site to site vpn issue

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

site to site vpn issue

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
site to site vpn issue
site to site vpn issue
2022-06-07 17:44:45
Model: ER605 (TL-R605)  
Hardware Version: V1
Firmware Version: 1.2.0

Customer with an office and a warehouse.

Both sites have an ER605 and OC200

Everything did appear to be working fine until a user was getting constantly disconnected from an RDP session that connects to a vendor system. (not over the vpn)

I have setup a manual IPsec connection using IKEv2.

Upon rebooting one of the endpoints, it seems to stabilize for some time (4hrs or so) and then starts dropping (very briefly)

I am seeing the behavious on both end of the tunnel as I have ScreenConnect loaded on computers on both ends as well for remote access and support.

  0      
  0      
#1
Options
10 Reply
Re:site to site vpn issue
2022-06-08 00:16:53

  @EIBROG 

i've set up the ipsec for many times. never really see a prob like this. what my suggestions are:

1. contact isp. 

2. pay attention your lan connection. is there a short disconnection on your local network which could eventually lead to a disc to the vpn. vpn's based on the internet, based on your connection to the world. 

 

do you use the default encryption settings? or aes-256? i don't think encryption can cause a prob but i did help someone establish the vpn by modifying the encryption. 

ScReW yOu gUyS. I aM GOinG hoMe. —————————————————————— For heaven's sake, can you write and describe your issue based on plain fact, common logic and a methodologic approach? Appreciate it.
  0  
  0  
#2
Options
Re:site to site vpn issue
2022-06-08 12:24:33

  @Tedd404 

Just sha1 - aes128 - dh2

 

Actually thought it was an ISP issue at first and had them replace the cable modem (bridge mode)

Weirder part is I am seeing some devices stay connected to my remote control host longer than others.

I am going to replace the network switch as this all just seems so erratic. (switch is possibly 8+ years old - can't remember when I installed it)
 

  0  
  0  
#3
Options
Re:site to site vpn issue
2022-06-09 08:18:02

  @EIBROG 

not really to replace the modem. it's more like a network layer problem. you can ask if isp disconnect periodically? maybe the vpn does not reconnect because your isp cut the connection. 

ScReW yOu gUyS. I aM GOinG hoMe. —————————————————————— For heaven's sake, can you write and describe your issue based on plain fact, common logic and a methodologic approach? Appreciate it.
  0  
  0  
#4
Options
Re:site to site vpn issue
2022-06-09 16:56:57

  @Tedd404 

 

Yeah I don't think that's the issue because I see the disconnects happening on the other endpoint (warehouse) as well, and that's a different ISP.

Which still bring me back to some sort of VPN issue because even if I had a bad switch, the site to site vpn should be fine.

Starting to think it might be the ER605 itself. I may swap that first and see how it goes.

  0  
  0  
#5
Options
Re:site to site vpn issue
2022-06-10 15:14:10

  @EIBROG 

 

Just a suggestion if you are still hunting around for more data points.  You could replace the site-site with a client-site connection and also run the tunnel encrypted or not.

 

You say you have different ISPs....what technology(s) are being used?  ie is it cable, cellular, FTTH, Starlink....

<< Paying it forward, one juicy problem at a time... >>
  0  
  0  
#6
Options
Re:site to site vpn issue
2022-06-12 09:49:29

  @EIBROG 

 

It may not be the same problem I had but it sounds like it. there is a lot of tp-link and VPN truble so it can be another VPN problem.

 

I can not bear to tell the whole story, but I spent 4 months. and 100 emails to get tp-link to and understand this error.

 

the problem is that every time IPsec connect / reconnect drops all relal time applications for all devices on LAN for a while. this also applies to L2TP.

finally the tp-link figured out the problem and came up with a beta version for ER605v1, v2 and ER7206. this has fixed real time aplication dropout,

But there is a lot of other VPN trouble with tp-link routers so I eventually had to give up and install a Cisco firewall to do IPSec. (another story)

 

But you can try to contact support to get a copy of the beta with fix, it should fix relal time application drop when IPsec connect/reconnetes.

the file is called ER605v1_un_1.2.0_20220422 (beat) .zip, I have no download link for this so you almost have to contact support to get it.

 

 

 

 

  0  
  0  
#7
Options
Re:site to site vpn issue
2022-06-14 19:08:19

  @shberge 

So its definitly a router / VPN issue.

I disabled the VPN connection and all the disconnect issues went away.

Will drop some screenshots of my config here in case I missed something but it was all working fine for months and then went haywire.

  0  
  0  
#8
Options
Re:site to site vpn issue
2022-06-15 05:35:59

  @EIBROG 

 

There is new software ot ruters yesterday, try to upgrade, I think VPN disconnection issue is fixed in this software

  0  
  0  
#9
Options
Re:site to site vpn issue
2022-06-16 13:13:55

  @shberge 

 

In 1.2.1 is PPTP is totally broken :-( Disconnect and Reconnect 10-15 minut.

 

 

  0  
  0  
#10
Options
Re:site to site vpn issue
2022-06-16 14:18:08

  @Libik 

 

I do not use PPTP so I do not know, but I'm not surprised, VPN has been a nightmare on these routers.

but now there is probably not much that supports PPTP or L2TP anymore, it is away from both Windows 11 and Android 12,
So i'm running  OpenVPN on a rapsbery pi4, it works perfectly fine on both pc and andoid / apple.device.and much faster than tp-link routers.
but you can still use PPTP/L2TP between tp-link routers if you do that.

 

 

 

 

 

  0  
  0  
#11
Options

Information

Helpful: 0

Views: 1192

Replies: 10

Related Articles