Re: [strongSwan] Clients disconnect after 240 minutes

2013-02-04 Thread Tiago Vasconcelos
Thank you for the tips, Andreas and Martin. Unfortunately, I'm still struggling with the same problem. 'reauth=no' didn't help, BTW. In my ipsec.conf I have currently: conn win7 ike=aes256-sha1-modp1024! esp=aes256-sha1! dpddelay=300s

Re: [strongSwan] Clients disconnect after 240 minutes

2013-02-04 Thread Tiago Vasconcelos
More accurately, the clients loose connection every 266 minutes. Tiago On 26/11/12 17:37, Tiago Vasconcelos wrote: I have strongSwan 4.6.4 running on a RHEL 5. Some of the users complain the connection drops after approximately 240 minutes. These users happen to be on Windows 7. Does

Re: [strongSwan] Clients disconnect after 240 minutes

2012-11-27 Thread Martin Willi
Hi Tiago, Hmmm, probably the Win7 clients don't like re-authentication proposed by the strongSwan gateway. Also check that you use modp1024 as your first DH group, and let the client initiate rekeying if it is behind NAT. See [1]. Regards Martin

Re: [strongSwan] Clients disconnect after 240 minutes

2012-11-26 Thread Andreas Steffen
Hmmm, probably the Win7 clients don't like re-authentication proposed by the strongSwan gateway. Does reauth=no in ipsec.conf help? Regards Andreas On 11/26/2012 06:37 PM, Tiago Vasconcelos wrote: I have strongSwan 4.6.4 running on a RHEL 5. Some of the users complain the connection