VPN encryption to china not working!!

[ittechk4u1]

Hello experts,

We are having problem from 2-3 months that our VPN GRE/IP tunnels getting disconnceted due to encryption from Europe to china!!!

Once we remove encryption it works.....

Is anyone else is also facing the same issue or is there any workaround ?

Thanks in advance.

[Joseph W. Doherty]

Possibly something being blocked by the Chinese government?

[Mark Malone]

Yes i have sites all over China you wont be using encryption is you want to operate there , we cant even do IWAN there due to it using DMVPN , its completely blocked

[Dean Romanelli]

I think different regions of China have different policies. I have two sites in China and I am successfully able to Static VPN them to the US and the UK using the following:

crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ikev1 policy 10
 authentication pre-share
 encryption aes-256
 hash sha
 group 5
 lifetime 86400

That being said, I do experience frequent packet loss bursts from time to time (~7% loss) when routing internationally. I've reported this to the Chinese ISP's and they have basically said, there is nothing we can do about international routing problems due to the Government, so we recommend soliciting services based in Hong Kong if you need reliable international routing. 

What kind of device are you using as your VPN concentrator on both ends?