Christoph Leser <[email protected]> wrote:

> I'm still struggling to keep my ipsec vpns running smoothly.

FWIW, I mostly use IPsec on my home WLAN and I observe a similar
lack of reliability.  My laptop sets up two IPsec associations, one
IPv4 and one IPv6, and from time to time one of these or both fail
inexplicably (no response, no proposal chosen) but eventually get
established within ten minutes or so.

Since this is WLAN, I have considered that packet loss may screw
up the ISAKMP negotiation, but I haven't investigated.

I wonder how people who run a large number of IPsec associations
in production settings deal with this or if they are seeing it at
all.

-- 
Christian "naddy" Weisgerber                          [email protected]

Reply via email to