topic Re: IPSEC tunnel due to timeout problem in General Topics

IPSEC tunnel due to timeout problem

Amarzaya — Fri, 27 Aug 2010 06:39:44 GMT

I was configure remote 10 branchs connect to Office by IPSEC tunnel. Each branch connect to Office bandwidth 256kbps,512kbps, 1mbps. So someone branchs tunnel automatic disconnect.

Manual remote tunnel device(Cisco RV042) reconnect to PA2020 error. See error message

IKE phase-1 negotiation is failed as initiator, main mode. Failed SA: office ip [500]-branchs ip[500] cookie:26566cb2f77429cd:0000000000000000. Due to timeout.

Re: IPSEC tunnel due to timeout problem

mharding — Fri, 27 Aug 2010 19:03:30 GMT

Have you double checked your configuration and the pre-shared key?

Configuring IPSec VPN- Layer 2.pdf

Re: IPSEC tunnel due to timeout problem

Amarzaya — Mon, 30 Aug 2010 04:28:32 GMT

Remote branchs router Cisco RV042 with layer3 interface. VPN Tunnel Layer3 between devices

Re: IPSEC tunnel due to timeout problem

treese — Fri, 04 Feb 2011 14:51:33 GMT

What was the fix on this one? I'm haveing similiar issue.

Thank you,

Re: IPSEC tunnel due to timeout problem

djrodb — Fri, 24 Jun 2011 10:16:29 GMT

Has anyone got any updates with this?

Our VPNs were working ok one minute an the next we're getting IKE P1 timeout errors and nothing has changed?.....

Thanks

Rod

Re: IPSEC tunnel due to timeout problem

djrodb — Fri, 24 Jun 2011 11:18:53 GMT

Resolved this myself. I created a block all rule which should have been block all from untrusted to trusted zone...

Re: IPSEC tunnel due to timeout problem

siebi — Fri, 24 Jun 2011 21:35:23 GMT

Hi,

I had a similar problem at a customers site. I was changing the udp timeout (default 600) of the ike application to the negotiation timeout plus 30 seconds (I think it was 3630). This was solving the timeout problems.

Best regards,

Florian

Re: IPSEC tunnel due to timeout problem

JFonner — Wed, 14 Feb 2024 22:26:44 GMT

I'll be the guy that responds to a threat that is 12 years old...Any time you see all the zeros and Due to timeout it means the firewall cannot get to the peer ip. Often times this is because of a security policy or a routing issue. But bottom line is phase one cant get there for some reason.