Users are being disconnected at a certain time
-
Hi,
We have one pfsense (2.7.2) host acting as vpn always on server. VPN profile is pushed out via Intune.
Users periodically experience being disconnected at certain times, most often around 2:30PM after being connected ~7:30 hours.
IPsec phase 1 and 2 tunnel have the following setting:
Life time: 28800
Rekey time: 27000
Reauth time: 27900
Rand time: 3600I've tried different settings, but nothing seems to fix the issue. Does anybody got an idea what to try?
-
Idea : look at the System, and other ( ! ) logs.
If, for example, your WAN disconnects for some reason, every connection that uses WAN goes down also. -
@Gertjan The log only shows 5 minutes of data. WAN is not being disconnected as it only happens for some.
How can I find the logs for certain times up to 24 hours back?
-
You are probably limited by the GUI.
You could go here : Status > System Logs > Settings
and change
to something a bit bigger.
Check also this :
where you can set overall log file size.
If you have many G bytes to spare, you can make these files a bit bigger.
On very small devices : be carefull.But you can also apply the "IT" way : you don't care about GUI ... go native access right away. Go to the source.
Use the console, or, like everybody else, use the SSH access, and look her /var/log/ as that is the place where logs are stored on nearly every "computer" on planet earth.
You'll find the system.log file.Btw : typically, I have 20-30 lines a day in the System log file.
So "only the last 5 minutes worth" is pretty strange : what is happening in there that your pfSense logs that much ? ?
Massive logs == normally : an indication something not-ok is going on.
