Ipsec VPN site-to-site it doesn't work anymore, it doesn't connect anymore from today
I have 2 controllers with 2 sites each, I have Ipsec vpn connections between locations, since this morning they no longer connect either manually or automatically. I didn't make any changes in any of the controllers, they just disconnected and don't reconnect, I redid the settings, I tried on automatic, nothing just doesn't connect, and the worst thing is that absolutely nothing appears in the logs!. I don't know what else to do, I restarted the controller, I restarted routers, but nothing. I mention that I have 3 Er605 routers and a router ER706W. A controller is OC200 and a controller is software on an on-premise server, I mention that there are 4 locations in total, 3 locations have ER605 routers, and one location has ER706W.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
It just gets worse and worse, set up the vpn like I showed you earlier. set it up exactly the same on both sites
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:24 | ||
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:24 | ||
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:23 | ||
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:23 | ||
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:22 | ||
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:22 | ||
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:21 | ||
| Gateway IPsec Module Information | WANVPN: IPsec connection was disconnected passively. (Peers=94.53.244.211<->94.53.231.180) |
Feb 10, 2025 15:49:21 |
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:46 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:45 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:44 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:43 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:42 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:41 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:40 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:39 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:37 | ||
| Gateway IPsec Module Information | WAN10: Enable DPD successfully. (DPD-Interval=94.53.231.180, Peers=94.53.244.211<-><null>) |
Feb 10, 2025 15:49:36 |
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
I don't know, it should be pretty simple, remote subnet and local network must match on both sites, phase 1 and 2 must be the same on both sites. so you have an error in the configuration. you'll have to look with a magnifying glass to find the error :-)
remote subnets and local network have to match each other, on remote site is it the opposite, presharde key is the same on both site.
exactly the same on both site.
- Copy Link
- Report Inappropriate Content
@MR.S
i have cheked all the settings, apparently it's ok but it's not working.
- Copy Link
- Report Inappropriate Content
yes it looks correct now, so if you don't have any ACL blocking it it should work. if it doesn't work now then contact your ISP, maybe they have blocked something.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 557
Replies: 28
Voters 0
No one has voted for it yet.