[Swan] Frequent dropped connections follow-up
Alex
mysqlstudent at gmail.com
Fri Oct 4 18:40:13 UTC 2019
Hi, back in May I reported an issue involving two cable modems and
dropping the connections for no apparent reason. I believe Paul said
it was a deadlock issue that would be fixed in 3.28, but it continues
today with 3.29 on fedora30.
The issue is that two systems, both of which are connected to the
Internet via cable modems, frequently lose their connection and
usually require restarting one or both connections in order to
reconnect, although sometimes "ipsec auto --up <connection_name>"
works.
My previous report is here:
https://lists.libreswan.org/pipermail/swan/2019/003189.html
I'm really not sure what further information I should provide to help
troubleshoot this. This is the config from the "remote" system with a
dynamic IP provided by Optimum.
conn orion-wyckoff
ikev2=insist
authby=rsasig
auto=start
interfaces=%defaultroute
dpddelay=10
dpdtimeout=90
dpdaction=clear
rightsubnets={192.168.11.0/24,192.168.10.0/24}
rightid=@wyckoff-orion
right=wyckoff.example.com
rightrsasigkey=0sAwEAAd4...
leftid=@orion-wyckoff
left=orion.example.com
leftsubnets={192.168.1.0/24,192.168.6.0/24}
leftrsasigkey=0sAwEAAeSMFxvoJ...
Here is the config for the "local" system with a static IP provided by
Optimum. This system also has several other VPNs also using
libreswan-3.29 that don't generally have the same problem.
conn orion-wyckoff
ikev2=insist
authby=rsasig
auto=add
dpddelay=10
dpdtimeout=90
dpdaction=clear
rightid=@wyckoff-orion
rightsubnets={192.168.11.0/24,192.168.10.0/24}
right=wyckoff.example.com
rightrsasigkey=0sAwEAAd4EeK...
leftid=@orion-wyckoff
left=orion.example.com
leftsubnets={192.168.1.0/24,192.168.6.0/24}
leftrsasigkey=0sAwEAAeSMFxvoJaP5...
More information about the Swan
mailing list