winXP pro and vpn 3.5xx client disconnecting sporadically

[jon.nunley]

I am using a pix 515 for an IPSEC and Radius VPN. The connections work fine on other platforms (2000, 98) etc, but with XP pro they time out with no good reason on a random basis (usually once per session). I am connecting to a Netware 6 network over the connection using the newest novell client. The logs show suspicious activity on the client side when disconnects happen but nothing on the PIX side.

Here is the log from the client side;

Marking IKE SA for deletion (COOKIES = 772D79C56B06DB88 1EC720D7E8E2B070) reason = DEL_REASON_DONT_NOTIFY_CM

127 22:36:44.350 10/22/02 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 65.121.29.226

128 22:36:44.350 10/22/02 Sev=Info/4 CM/0x63100013

Phase 1 SA deleted cause by DEL_REASON_PEER_NOT_RESPONDING. 0 Phase 1 SA currently in the system

I am assuming the last part is the reason for the disconnect but I am not sure why it is showing 'not responding' all the time outs on the PIX side are set high and this happens in the middle of VPN activity across the tunnel?

Are there any know problems with XP and the VPN client? I have turned off Firewalling and ICS on the XP machines and set the MTU to 1400 and tried 1300 as well. This is very frustrating as we are trying to roll out a VPN solution for telecommuters. BTW this is happening over highspeed broadband connections.

thanks,

jon

[murabi]

You have not specified the version of the VPN client you are using,based on the following URL (which you might want to take a look for better understanding) which states

http://www.cisco.com/en/US/products/sw/secursw/ps2308/prod_release_note09186a00800da474.html#xtocid14

Windows XP Requires VPN Client Release 3.1 or Higher

If you are running Windows XP on your PC, you must upgrade your VPN Client to Release 3.1 or higher. VPN Client Release 3.0 does not support Windows XP.

If you are running the VPN Client on a PC and you want to upgrade your operating system to Windows XP, you must first uninstall the VPN Client, then install Windows XP, then install the VPN Client.