Frequent Disconnects With IPSec VPN Connection to Azure on 2.3.3

pdwalker

Yes, correct. Both those options are checked to disable those features.

So far, so good.

pdwalker

scratch that, still getting disconnected.

scairns

Hi There

I am having very similar problems with a client at the moment getting PF Sense connected to Azure VPN Gateways. I have checked all the blogs online and the PF Sense settings seem to be fine. My problem is similar to what is described here in that my VPN tunnel works for a few hours (16 being the most so far) and then all of a sudden it just starts to disconnect. Did you even manage to figure out the magic settings which worked for you to keep the connection stable?

Any help would be really appreciated.

Cheers
Stephen

pdwalker

No. I'm still getting disconnected every 1-8 minutes and I am still unable to determine why.

pdwalker

ios: no problem
windows 7: no problem
osx: constant disconnects

So, I'm two for three.

phenriquerangel

So ,

I have this problem with my connection too.

I try fix a ping, for generate traffic on vpn. But, disconnect too.

Any idea for resolv this?

focalguy

For those still having the problem can you post your configuration or screenshots? Mask any sensitive information.

pdwalker

See attached.

Thank you.

![FireShot Capture 5 - VPN_ IPsec_ Tunnels - pfSense.charltonslaw.lo_ - http___10.10.1.1_vpn_ipsec.php.png](/public/imported_attachments/1/FireShot Capture 5 - VPN_ IPsec_ Tunnels - pfSense.charltonslaw.lo_ - http___10.10.1.1_vpn_ipsec.php.png)
![FireShot Capture 5 - VPN_ IPsec_ Tunnels - pfSense.charltonslaw.lo_ - http___10.10.1.1_vpn_ipsec.php.png_thumb](/public/imported_attachments/1/FireShot Capture 5 - VPN_ IPsec_ Tunnels - pfSense.charltonslaw.lo_ - http___10.10.1.1_vpn_ipsec.php.png_thumb)
![FireShot Capture 2 - VPN_ IPsec_ Mobile Clients - pfSense.c_ - http___10.10.1.1_vpn_ipsec_mobile.php.png](/public/imported_attachments/1/FireShot Capture 2 - VPN_ IPsec_ Mobile Clients - pfSense.c_ - http___10.10.1.1_vpn_ipsec_mobile.php.png)
![FireShot Capture 2 - VPN_ IPsec_ Mobile Clients - pfSense.c_ - http___10.10.1.1_vpn_ipsec_mobile.php.png_thumb](/public/imported_attachments/1/FireShot Capture 2 - VPN_ IPsec_ Mobile Clients - pfSense.c_ - http___10.10.1.1_vpn_ipsec_mobile.php.png_thumb)
![FireShot Capture 3 - VPN_ IPsec_ Advanced Settings - pfSe_ - http___10.10.1.1_vpn_ipsec_settings.php.png](/public/imported_attachments/1/FireShot Capture 3 - VPN_ IPsec_ Advanced Settings - pfSe_ - http___10.10.1.1_vpn_ipsec_settings.php.png)
![FireShot Capture 3 - VPN_ IPsec_ Advanced Settings - pfSe_ - http___10.10.1.1_vpn_ipsec_settings.php.png_thumb](/public/imported_attachments/1/FireShot Capture 3 - VPN_ IPsec_ Advanced Settings - pfSe_ - http___10.10.1.1_vpn_ipsec_settings.php.png_thumb)
![FireShot Capture 1 - VPN_ IPsec_ Mobile Clients_ Edit Phase_ - http___10.10.1.1_vpn_ipsec_phase1.php.png](/public/imported_attachments/1/FireShot Capture 1 - VPN_ IPsec_ Mobile Clients_ Edit Phase_ - http___10.10.1.1_vpn_ipsec_phase1.php.png)
![FireShot Capture 1 - VPN_ IPsec_ Mobile Clients_ Edit Phase_ - http___10.10.1.1_vpn_ipsec_phase1.php.png_thumb](/public/imported_attachments/1/FireShot Capture 1 - VPN_ IPsec_ Mobile Clients_ Edit Phase_ - http___10.10.1.1_vpn_ipsec_phase1.php.png_thumb)

focalguy

Pdwalker it looks like your setup is for mobile clients so I can't be of much help. My problem was a site to site connection from my local ISP to Azure.

If you don't already have your own thread maybe you can start one with your specific details.

gajimenez

Hi focalguy,

i had the same problem but with AWS and fortinet, Did you solve the problem?

gajimenez

At the moment when the VPN disconnect i check my logs i saw in the ipsec logs

Time Process PID Message
Oct 30 19:32:09 charon 10[IKE] <con5000|2107>no matching CHILD_SA config found
Oct 30 19:32:09 charon 10[ENC] <con5000|2107>generating INFORMATIONAL_V1 request 3902045121 [ HASH N(INVAL_ID) ]

After, when we reboot in both side of the VPN is UP again without problem</con5000|2107></con5000|2107>

focalguy

It's been running stable for me since I made those changes referenced previously in this thread.