Problem with SSH and IPSec VPN

JuniperForum.com

July 29, 2010, 07:55:29 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News: If you have an interesting idea for an article or knowledgebase entry, please submit it!

Home

Help

Latest Knowledgebase Articles

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

JuniperForum.com > Security > NetScreen and SSG VPN > Topic: Problem with SSH and IPSec VPN

Pages: [1]

« previous next »

Author

Topic: Problem with SSH and IPSec VPN (Read 399 times)

ivherc

Newbie

Posts: 5

Problem with SSH and IPSec VPN

« on: February 10, 2010, 10:34:17 AM »

Hi everybody, i need help,

I have a VPN tunnel, in one side i have SSH server (Lx, Debian) in the other side a SSH client, the client can reach the server and sometimes appears the login screen and nothing more, that is, the comunication is inconsistent, in the Firewall log can see "SSH Close - AGE OUT ", the ping is sucessfull.

The tunnel works well, I already change the encription mode, and the problem still happen, any suggestion to change in the firewall NS-5200 ?


	Logged

marty

Sr. Member

Posts: 269

Re: Problem with SSH and IPSec VPN

« Reply #1 on: February 19, 2010, 10:52:22 AM »

Hope the MSS values are not causing the problem try tweaking the MSS values.

set flow tcp-mss 1350

1350 is default if you still face issues you can try reducing the values little bit further from default.