connected to this free PPTP VPN service to make sure that my iPod touch VPN features work.

    http://www.bestfreevpn.com/iPhone-iPad-free-VPN/

    After configuring the server settings that I could with success to connect, check my iPod Touch IP had changed to the IP address assigned by their PPTP VPN server and I could surf the internet, check email, etc. etc.

    http://CID-25ab668da65c8fbe.photos.live.com/self.aspx/Windows%20images/iPodVPN-status-1.PNG

    http://CID-25ab668da65c8fbe.photos.live.com/self.aspx/Windows%20images/iPodVPN-status-2.PNG

    This screen, on the http://www.whatismyip.com site, verified for me as all my iPod Touch traffic was routed through the VPN tunnel to their server and back again. The reported public IP address is different from what I see of my Win 7 laptop at the same time even if the laptop and iPod Touch are vascular on the same local LAN here.

    http://CID-25ab668da65c8fbe.photos.live.com/self.aspx/Windows%20images/iPodVPN-whatismyip.PNG

    http://theillustratednetwork.MVPs.org/LAN/CurrentHomeLAN.PNG

    So getting back to your original problem, that I don't really know what is happening with Win 7, at least on my machine and its function of PPTP VPN server integrated. I'm not home now so I have no way to test this functionality with a Windows VPN client.

    However, the key is that the PPTP VPN functionality in my iPod Touch works as I expect on your iPhone. It boils down to a problem with the server.

    I suggest test you your iPhone against this free VPN server to make sure in your own mind that his work and then figure out what you want to do next. What exactly do you want to do with VPN, if you can get this to work on Win 7 PC server, IE. access to the files, remote and secure web surfing, etc.?

    Please NOTE: The free VPN service changes their password access every 12 to 24 hours and idle sessions for more than 4 hours are disconnected automatically. See the note at the bottom of their homepage.

    http://www.bestfreevpn.com/free-VPN/

    MS - MVP Windows Expert - consumer
    "When all else fails try what the captain suggested before you started...". »

  • Client OS VPN works with routers RV042G?

    I bought a RV042G, but the documentation makes no reference that this router supports Mac OS x 10.8 or any other OSX version.

    Client OS VPN works with routers RV042G?

    I appreciate any response.

    Hi Marcos, Yes, for PPTP. IPsec built in does not work by default as is the 'same' as the Cisco VPN 5.x.

    -Tom
    Please evaluate the useful messages

  • Can a VPN 3005 cause multiple IP addresses on the external interface?

    Nice day

    Can a VPN 3005 cause several IPS on an external interface?

    I expect to use it in an environment that has 2 ADSL connections to an internet service provider. For the sake of the exercise, we could call them ROUTER1 and ROUTER2.

    We have a few VPN we always want to spend by ROUTER1 and some VPN we always want going through ROUTER2.

    Is this possible?

    Thank you very much

    No, not possible, sorry.

  • What VPN work as a PPTP vpn firewall CISCO-ASA-5520.

    Hi all

    Can you please tell me which replace the VPN I can configure PPTP on ASA 5520 firewall. What VPN work as a PPTP vpn firewall CISCO-ASA-5520.

    You can use the wizard VPN of RA with ASDM and confiugre L2TP IPSEC VPN that does not need a VPN Client must be installed.

    Michael

    Please note all useful posts

  • VPN works in Active Active Firewall failover mode?

    I want to clarify these two things!
    1. what VPN works in active/active mode failover mode?

    2. what failover active/Pasive mode?

    Kind regards!

    Hello

    With the help of an active/active failover means that firewalls will be in Multiple context mode. In other words the virtual firewall.

    This means that you can ONLY use the L2L IPsec VPN connections on the virtual firewall if you run level software on the firewall 9.x. Any form of Client and clientless VPN is not supported in multiple context Mode right now.

    Now with active / standby, it must make a distinction (if that is the word).

    IF you run a pair of active failover / normal standby time of ASAs IS NOT in Multiple context mode, YOU CAN use any type of VPN support ASAs.

    IF you run a pair of ASAs in several Mode of context and active / standby, you will naturally meet the limitation of VPN in Multiple Mode of context support and do WILL NOT be able to use any other VPN other than IPsec VPN L2L connections as long as you run the 9.x software that supports.

    Hope this helps

    -Jouni

  • Illustrator will periodically freeze or Crash

    I have similar problems on several desktops with similar specs. The specs are listed below.

    System specs

    CPU: i7-3770

    RAM: 16 GB

    GPU: Nvidia GTX 630

    HARD DISK: 7200 RPM

    OS: Windows 7 Professional 64-bit

    Every now and then when opening the application, saving a file or perform work involving the displacement of a large number of vectors, the application to crash and crash. It does so through dialogue "Application is not responding...". "in Windows. Only the windows error log indicates that the application is suspended. Two of the three desktop computers, I have the app on the program crashes completely, the third it freezes just periodically.

    Given that its "three separate systems with three separate sets of equipment, I hesitate to call it a driver problem, although I checked anything that might be out of date or the cause of a conflict and have updated all out-of-date drivers with no real improvement."

    Hi Nicolas,.

    Allows you to isolate a machine and work on them, if the aid measures, we can try them on the other two.

    Please, try the following steps to manually reset preferences to HAVE it:

    1. close the AI.

    2. navigate to C:\Users\your username\AppData (hidden folder) \Roaming\Adobe\ Rename 'Adobe Illustrator 19 settings' folder 'old Adobe Illustrator 19 parameters.

    3 re launch HAVE and exercise supervision.

    Kind regards

    OM

  • Toshiba U10 Docking Station causing screen freeze

    After running my monitor external docking of th #rough the U10 my screen will freeze periodically. The only way to UN - freeze is to detach the PC and then re-dock.

    I use a 32-bit laptop to Windows 7 with 3 GB of RAM. All drivers and patches are up to date and I have to update the U10 driver to the latest version, all this without any successful resolution.

    Any help would be appreciated as it happens at least 4 times a day and is very annoying and embarrassing.

    Thank you

    Hello

    I think that it of difficult to say what could be the problem exactly.
    You are able to reproduce this issue? I mean you said that the screen freezes periodically does happen a certain application running?

    As far as I know the European Toshiba driver page provides the utility Dynadock v2.4.0.13 for Win 7 32 bit and 64 bit.
    The v 2.1.4.4 Setup CD is also available for download

    Maybe you need to reinstall this even if you said, that you use the latest version of the software
    I would also recommend test this Dynadock in relation to another PC
    Maybe the laptop preinstalled software causes this problem.

  • Updated for Firefox 4RC and have no capability on the search engines, cause the freezing of the browser, any ideas? Running windows 7

    I am running Windows 7 and have / has done to update various 4 betas/release final candidate. Have tried using various engines without success. I am able to conduct the initial search, the results are displayed, impossible to open links and lose all the features in freezing cause navigation.

    Yahoo, Google, Bing, all are concerned.

    You have McAfee Site Advisor installed, which increases because of problems especially with Google. If you try to disable it to see if Firefox works. Alternatively, you can try to install the latest version (3.3.1) of the Site Advisor, one has to work.

    Mozilla plan on blocking older versions of McAfee Site Advisor Firefox 4 due to the problems they cause.

Maybe you are looking for