> -----Original Message----- > From: Brian Fort (Mushkin) [mailto:[EMAIL PROTECTED]] > Sent: 14 January 2002 12:52 > To: [EMAIL PROTECTED] > Subject: [gb-users] SA renewal causes Win2K Terminal Client > disconnection > > > I'm having a problem with the mobile VPN client when I'm connected to a > Win2K Terminal. Whenever the SA is renewed I get disconnected > from my Win2K > Terminal session :-( I've raised the SA Life to its maximum of > 600 seconds > but that still only allows me 10 minutes between disconnects. > > Do I have the mobile VPN client setup incorrectly? Is this a > shortcoming of > the mobile VPN client?
What platform are you running the mobile VPN client on? With the firewall running version 3.2.1 and a Windows 98SE running the client, we found that the VPN connection "hiccups" for two or three seconds every ten minutes or so, but with a Windows NT4 machine running the client the "hiccup" lasts a minute or more - again occurring every 10 minutes or so. In the latter case a terminal services session will die and have to be restarted. With Firewall version 3.2.0 both client platforms suffered the more extensive hiccup. There is a recommendation to have different values for the SA life parameter in the authentication and key exchange proposals - e.g. 123 and 300 seconds. If you ping -t <target ip behind firewall> from a DOS window you can see the delays. Regards, � -- Graham Jones Linnet Solutions Ltd. [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 01953 717605 or 077 74 894200 �
