Comments
-
Funfact: We have the same issue on the TZ370 (Gen7) with our two internet-uplinks. We have X1 with an external router and X2:V7 as PPPoE-Connection which is stable so far. X1 is always dropping about an hourly base, sometimes every 30 minutes and this leads to a breakdown of an IPSec-VPN over X2:V7. We have no…
-
We have a solution - by using an one-legged LANCOM Router. 😐️ Upcoming SonicOS 7.1 should be able to do some more algorithms but we can't wait so long. @BWC Thank you for your help!!!
-
The problem must be in this area. The group 5 is not recommended and the BSI recommends strictly the use of 3072 instead of 2048. I don't know how much influence the DTAG has on Enreach. Stay tuned till tomorrow.
-
We have changed to IKEv1 and it`s the same problem. I have to figure out, which RFCs are implemented so that i can understand the settings. https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR02102/BSI-TR-02102-3.pdf