Skip to main content
danik
danik
New Member
August 29, 2018
Question

VPN constantly disconnecting

  • August 29, 2018
  • 4 replies
  • 61452 views

Hi,

since moving to cable broadband from ADSL2 in early June I get constant VPN disconnections. Sometimes it's 59min, sometimes it's 24min, sometimes it's almost 3 hours - completely random. I've saved logs to my desktop but can't attach b/c they're not txt files, but here's part of what one says:

 

[style="background-color: #99cc00;"]6/18/2018 2:46:22 PM Information VPN FortiSslvpn: 1120: Ras: connection to fortissl terminated[/style] [style="background-color: #99cc00;"]6/18/2018 2:46:22 PM Error VPN FortiSslvpn: 476: Error find interface for local_gwy 0204a8c0[/style] [style="background-color: #99cc00;"]6/18/2018 2:46:22 PM Error VPN (repeated 1 times in last 1 sec) FortiSslvpn: 476: Error find interface for local_gwy 0204a8c0[/style] [style="background-color: #99cc00;"]6/18/2018 2:46:25 PM Notice VPN date=2018-06-18 time=14:46:24 logver=1 type=traffic level=notice sessionid=24552284 hostname=******* pcdomain= uid=********EC946DC93729034B7AF9461 devid=FCT8002799729409 fgtserial=N/A emsserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=192.168.4.2 srcport=N/A direction=outbound dstip=49.255.132.38 remotename=N/A dstport=10443 user=danik proto=6 rcvdbyte=77309411328 sentbyte=38654706507 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.6.6.1167 os="Microsoft Windows 7 Professional Edition, 32-bit Service Pack 1 (build 7601)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A[/style] [style="background-color: #99cc00;"]6/18/2018 2:49:23 PM Information VPN FortiSslvpn: 7440: fortissl_connect: device=ftvnic[/style] [style="background-color: #99cc00;"]6/18/2018 2:49:23 PM Information VPN FortiSslvpn: 6752: PreferDtlsTunnel=0[/style] [style="background-color: #99cc00;"]6/18/2018 2:49:27 PM Notice VPN date=2018-06-18 time=14:49:26 logver=1 type=traffic level=notice sessionid=24552284 hostname=********* pcdomain= uid=**********EC946DC93729034B7AF9461 devid=FCT8002799729409 fgtserial=N/A emsserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=192.168.4.2 srcport=N/A direction=outbound dstip=49.255.132.38 remotename=N/A dstport=10443 user=danik proto=6 rcvdbyte=81604379860 sentbyte=42949690122 utmaction=passthrough utmevent=vpn threat=connect vd=N/A fctver=5.6.6.1167 os="Microsoft Windows 7 Professional Edition, 32-bit Service Pack 1 (build 7601)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A[/style] [style="background-color: #99cc00;"]6/18/2018 3:37:47 PM Information VPN FortiSslvpn: 1324: Ras: connection to fortissl terminated[/style] [style="background-color: #99cc00;"]6/18/2018 3:37:47 PM Notice VPN date=2018-06-18 time=15:37:46 logver=1 type=traffic level=notice sessionid=24552284 hostname=****** pcdomain= uid=********EC946DC93729034B7AF9461 devid=FCT8002799729409 fgtserial=N/A emsserial=N/A regip=N/A srcname=sslvpn srcproduct=N/A srcip=192.168.4.2 srcport=N/A direction=outbound dstip=49.255.132.38 remotename=N/A dstport=10443 user=danik proto=6 rcvdbyte=85899345920 sentbyte=47244640256 utmaction=passthrough utmevent=vpn threat=disconnect vd=N/A fctver=5.6.6.1167 os="Microsoft Windows 7 Professional Edition, 32-bit Service Pack 1 (build 7601)" usingpolicy="" service= url=N/A userinitiated=0 browsetime=N/A[/style]

 

I have contacted my ISP, Telstra, who told me they didn't know what's causing the issue and therefore were unable (or unwilling) to help me fix it. My employer's IT department have contacted the outsourced firewall company, who were also unable to help, so I was told to "get a dongle" for the PC, as a "solution" to the issue.

Setup: Telstra (HFC connection) Technicolor DJA0230 modem, with a Netgear Telstra (HFC) cable adaptor. My Win7 PC has no wireless adaptor, so it utilises 16+ year old in-wall ethernet cabling (at the other end of the house to the modem), plus a Netgear D6300 modem (as a router) plus a Netgear Nighthawk X6 (also as a router - both these Netgear utilised from the prior ADSL setup).

 

Please bear in mind I'm only an end-user and have a very very limited knowledge of anything IT-related...

Thanks in advance. 

Dee.

    4 replies

    SteveG
    SteveG
    New Member
    August 29, 2018

    I find the FC VPN rock solid. First thing I'd check is if your external IP is changing as that would break the VPN, you get see your external IP by visiting a site like www.whatismyip.com

     

    Other thing I'd try is running a continuous ping and see if that times out when your VPN drops. Start a command prompt and type "ping -t 8.8.8.8". That will send a continuous ping to one of the Google DNS servers. To stop the ping just kill the command prompt.

    danik
    danikAuthor
    New Member
    October 5, 2018

    SteveG wrote:

    I find the FC VPN rock solid. First thing I'd check is if your external IP is changing as that would break the VPN, you get see your external IP by visiting a site like www.whatismyip.com

     

    Other thing I'd try is running a continuous ping and see if that times out when your VPN drops. Start a command prompt and type "ping -t 8.8.8.8". That will send a continuous ping to one of the Google DNS servers. To stop the ping just kill the command prompt.

    Hi there @SteveG  :)

     

    Thanks for your response (I know it was a while ago!)

    On my old ADSL I never had any issues with Forticlient so I don't believe that's the cause of the constant disconnections, but as stated my ISP say they don't know what the problem is and therefore can't help me.

    So I checked the whatismyip.com and it seems to have two different ones.

    While VPN is connected:

    Your Public IPv4 is: 49.255.132.38Your IPv6 is: Not Detected [/ul][/ul][ul]Your Local IP is: 192.168.4.1Location: Sydney Australia When the VPN disconnects:[/ul] Your Public IPv4 is: 144.132.22.219Your IPv6 is: Not Detected [/ul][/ul][ul]Your Local IP is: 192.168.0.11[/ul] Location: Melbourne, VIC AU[/ul]

     

    Running the continuous PING looked all okay until the Forticlient dropped out, then it gives this message: 

    "Request timed out.

    Request timed out.

    Request timed out.

    Request timed out.

    General failure."

    When the Forticlient reconnects (I have to retype the password) it gives the message:

    "PING transmit failed. General failure" (five times)

    before normal ping resumes.

     

    Problem is, as stated in my OP I don't know what any of that means (other than the connection being interrupted) or what if anything can be done about it. (I did upgrade my Router two weeks ago, but of course that didn't change anything.)

    As an end user I certainly don't have any means or authority to switch to IPSec.

     

    Thanks in advance for any further assistance. 

    Danielle

    SteveG
    SteveG
    New Member
    October 5, 2018

    You might well find your local router is interfering with IPSec, here in the UK we often have to enable the 'IPSec passthrough' or 'VPN Support' on the domestic routers.

     

    The fact you're getting two different public IP's is expected depending whether you're VPN'd in or not. 

     

    Are you able to test the VPN on your laptop from someone else's house as my hunch is with your home router note handling IPSec correctly. 

    JTOLvF2
    JTOLvF2
    New Member
    September 19, 2018

    I had this exact same issue with SSLVPN for my company. Constant disconnections every 2-10 minutes at random for all users. The only fix I could come up with was to switch everyone over to IPSec. Holds solid and never drops.

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!