My client needs one device (192.9.200.251) to be able to connect a device on their LAN to two devices on a remote LAN that reside in separate subnets as follows:

ID TNT01L
Remote Peer 77.86.120.106
Remote Net 192.168.253.10/32
Local Peer 213.249.223.66
Local Net 192.9.200.251/32

ID TNT01T
Remote Peer 77.86.120.106
Remote Net 192.168.252.200/32
Local Peer 213.249.223.66
Local Net 192.9.200.251/32

The two remote subnets have been added in the 'More' section of 'TC/IP settings' and the create Phase 2 box has been ticked.

The VPNs establish for a few seconds but drop and connect repeatedly despite the 'Always on' and 'Dial out' being selected. Eventually, one of them gives up trying and then the other remains up and usable. Rebooting the router kicks off the connect / drop cycle again.

The same result occurs if the VPNs are each given their own profile. The local router is a 2830n and is using the WAN2 connection to a managed fibre Internet connection. Four other IPsec VPNs work satisfactorily from the same router. Firmware is the latest revision. It is not known what the remote system is using but it's probably Cisco as it resides in a data centre (Daisy).

Any pointers would be appreciated.

Thanks

Clive

I have had problems with external Zyxel routers and VPN. The fix was to get the external support company to change settings on the Zyxel. The setting was to disable 'Dead Peer Detection'. After that the VPN never dropped.

Hope that helps

Rob

Just a thought: Is "Enable PING to keep IPsec tunnel alive" enabled? If it is enabled and the router doesn't receive replies from the IP's that being pinged then the VPN would drop after a few seconds, so you'd get behaviour similar to what you describe.

Check all your local LAN profiles are not conflicting with remote LANs.