Dropping Site to Site VPN - Unifi & Sonicwall

[abillybob]

Hello All,

Having a major problem here that I can't seem to work out. We're a care home provider and all of our care homes connect back to our Head Office through means of a Site to Site VPN. It's a manual IPSec VPN and we're currently using the UXG-Pro's to do this. We have it setup the exact same way in other care homes and it's running fine.

At the other end it's a Sonicwall box but as I say this is running fine across all our other homes with the same setup.

A restart of the UXG-Pro seems to fix the VPN and it comes back online again. I have also tested and found there's nothing wrong with the client computers, network or internet. Seems I can ping the internet and even our Head Office public IP address but the VPN has just randomly dropped and won't come back online again until we restart the UXG-Pro.

Any ideas?

[Norphy]

Not seen you in a while!

 

Are they all using the same ISP? Could it be something on the ISP's end which is killing the VPN traffic?

[FN-GM]

Hello and welcome back!

 

Is the internet connection stable? It could be the cause of it dropping but the VPN should automatically reconnect itself once the internet is restored.

[abillybob]

Not seen you in a while!

Are they all using the same ISP? Could it be something on the ISP's end which is killing the VPN traffic?

 

Yeah, they're all using the same ISP although we just have standard BT FTTC in most of the homes and it was working previously when we had our Sonicwall to Sonicwall setup.

 

Hello and welcome back!

Is the internet connection stable? It could be the cause of it dropping but the VPN should automatically reconnect itself once the internet is restored.

Thank you

 

I think so, difficult to catch though with it being on a different site. I've had the ISP monitor it but all they've seen is the connection drop when I've had to restart the router. I was thinking about just running a constant ping from one of the computers on site and seeing if it drops around the same time the VPN goes off.

 

If anything else pops in to mind though please let me know!

 

Thanks both

[Norphy]

Do you have any other monitoring in place? What is the CPU/RAM usage like on the unifi device? How much traffic is it passing? Is there an errant device at the care home producing excessive traffic, or something that has been compromised?

 

Is the Unifi widget connected directly to the internet or is it going through a BT router first?

[abillybob]

Thanks for all your insights with this. Found out the problem from the Ubiquiti forums but thought I'd post here as it seems like a common occurance.

 

Basically IKEv1 is perfectly fine on UXG-Pro's. IKEv2 and v1 is ok on USG-Pro's. Seems it's just the newer UXG's that's having problems. Hopefully will be fixed in time with a Firmware update.