UniFi - USG L2TP VPN could not be established because the remote server is not responding

*HostiFi*

Phone: [phone]

[intrasystemsltd]

Absolutely amazing. All other info I had found about editing registry keys did nothing. You're a true gem. You know your stuff and got right to it. You have a new subscriber! Thanks again!

[ryantollaksen]

Thank You for this video! We were almost at the point of replacing the equipment. This is now part of our quarterly maintenance.

[brandondh]

Thank you. This helped me alot. Showed me some things I wasn't aware of and also showed me that this can be a problem. I've been chasing my tail thinking it it was a client side problem. Thanks again.

[ketu]

Thanks: Actully i was rebooting USG when we had this issue but this is a good workaround where we can resolve without restarting USG. And in my scenario the issue was resolved by jsut one command "sudo ipsec restart"

[jamiebibbs]

Thank you for making this video. I had been dealing with this issue on and off for the last few months, I'm glad to finally find a solution!

[TossACoinToYourWitcher]

UDM pro does not support Dead Peer Detection which is part of the RFC3706? This is a show stopper.

[phoenixlf]

I've been searching for a solution to this issue for AGES! Thank you!

[judgezee]

would help to have commands in description

[SirTKC]

Yup ! Very helpful. Indeed, UI should come up with an easy way to terminate an "active broken vpn connection"

[AceRokoshu]

DUDE you are the best! Thank a lot for this info!

[ShermanatorTyler]

Thank you! Running win 11. With the same PC, I was able to connect when on my cellular hotspot but via ethernet I was not. Ran these commands and was able to connect hardwired again. So weird!

[NotAWokeCanuck]

Thanks!! This was very helpful. Is there a way to setup idle time out for VPN users?

[diegofranciscosancho]

Thank you very much!
I had strouggled with this issue a long time ago.

After this guide, I found a better way to manually finish each connection:
sudo swanctl --list-sa
sudo swanctl --terminate --ike-id [session number]

hope you find it usefull. Best regards!

[danielnicklasson]

Hi,

Do you know if there is any long term fix out yet for this?
Users are more frequently getting this message nowadays.

[dmahadeo]

This was good information. But on my USG I have both Site to Site VPNs as well as Remote-Access Users and I was able to terminate the particular connection without disrupting the site-to-site IPSEC VPN by running:

"clear vpn remote-access user <radius user>".

To find the correct name of the user I first ran

"show vpn remote-access"

However I can no longer run these commands on the UDM as it only recognizes SWANCTL commands. How can I run regular CLI commands on the UDM? Anyone?

[bottlenecked]

You are amazing. Absolutely wonderful. Thank you Thank you Thank you!

[HisLoveArmy]

Cool thanks, I rebuilt a VPN the other day because of this.

[bwarner]

In case you had to listen 5x like I did, those commands are:
sudo service xl2tpd restart
sudo ipsec restart

[michaelsoremekun]

Is there a way to configure a session timeout variable?

[noahkreider]

Can you make a video that shows how to automate the script?