VPN - Re: 3-site VPN implementation w/Terminal Server

Author

Re: 3-site VPN implementation w/Terminal Server - Netopia update

Vince

2005-10-07, 5:51 pm

Hi Mike,

OK, I tried setting up the IKE profiles as you suggested. I have one
IKE profile for each tunnel on each router - the ends of each tunnel
have identical IKE profile settings. Both tunnels coming from Site C
are fine, communication is good, no excessive phase 2 renegotiations.
The problem now is that the tunnels between site A and B were still
re-negotiating phase 2 every few seconds, and periodically lose
communication between the subnets until I re-set the tunnel. I just
now tried changing the advanced IKE settings to use old SA's until
expired instead of using new SA's immediately, that seems to have
quieted things down for now - but for how long, who knows. Any
suggestions?