<html dir="ltr"><head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style title="owaParaStyle"><!--P {
MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px
}
--></style>
</head>
<body ocsi="x">
<div dir="ltr"><font color="#000000" size="2" face="Tahoma">Hi, I am replacing our old fedoracore 5 with fortigate 80c devices. So far I have 1 fortigate device with 5 tunnels up (13 total).</font></div>
<div dir="ltr"><font size="2" face="tahoma">We are using transport mode. </font></div>
<div dir="ltr"><font size="2" face="tahoma">From the logs I noticed a lot of ' max number of retransmissions (2) reached STATE_QUICK_I1' . The tunnels work fine, and come up quick, but one thing that I did notice was that after about 20 days pluto/ipsec freezes/stops
working?</font></div>
<p><font size="2" face="tahoma"><font face="tahoma"></font></font> </p>
<p><font size="2" face="tahoma"><font face="tahoma">Any suggestions appreciated.</font></font></p>
<p><font size="2" face="tahoma"><font face="tahoma"></font></font> </p>
<p><font size="2" face="tahoma"><font face="tahoma">jason</font></p>
<div dir="ltr"><br>
</div>
</font>
<div dir="ltr"><font color="#000000" size="2" face="Tahoma"></font> </div>
<div dir="ltr"><font size="2" face="tahoma"></font> </div>
<div dir="ltr">2.6.20-1.2320.fc5 - openswan-2.4.4-1.1.2.1<br>
</div>
<div dir="ltr"><font color="#000000" size="2" face="Tahoma"></font> </div>
<div dir="ltr"><font color="#000000" size="2" face="Tahoma">initiating Quick Mode PSK+ENCRYPT+PFS to replace #171141 {using isakmp#170817}<br>
Jul 20 09:24:38 GW13 pluto[7962]: "ipsec1013" #171142: max number of retransmissions (2) reached STATE_QUICK_I1<br>
Jul 20 09:24:38 GW13 pluto[7962]: "ipsec1013" #171142: starting keying attempt 340 of an unlimited number<br>
Jul 20 09:24:38 GW13 pluto[7962]: "ipsec1013" #171152: initiating Quick Mode PSK+ENCRYPT+PFS to replace #171142 {using isakmp#170817}<br>
Jul 20 09:24:42 GW13 pluto[7962]: "ipsec1013" #171143: max number of retransmissions (2) reached STATE_QUICK_I1<br>
Jul 20 09:24:42 GW13 pluto[7962]: "ipsec1013" #171143: starting keying attempt 188 of an unlimited number<br>
Jul 20 09:24:42 GW13 pluto[7962]: "ipsec1013" #171153: initiating Quick Mode PSK+ENCRYPT+PFS to replace #171143 {using isakmp#170817}<br>
Jul 20 09:24:45 GW13 pluto[7962]: "ipsec1013" #171144: max number of retransmissions (2) reached STATE_QUICK_I1<br>
</div>
</font>
</body>
</html>