VPN died when switching ISP

Question

Level 1

0 points

VPN died when switching ISP

Had the VPN up and running for a couple months with no issues. Switched ISP's and the VPN stopped working.

The only change in the networking was going from a modem/router combo to a separate modem and router. The new router is a Linksys E2000. I have all the proper ports opened. I am confident that DNS is properly configured.

Nothing happens in the VPN logs when I try to connect, but I do get this in the system log:

Jul 8 12:00:56 miniserver racoon[6052]: Connecting.
Jul 8 12:00:56 miniserver racoon[6052]: IKE Packet: receive success. (Responder, Main-Mode message 1).
Jul 8 12:00:56 miniserver racoon[6052]: IKE Packet: transmit success. (Responder, Main-Mode message 2).
Jul 8 12:00:56 miniserver racoon[6052]: IKE Packet: receive success. (Responder, Main-Mode message 3).
Jul 8 12:00:56 miniserver racoon[6052]: IKE Packet: transmit success. (Responder, Main-Mode message 4).
Jul 8 12:00:56 miniserver racoon[6052]: IKE Packet: receive failed. (Responder, Main-Mode Message 5).
Jul 8 12:00:59 miniserver racoon[6052]: IKE Packet: transmit success. (Phase1 Retransmit).
Jul 8 12:01:06: --- last message repeated 2 times ---
Jul 8 12:01:06 miniserver racoon[6052]: IKE Packet: receive failed. (Responder, Main-Mode Message 5).
Jul 8 12:01:08 miniserver racoon[6052]: IKE Packet: transmit success. (Phase1 Retransmit).
Jul 8 12:01:16: --- last message repeated 2 times ---
Jul 8 12:01:16 miniserver racoon[6052]: IKE Packet: receive failed. (Responder, Main-Mode Message 5).
Jul 8 12:01:17 miniserver racoon[6052]: IKE Packet: transmit success. (Phase1 Retransmit).
Jul 8 12:01:26: --- last message repeated 2 times ---
Jul 8 12:01:26 miniserver racoon[6052]: IKE Packet: receive failed. (Responder, Main-Mode Message 5).
Jul 8 12:01:26 miniserver racoon[6052]: IKEv1 Phase1: maximum retransmits. (Phase1 Maximum Retransmits).
Jul 8 12:01:26 miniserver racoon[6052]: Disconnecting. (Connection tried to negotiate for, 30.007739 seconds).
Jul 8 12:01:26 miniserver racoon[6052]: IKE Packets Receive Failure-Rate Statistic. (Failure-Rate = 100.000).

Any help would be appreciated.

Mini Server, Mac OS X (10.6.3)

Posted on Jul 8, 2010 11:06 AM

Reply

Answer 1

Jul 8, 2010 1:41 PM in response to CorpStaging

Hi

When changing ISPs one thing that is almost certain to change is the external IP address. Assuming your previous ISP had assigned you a fixed one from their block is it safe to assume your new ISP has done the same?

If this is true for your situation then unless you've changed the client settings to accommodate that change this may account for the problem you're seeing?

On a separate note DNS does not really have that much to do with VPN.

Tony

Reply

Answer 2

CorpStaging Author

Level 1

0 points

Jul 8, 2010 2:28 PM in response to Antonio Rocco

Thank you for the reply.

We are getting a static IP from the new ISP. And I have changed the A record for our domain to the current IP address. But even when I enter the IP manually I get nowhere. The client is reaching the server as the log shows, but there seems to be some miscommunication somewhere with the client. It is showing that it has received and transmitted some packets, but receiving fails on Main-Mode Message 5.

All other services seem to function fine (ie. wiki, calendar, and FTP)

I figured that DNS doesn't really do much with VPN, but in almost every thread I look at it is brought up (including VPN threads).

Reply

Answer 3

Aug 11, 2010 7:04 AM in response to CorpStaging

Curious if you ever found the problem? I switched ISP's and am having the same problem where all other services working correctly but VPN.

Reply