Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[zael91]

Hi guys,

As the title says, i'm having issues with my vpn disconnecting every 30-40 mins. I'm pretty sure its not a problem with my ISP or my network as i'm able to surf/game online without disconnecting. I am wondering if there is a setting that i must enable/disable within the router.

Thank you

[PacketTracer]

Hi,

there are only two settings influencing VPN connection behaviour: See "ADVANCED | FIREWALL SETTINGS" where you can switch on or off ALG support for PPTP or IPsec-VPN. For example, if you use IPsec-VPN and both your VPN client and VPN gateway support NAT traversal, you should switch off ALG for IPsec-VPN, as described at page 88 of the manual.

PT

[FurryNutz]

Link>Welcome!

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

Hi guys,

As the title says, i'm having issues with my vpn disconnecting every 30-40 mins. I'm pretty sure its not a problem with my ISP or my network as i'm able to surf/game online without disconnecting. I am wondering if there is a setting that i must enable/disable within the router.

Thank you

[zael91]

Link>Welcome!

• What Hardware version is your router? Look at sticker under the router case.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

Hardware version: A1
Firmware version: 1.00SHC
Region: Asia

ISP Service: Fibre optic broadband
ISP Modem: Huawei Echolife HG863

[zael91]

Hi,

there are only two settings influencing VPN connection behaviour: See "ADVANCED | FIREWALL SETTINGS" where you can switch on or off ALG support for PPTP or IPsec-VPN. For example, if you use IPsec-VPN and both your VPN client and VPN gateway support NAT traversal, you should switch off ALG for IPsec-VPN, as described at page 88 of the manual.

PT

I have tried messing around with the ALG settings but the VPN keeps disconnecting. I got it so i could have access to netflix. Not really experienced using a VPN so maybe there's something that is incompatible with the network settings?

[FurryNutz]

• If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT and How NAT Works. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Also check the routers DHCP IP address maybe conflicting with the ISP modems IP address of 192.168.0.1. Check to see if this is the same on the ISP modem, and if modem can't be bridged, change the DIR router to 192.168.1.1 or .0.254.
  Example of a D-Link router configured for PPPoE with ISP Modem bridged: PPPoE Configuration on Router

[PacketTracer]

What kind of VPN is it? PPTP-, L2TP-, IPsec- or SSL-VPN? What kind of VPN client do you use? Who operates the other end of the VPN connection (the VPN gateway): Is it driven by your company for corporate network acccess or by a VPN provider for protected internet access (e.g. for the purpose of anonymity)? Are there any logfiles written by your VPN client that could provide some more insight into the reasons why the VPN connection terminated? For example, a possible reason for (unwanted) IPsec-VPN connection termination might be that the underlying ESP/UDP/IP-NAT session times out during longer time intervals without data transmission (e.g. after completion of the streaming process of a longer video) if the period between keepalive packets is longer than the timeout value for a UDP/IP NAT session in your DIR-868L.

PT

[FurryNutz]

Also if this router is from an ISP, it maybe loaded with the ISPs own FW and not D-Links. You'll need to refer to your ISP for help, support and information regarding this, as loading any other FW on it may void ISP warranty and violate ISP policy regarding there HW. If this is a retail unit with D-Link FW loaded, then FW from D-Links official web sites are supported.

[zael91]

• If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT and How NAT Works. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Also check the routers DHCP IP address maybe conflicting with the ISP modems IP address of 192.168.0.1. Check to see if this is the same on the ISP modem, and if modem can't be bridged, change the DIR router to 192.168.1.1 or .0.254.
  Example of a D-Link router configured for PPPoE with ISP Modem bridged: PPPoE Configuration on Router

The modem does not have a built in router. By DMZ option, do you mean changing it through the router's settings?

Also if this router is from an ISP, it maybe loaded with the ISPs own FW and not D-Links. You'll need to refer to your ISP for help, support and information regarding this, as loading any other FW on it may void ISP warranty and violate ISP policy regarding there HW. If this is a retail unit with D-Link FW loaded, then FW from D-Links official web sites are supported.

I will check with my ISP to see if the firmware for the router is compatible with the retail unit's version.

What kind of VPN is it? PPTP-, L2TP-, IPsec- or SSL-VPN? What kind of VPN client do you use? Who operates the other end of the VPN connection (the VPN gateway): Is it driven by your company for corporate network acccess or by a VPN provider for protected internet access (e.g. for the purpose of anonymity)? Are there any logfiles written by your VPN client that could provide some more insight into the reasons why the VPN connection terminated? For example, a possible reason for (unwanted) IPsec-VPN connection termination might be that the underlying ESP/UDP/IP-NAT session times out during longer time intervals without data transmission (e.g. after completion of the streaming process of a longer video) if the period between keepalive packets is longer than the timeout value for a UDP/IP NAT session in your DIR-868L.

PT

Honestly, I have no clue if its PPTP, L2TP, IPsec or SSL. The VPN provider that i use is VPN Unlimited. (please delete if link is not allowed). Is there a way to change the value of the keepalive period? I'm trying to find logfiles for the VPN client but I cant seem to find it.

[FurryNutz]

Please post a picture of the routers log in page please:
 Adding Screenshots In A Post

• If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT and How NAT Works. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Also check the routers DHCP IP address maybe conflicting with the ISP modems IP address of 192.168.0.1. Check to see if this is the same on the ISP modem, and if modem can't be bridged, change the DIR router to 192.168.1.1 or .0.254.
  Example of a D-Link router configured for PPPoE with ISP Modem bridged: PPPoE Configuration on Router

The modem does not have a built in router. By DMZ option, do you mean changing it through the router's settings? No, thru the ISP Modems menu if it had a built in router. If the ISP modem does not have any router features, then DMZ isn't valid here.

Also if this router is from an ISP, it maybe loaded with the ISPs own FW and not D-Links. You'll need to refer to your ISP for help, support and information regarding this, as loading any other FW on it may void ISP warranty and violate ISP policy regarding there HW. If this is a retail unit with D-Link FW loaded, then FW from D-Links official web sites are supported.

I will check with my ISP to see if the firmware for the router is compatible with the retail unit's version.

What kind of VPN is it? PPTP-, L2TP-, IPsec- or SSL-VPN? What kind of VPN client do you use? Who operates the other end of the VPN connection (the VPN gateway): Is it driven by your company for corporate network acccess or by a VPN provider for protected internet access (e.g. for the purpose of anonymity)? Are there any logfiles written by your VPN client that could provide some more insight into the reasons why the VPN connection terminated? For example, a possible reason for (unwanted) IPsec-VPN connection termination might be that the underlying ESP/UDP/IP-NAT session times out during longer time intervals without data transmission (e.g. after completion of the streaming process of a longer video) if the period between keepalive packets is longer than the timeout value for a UDP/IP NAT session in your DIR-868L.

PT

Honestly, I have no clue if its PPTP, L2TP, IPsec or SSL. The VPN provider that i use is VPN Unlimited. (please delete if link is not allowed). Is there a way to change the value of the keepalive period? I'm trying to find logfiles for the VPN client but I cant seem to find it.

[PacketTracer]

Honestly, I have no clue if its PPTP, L2TP, IPsec or SSL. The VPN provider that i use is VPN Unlimited. (please delete if link is not allowed). Is there a way to change the value of the keepalive period? I'm trying to find logfiles for the VPN client but I cant seem to find it.

As can be seen from VPN Unlimited's "Technical questions" section FAQ (e.g. this one or that one) they use SSL-VPN based on OpenVPN.

According to the description of the openvpn tunnel daemon that you have installed and use as part of the VPN client software, it should do logging to some logfile. Maybe VPN Unlimited's version also logs errors to the Windows event log, hence you should also look there if VPN termination error messages can be found, that give us the reason why. The openvpn daemon description also encompasses parameters for keepalives, see the descriptions for '--ping n', '--ping-exit n', '--ping-restart n' and '--keepalive n m'. If you can identify a configuration file used by your VPN client (something with a contents like this), you could add a line like 'ping 10' to cause your VPN client to send a keepalive every 10 seconds after no other data was transferred, in order to keep the SSL/UDP/IP-NAT session open inside DIR-868L's UDP NAT session table.

Best choice probably is to ask VPN Unlimited's help desk for advanced support for your problem.

By the way: Maybe this hint from VPN Unlimited's FAQ is helpful either: Test if the situation improves after switching off SPI inside DIR-868L (ADVANCED | FIREWALL SETTINGS: Uncheck "Enable SPI"). Of course disabling SPI reduces the degree of firewall protection ...

PT

[FurryNutz]

Any status on this? 

Hi guys,

As the title says, i'm having issues with my vpn disconnecting every 30-40 mins. I'm pretty sure its not a problem with my ISP or my network as i'm able to surf/game online without disconnecting. I am wondering if there is a setting that i must enable/disable within the router.

Thank you