WAN client STILL timing out despite registry changes...

[hoinvip]

Can anyone help me?

We have a Win2000 SP2 server running Metaframe XPs v1.0 (build 1360) SP2 FR2... This runs on a server at our head offices and sits behind a Cisco PIX firewall connected to a 2Mb DSL pipe... We have two remote offices one connected via a Cisco PIX-PIX VPN and the other has one static IP address allowed to use port 1494. Both of these offices use 512Kbps DSL.

The problem is that we keep getting hit with timeouts whereby the connection drops and pops up an "error in connection" box which offers the option of a timed reconnect, reconnect now or cancel.

This means that our remote users cannot work effectively and it's driving them (and me!) crazy. I've now made updates to the following registry keys as per previous suggestions (pasted below):

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
"KeepAliveTime"=dword:0000ea60
"KeepAliveInterval"=dword:000003e8
"TcpMaxDataRetransmissions"=dword:0000000a

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix]
"IcaEnableKeepAlive"=dword00000001
"IcaKeepAliveInterval"=dword:0000003c

However, this seem to have helped alleviate the problem for about 24 hours but then we're back in the same place with our users getting kicked out every 20 minutes or so...

Can anyone please offer me any more guidance on getting this sorted?

Many thanks in advance,



HoinviP

http://www.global-net.co.uk

 

[PPettit]

Make sure you entered the info correctly. It should look like this in your registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix:
IcaEnableKeepAlive REG_DWORD 0x00000001(1)
IcaKeepAliveInterval REG_DWORD 0x0000003c(60)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters:
KeepAliveInterval REG_DWORD 0x000003e8(1000)
KeepAliveTime REG_DWORD 0x0000ea60(6000)
TcpMaxDataRetransmissions REG_DWORD 0x0000000a(1)

You may need to play with the numbers a little. Try decreasing the keepalive intervals (to make Citrix signal more often) and maybe increasing the time key (length of the signal I think) and retransmission key a little. This is going to increase traffic some so try to fine tune them as much as possible.

If this doesn't work, you might want to see if there are any previously unnoticed communication problems with any of your connections between the server and the remotes.

 

[hoinvip]

OK, have done the following:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix:
IcaKeepAliveInterval Dropped to 0x00000032(50)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters:
KeepAliveInterval Dropped to 0x000001fe(500)
KeepAliveTime Dropped to 0x00001770(6000)

Interestingly, the TCPIP KeepAliveTime was 0x0000ea60 which calculates as 60000 not 6000.... Could this be part of the problem?

Thanks,






HoinviP

http://www.global-net.co.uk

 

[hoinvip]

OK, have done the following:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix:
IcaKeepAliveInterval Dropped to 0x00000032(50)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters:
KeepAliveInterval Dropped to 0x000001fe(500)
KeepAliveTime Dropped to 0x00001770(6000)

Interestingly, the TCPIP KeepAliveTime was 0x0000ea60 which calculates as 60000 not 6000.... Could this be part of the problem?

Will see how this goes for a day or two...

Thanks,






HoinviP

http://www.global-net.co.uk

 

[hoinvip]

Hi there, as per my (bizarrely repeated) posts above, I've amended the timeouts. However this has not had the slightest difference. The users are still getting kicked out every 15 to 20 minutes and they're understandably not happy.

Is there anything else I can try?

Thanks!

HoinviP

http://www.global-net.co.uk

 

[tbhatt]

What version of the client are they using?

 

[hoinvip]

Hi there,

The client in use is: Version 6.30.1050 (128-bit SSL).

Thanks!

HoinviP

http://www.global-net.co.uk

 

[Ogi]

Try changing :-

From

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix:
IcaKeepAliveInterval REG_DWORD 0x0000003c(60)

To

IcaKeepAliveInterval REG_DWORD 0x0000000f(15)

That's what I've set it to! Still get disconnections but they seem to be our RAS users but some WAN users!

Cheers,
Carl.

 

[hoinvip]

Still no joy - I've made all the suggested changes here and the connection is as bad as ever...

The users are getting kicked out approximately every 20 minutes.

Any further suggestions?

Thanks,

HoinviP

http://www.global-net.co.uk

 

[xs4citrix]

Check hardware between server and client for idle settings. You can think of firewalls, routers, and manageble switches.
(in my case it was the firewall, that defaulted to 10 min for a connection, regardless of the keepalive settings on the server)

http://www.printingsupport.com

Free citrixprinting support

 

[rezinz28]

What version of PIX software are you using. Have you tried calling Cisco for support?
Steve

Thank You,
Steve

 

[hoinvip]

We're running a PIX515E with v6.1(3). We don't have a support contract on this yet but I'm going to see about getting one.. Any ideas in the meantime are very welcome.

HoinviP

http://www.global-net.co.uk

 

[xs4citrix]

Since you have a cisco, ask the guys to enable "fair queeing", whcih streamlines ica traffic mutch better.

http://www.printingsupport.com

Free citrixprinting support

 

[rayzze]

It may have something to do with MTU setting also try to do a ping from the client with a length of 1500 and see how many packets you drop... Here is a link to some tools I use to tune server for the best performance

http://www.dabcc.com/ThinSol/Downloads/default.htm

look for registry changer 1.0 you can just look at what the VBS script is doing to get a feel for the changes it will make. Hope this helps.