0

Most of the time, our VPN (L2TP over IPSec, SoftEther) works great. All the users (3 or less concurrent) can connect without problems.

Lately, we have been noticing that we sometimes can't access servers behind the VPN.

The connection to the VPN (OSX client) is established successfully, no problem. Then, randomly, trying to SSH to a server just fails (connection refused). After a few seconds (less than 20), we are able to SSH in successfully. SSH is just an example, this happens for all the services behind the VPN. The VPN connection UI indicator did not show any issues or disconnects.

This issue happens on different networks, so in theory, it's not happening because the client has internet connectivity problems.

Do you guys know what could be the cause of the issue?

1
  • Try issueing a continuously running ping and check what happens in the logs when the ping goes down.
    – aairey
    Jun 27, 2016 at 11:20

2 Answers 2

1

Turns out, I had a local bridge installed and the virtual NAT enabled. For reasons that are beyond my knowledge, these two features don't play well together. I disabled my local bridge and now things are running great again.

When opened up the NAT table, I saw that it was abnormally huge. I googled this and discovered a post on the SoftEther forum about this, and someone said it was due to local bridge and virtual NAT. So I disabled the local bridge, the NAT table shrunk, and the problems were gone.

0
+50

What about VPN server monitoring/logs ?

Experiencing same issues on several OpenVPN connections, fixed it by switching type of connection from TCP to UDP. I think EtherSoft allows the same configuration after reading documentation:

L2TP/IPsec Sever Function Specifications on SoftEther VPN Server

User-authentication Methods: PAP and MS-CHAPv2 NAT-Traversal: RFC3947 IPsec over UDP Encapsulation

Another idea; It seems to be like a MTU problem, but it's a little bit hard to test. Depending of the EtherSoft version, this documentation may help on: "Resolving the MTU Problems"

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .