IPSEC VPN block the system endian.

[Guest]

[yhenao]

Hello,

When I configured IPSEC VPN, I think that consumes 100% cpu resources and crashes the system. I had reboot and start again.

anyone knows how to solve it.

Regards,

Yamidt

[quintard]

the same problems for me ! when i set a ipsec vpn tunnel ! the status  is open .bug i can't ping form red zone to the green zone .!!  should i need to set SNAT?? or  the vpn firewall

to expect
regard!!!

[yhenao]

Hello quintard,

Snat, how? I set snat ----> source LAN/IP  dst -----> IPSEC

But it is not working.

Regards,

Yamidt

[yhenao]

When I created a  site to site IPSEC vpn, the system is blocked and I  have restart the system. The VPN is open but when I am sending traffic  through the vpn the system endian is completely blocked.

 I have create VPN to FORTINET and ENDIAN 2.3, 2.4 and 25 user lisence and always the same problem.

if I only do ping the system is stable but if I send web traffic as RDP or  WEB GUI the system is down.

Regards,

[yhenao]

I tried disabling the IPS module and the vpn working properly. I think this happens when I have the IPS enabled.


Yamidt

[quintard]

hello yhenao!

    i  try to sniff the icmp packages /. the result is i can sniff the packages form red to green with esp. but i can't sniff the packages from the green to the red . maybe the esp package can‘t go through the nic, may the package have been abandon .
    i have  download a new efw. it's subverion is  '55' .when i  try to 'host to gw' ipsevpn , it's will worked  sometimes ..

about 30% sucessed!!

    will try to find the reason !!

    Regards!!!

[yhenao]

thanks quintard,

Endia saying me,  they have IPSEC bug, they are working to find a solution, I am waiting..

Regards,

Yamidt

[rmurthy@avantel.in]

my worry is also the same. I have two endian community versions on Site A and Site B. I have created a tunnel from A to B and vice versa. Now I am able to ping Ste A to Site B. But after 12 hours of work I am needed to restart the IPSEC service from EB Console. Is there any solution for this.

Thanks in advance.
SRRM