spysz
Hi,
I know that is not forum about Vyatta, but the problem concer openvpn.
I have vyatta which is running on XenServer 6.2. It is working fine so far, but I have a very common problem with OpenVPN. Problem which was described here a lot of times. I set 5 VPN (site-to-site) for different location. VPN works stable, I did not see any message in log which indicate that is not true, eg. drop connection, etc.
But If I have a lot of traffic between two location I get a lot of:
>> Authenticate/Decrypt packet error: bad packet ID (may be a replay): [ #2622 ]
What I red on a few forums this problem cause by:
#1 out of sync time on the routers - in my case is not true, every router use ntp and have the same time, even the same timezone
#2 something "mangle" the packet UDP on route. If is true I should encounter some problem with network. But so far I did not notice any problem.
#3 Some people suggest --mute-replay-warnings and forget (maybe is good idea but after when I figure out what happened) ;-)
Even when the message shows up the connection is stable (I think). So what can cause this problem?
Vyatta version:
Version: VC6.6R1
System type: Intel 64bit
Boot via: disk
Hypervisor: Xen hvm
--replay-window should fix this, but how to properly assess value? Trial and error method?
Thanks! Best Regards,
Simon
