search for: state_quick_i1

...seconds), neither of which made any difference. I can't see any very obvious errors in the logs, however the most recent drop out produced the following message around the same time: Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #39: max number of retransmissions (2) reached STATE_QUICK_I1 Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #39: starting keying attempt 2 of an unlimited number Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #95: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW+SAREFTRACK to replace #39 {using isakmp#52 msgid:1194...

IF you are not stuck to IPSec, you might want to take a look at OpenVPN (www.openvpn.org). I found OpenVPN easier to install than FreeSWAN (an IPSEC VPN) and have setup an OpenVPN solution between my German office and our mainoffice in a matter of hours. Thom van der Boon E-Mail: Thom.van.der.Boon at vdb.nl ===== Thom.H. van der Boon b.v. Havens 563 Jan Evertsenweg 2-4 NL-3115 JA Schiedam

...ade any difference. > > I can't see any very obvious errors in the logs, however the most recent > drop out produced the following message around the same time: > > Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #39: max number of > retransmissions (2) reached STATE_QUICK_I1 > Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #39: starting keying > attempt 2 of an unlimited number > Feb 10 00:53:09 site-b-vpn pluto[30584]: "site-a/5x5" #95: initiating Quick > Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW+SAREFTRACK to replace #39 {using...