Unstable VPNs since 2.2 and even worse with 2.3.2
-
I have been having the same issues with IPSEC tunnels since 2.2 that many have been having on this forum. Although my tunnels (to various devices pfsense, fortigate, draytek) come up, they frequently disconnect and reconnect, sometimes instantly but sometimes after several minutes have passed. Draytek 2850/2860s are the worst and disconnect/reconnect every 20 or so seconds giving a second or two of dropped packets.
I was hoping that later builds would improve things, but if anything it is getting worse with every release. With the exception of pfsense to pfsense, our tunnels are all over the place and none stays up for more than an hour.
Does anybody have any advice on how to get stable tunnels between pfsense 2.2/2.3 and third party devices or should I consider rolling back to 2.1 and good ol' racoon, which was very reliable.
-
IPsec has gotten nothing but better between 2.2 and 2.3.2.
The answers to what is ailing you lie in the configurations on both sides and the logs on both sides. It is impossible to make a recommendation without seeing those.
In VPN > IPsec, Advanced set all the logging to Control except IKE SA, IKE Child SA, and Configuration backend. Set those to Diag.
Then look at Status > System Logs, IPsec and match up the logs with a failure and see what it complained about.
