Reply
gopcs
Posts: 1
Registered: ‎11-07-2007

WRT150N and VPN

need help with VPN, please, on ATT/BellSouth DSL.  I had been a Comcast cable subscriber, and I may go back yet.
On Comcast there were no VPN problems.  Now on ATT/BellSouth DSL the VPN may stay connected 2 minutes or 2 hours, or anywhere in between.  This is using all of the same hardware except for the modem. On Comcast it was a Motorola Surfboard 5120; now I have a Westell 6100 DSL modem.
Here is the setup.  Westell DSL2+ Router/Modem, model E90-610030-06 Rev. D, dated July 2007 with latest firmware. Provisioned for Bridge mode, DHCP disabled. Goes to Linksys WRT150N with latest firmware. Provisioned for PPoE, KeepAlive=20 seconds, MTU=1300, DHCP. I am connected via Ethernet cable to eliminate any kind of wireless issues. The pc is a HP notebook with Broadcom NetXtreme Gigabit Ethernet NIC, VPN client is Cisco VPN Dialer Version 4.8.01.0300. Far end is Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.K.  I have tried IPSec/TCP and IPSec/UDP; both protocols have the same failures.
Possibly a clue... the Cisco VPN Dialer statistics reports:
Packets
 Ecnrypted: 12648
 Decrypted: 12850
 Discarded: 7297
 Bypassed: 112
 
The "Discarded: 7297" seems to be a high percentage of Encrypted and Decrypted Packets.
 
Any suggestions will be appreciated.
 
When the Disconnect occurs, the Cisco VPN Dialer reports "Secure VPN Connection terminated locally by the Client. Reason 412: The remote peer is no longer responding."
Here is a portion of the log file at the point of disconnect:
 363    19:47:02.712  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663093
 
 364    19:47:02.775  11/06/07  Sev=Info/5 IKE/0x6300002F
 Received ISAKMP packet: peer = 181.xxx.xxx.xxx
 
 365    19:47:02.775  11/06/07  Sev=Info/4 IKE/0x63000014
 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_ACK) from 181.xxx.xxx.xxx
 
 366    19:47:02.775  11/06/07  Sev=Info/5 IKE/0x63000040
 Received DPD ACK from 181.xxx.xxx.xxx, seq# received = 1752663093, seq# expected = 1752663093
 
 367    19:47:07.212  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 368    19:47:07.212  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 369    19:47:07.212  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 370    19:47:27.213  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 371    19:47:27.213  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 372    19:47:27.213  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 373    19:47:37.213  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 374    19:47:47.213  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 375    19:47:47.213  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 376    19:47:47.213  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 377    19:48:07.213  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 378    19:48:07.213  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 379    19:48:07.213  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 380    19:48:27.213  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 381    19:48:27.213  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 382    19:48:37.213  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 383    19:48:47.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 384    19:48:47.214  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 385    19:48:47.214  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 386    19:48:53.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 387    19:48:53.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663094
 
 388    19:48:58.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 389    19:48:58.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663095
 
 390    19:49:03.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 391    19:49:03.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663096
 
 392    19:49:07.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 393    19:49:07.214  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 394    19:49:07.214  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 395    19:49:08.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 396    19:49:08.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663097
 
 397    19:49:13.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 398    19:49:13.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663098
 
 399    19:49:17.214  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 400    19:49:18.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 401    19:49:18.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663099
 
 402    19:49:23.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 403    19:49:23.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663100
 
 404    19:49:27.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 405    19:49:27.214  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 406    19:49:27.214  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 407    19:49:28.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 408    19:49:28.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663101
 
 409    19:49:33.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 410    19:49:33.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663102
 
 411    19:49:37.214  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 412    19:49:38.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 413    19:49:38.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663103
 
 414    19:49:43.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 415    19:49:43.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663104
 
 416    19:49:47.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 417    19:49:47.214  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 418    19:49:47.214  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 419    19:49:48.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 420    19:49:48.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663105
 
 421    19:49:53.214  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 422    19:49:53.214  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663106
 
 423    19:49:57.214  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 424    19:49:58.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 425    19:49:58.215  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663107
 
 426    19:50:03.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 427    19:50:03.215  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663108
 
 428    19:50:07.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 181.xxx.xxx.xxx
 
 429    19:50:07.215  11/06/07  Sev=Info/6 IKE/0x63000053
 Sent a keepalive on the IKE SA
 
 430    19:50:07.215  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 431    19:50:08.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 432    19:50:08.215  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663109
 
 433    19:50:13.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 434    19:50:13.215  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663110
 
 435    19:50:17.215  11/06/07  Sev=Info/6 IKE/0x63000055
 Sent a keepalive on the IPSec SA
 
 436    19:50:18.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:smileyvery-happy:PD_REQUEST) to 181.xxx.xxx.xxx
 
 437    19:50:18.215  11/06/07  Sev=Info/6 IKE/0x6300003D
 Sending DPD request to 181.xxx.xxx.xxx, our seq# = 1752663111
 
 438    19:50:23.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 181.xxx.xxx.xxx
 
 439    19:50:23.215  11/06/07  Sev=Info/5 IKE/0x63000018
 Deleting IPsec SA: (OUTBOUND SPI = 5E24CFF4 INBOUND SPI = 203C0D2F)
 
 440    19:50:23.215  11/06/07  Sev=Info/4 IKE/0x63000049
 Discarding IPsec SA negotiation, MsgID=14B876F2
 
 441    19:50:23.215  11/06/07  Sev=Info/4 IKE/0x63000017
 Marking IKE SA for deletion  (I_Cookie=C5169593C885F82F R_Cookie=255D78367DEE9D8D) reason = DEL_REASON_PEER_NOT_RESPONDING
 
 442    19:50:23.215  11/06/07  Sev=Info/4 IKE/0x63000013
 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 181.xxx.xxx.xxx
 
 443    19:50:23.715  11/06/07  Sev=Info/4 IKE/0x6300004B
 Discarding IKE SA negotiation (I_Cookie=C5169593C885F82F R_Cookie=255D78367DEE9D8D) reason = DEL_REASON_PEER_NOT_RESPONDING
 
 444    19:50:23.715  11/06/07  Sev=Info/4 CM/0x63100013
 Phase 1 SA deleted cause by DEL_REASON_PEER_NOT_RESPONDING.  0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system
 
 445    19:50:23.715  11/06/07  Sev=Info/5 CM/0x63100025
 Initializing CVPNDrv
 
 446    19:50:23.715  11/06/07  Sev=Info/6 CM/0x63100031
 Tunnel to headend device vpn.acme.com disconnected: duration: 0 days 0:33:11
 
 447    19:50:23.715  11/06/07  Sev=Info/6 CM/0x63100046
 Set tunnel established flag in registry to 0.
 
 448    19:50:23.715  11/06/07  Sev=Info/4 IKE/0x63000001
 IKE received signal to terminate VPN connection