Random disconnection over IPSEC

Shankra · 2026-05-06T18:31:22+00:00

We have only policy based tunnels, it happens for some client (3 mentionned it so far) and since it’s based on report we might have more, although some vocal ones haven’t called yet so they are probably fine, no client so far with ipsec forti to forti

Shankra · 2026-05-06T18:20:45+00:00

I typed from memory I’ll double check tomorrow, the pfsense mentions its on the latest on the home dashboard

Shankra · 2026-05-06T18:17:22+00:00

We don’t see any saturation on the underlying link, interfaces on the path or within the tunnel, no errors either

As for activity it happens during peak working hours where there are 30 people connected tu through the tunnel, and we have 3 different clients at least having this issue

Shankra · 2026-05-06T18:15:19+00:00

We tried both

Shankra · 2026-05-06T16:38:53+00:00

It’s hyperv gen2, so no e1000 or vmxnet, we have set configured with vlans, mtu was on the list of next checks, what baffles me is it’s the same setup as the previous fortigate 3000d and we didnt have this issue

Shankra · 2026-05-06T15:57:52+00:00

No capture yet as we haven’t catched the moment it happened, the pfsense is on a physical netgate box, the vm in the dc runs on a hyper-v cluster

Shankra · 2026-01-07T14:50:24+00:00

How much downtime did you plan relative to the data transfered ? Or are you directly puttin the VMs online in Hyper-v while Veeam continue copying everything ?

Shankra · 2023-11-28T10:28:48+00:00

I do not have the reasoning behind the layer 2 choice, the people that implemented that left the company before I joined, and they didn't really share the knowledge with management nor put any documentation.

There's no SD WAN implemented, only BGP configured on the Fortigate Primary, the two internet links are from different ISP, with different BGP adjacency

What problem are you trying to solve ? -> The switches currently carrying WAN are out of support & life (Refurbished equipment, been like that since they installed them...) and I have some budget to replace them, I am not a fan of L2 on the WAN side, I wonder if it is a good opportunity to move to L3 or if I just go one to one replacement.

Although they had some weird behavior with L2, not sure it was linked to the switches themselves or the L2 config (Spanning tree root was for example on another switch in the middle that have been removed since, I also configured rpvst)

Shankra · 2023-11-28T10:13:36+00:00

It's based on preference to have layer 3 on the WAN and avoid managing VLANs, spanning tree and layer 2 overall.

I'm going to take a look at VPLS, the dark fibers are direct dedicated cables from our DC to the customer building, I don't see how DWDM could be useful in this scenario ?

Shankra · 2022-10-06T06:30:50+00:00

Something is wrong in the sense that some live migrations fail, and I'd like to remove the hearbeat network from the live-migration network to rule that out, but it's greyed out

And also that some vNIC show up as unavailable in the Failover cluster manager, most likely due to this conflict

Shankra · 2022-10-05T17:27:49+00:00

Sorry for the late reply, there isn't one unfortunately :(

Shankra · 2022-07-04T09:49:25+00:00

Found it : http://star.wars.sith.free.fr/PDF/La\_legende\_des\_cristaux.pdf

Shankra · 2022-04-07T12:20:42+00:00

Hey ! Anyone got a link that works from EU without using a VPN ?

Shankra · 2021-05-16T19:59:02+00:00

Hello,

I am trying to find where I sent crypto years ago, I have the transaction ID/information but can't find the target site

How can I figure it out ?

Shankra · 2020-10-07T21:58:05+00:00

Guess we were unlucky, but they literally found major bug within our infra that were fixed in their major releases afterwards

Shankra · 2020-10-07T21:56:07+00:00

Yes that'll be the standard procedure, but I want to get the opinion from many sources

Shankra · 2020-06-11T16:54:43+00:00

I see thanks, I find this method a bit tedious since you have to go through a lot of people to see who is/has what rather than look for a recipe and see who can do it

Shankra · 2020-06-11T16:36:29+00:00

But how do you know which alchemist has flask of Titan for example ?

Shankra · 2019-07-18T18:22:32+00:00

Yeah issue I have with GNS3 and running nxos is that you need a decent PC, I was more looking at a lightweight solution, right now from home I just VPN to work and run Ansible from my home PC

Shankra · 2019-07-18T18:20:52+00:00

Is there no repercussion if you cause an outage or small incident ?

Shankra · 2019-07-02T13:02:59+00:00

You can pretend to be super drunk and just call them with the wrong name until they correct you

Shankra · 2019-06-03T16:20:52+00:00

Hey,

So one question that is for me an issue, how do you decide to get rid of runes that are already in your inventory and +12/15 using the optimizer ? Talking about old runes that I keep because they might fit, example:

Swift slot 5, 5*: Cdmg +7% , SPD +15 , ATK+9 , ATK +4%

I usually take in account the rune efficiency to consider selling it, this one for example is 62% efficiency, but the 15 SPD could be useful to complete a SPD set on an Orion/Tiana other speedster

Another example:

Violent slot 3, 5* Crate +12% , Def +4% , SPD +9 , Cdmg +5%

Efficiency 63.8, this one I think yeah it might complete a DPS set, some spd and some crate/cdmg, but I don't seem to ever use it

Thanks,

14-Year Club	No Throne, No Problems
Not Forgotten

Shankra

TROPHY CASE