VPN keeps getting dropped almost every 10 mins.! Why?

E

Exo

Hi,

I have setup two VPN servers in my work environment.
The two servers sit behind a hardware firewall and
both machines are mapped to external IPs via NetScreen 25.

Each machine has two NICs and they both have Windows 2000
Server
installed (with all Microsoft's latest patches applied).
Internet
Authentication Service is installed and both machines
belongs to
a domain controller which provide authentication services
for these
VPN servers.

Since both machines have identical setup (except IP),
I will give you config of VPN Server1:

Two NICs:(with bogus IPs)

NIC#1Public: 192.168.1.90 mapped to 202.15.15.90
SubNet MasK 255.255.255.0
Default Gtw 192.168.1.1
Preferred DNS 192.168.1.80

NIC#2Private: 192.168.1.92
SubNet MasK 255.255.255.0
Default Gtw(blank-per MS manual i found on the Internet)
Preferred DNS 192.168.1.80

Users are prompted for password and authenticated
with no problem but only stay connected for
about 10 to 15 minutes then gets dropped
eventhough they can reconnect with no problem.
This problem persist for every user trying to VPN in.

Can someone tell me if my configuration is correct?
What can I do to rectify this?

Any help on this would be much appreciated.

Thanks In Advance,

-Exo
 
S

Steven L Umbach

Sounds like a time limit or idle limit is set somewhere. You may want to check your
Netscreen for any configuration in that regard. Also check the vpn connectoid on the
clients for a setting and more importantly in your remote access policies/edit
profile/dial in constraints for any time limits. You will need to check remote access
policies on your designated IAS server also. --- Steve
 
E

Exo

Thanks for the tips, Steve.
Will check on that.

-Exo.
-----Original Message-----
Sounds like a time limit or idle limit is set somewhere. You may want to check your
Netscreen for any configuration in that regard. Also
check the vpn connectoid on the
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top