mirror of
https://github.com/hwdsl2/docker-ipsec-vpn-server.git
synced 2026-04-26 01:55:53 +03:00
[GH-ISSUE #175] IPSEC-XAUTH disconnects after 10 hours #160
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @majdya on GitHub (Feb 26, 2020).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/175
Hi,
I am using the always on VPN feature of android,
I'm facing a disconnect after 10 hours, phone sends data, vpn connected on phone, but cant see traffic.
First thought that its DNS related, tried few did not help(google, Cloudflare and FreeDNS),
apparently its not,so I thought its related to renew the connection/keys - which wired why it stops after 10 hours,
tried to find the config to adjust it, also didn't manage to find it,
any idea on what going on ?
@majdya commented on GitHub (Feb 26, 2020):
I just found the rekey in conn shared - which were set by default to no, changed it to yes, will update you after 11 hours if this solves the problem for me.
I just found it after posting the issue !!
@hwdsl2 commented on GitHub (Apr 12, 2020):
@majdya Glad that you resolved the issue. For the
rekeyoption in/etc/ipsec.conf, if set tono, it just means that the VPN server does not request the renegotiation, but "it does not prevent responding to renegotiation requested from the other end" (see [1]).If not working, try the latest version of the Docker image. Libreswan 3.31 fixed some rekey bugs [2].
[1] https://libreswan.org/man/ipsec.conf.5.html
[2] https://github.com/libreswan/libreswan/issues/293