L2TP Deconectați-vă după 59 de minute / 1 oră numai cu IPv6

Am un Windows Server 2022 cu L2TP configurat. Serverul are un IPv4 NAT și un IPv6 public.
Clienții sunt toți Windows 10 20H2
Clienții se conectează prin numele său DNS. Majoritatea clienților nu acceptă IPv6 și se conectează prin IPv4.
Nu au probleme cu conexiunea.

Dar Clienții cu adrese IPv6 își pierd conexiunea după 59 de minute.
M-am uitat la trei clienți diferiți cu adrese IPv6 diferite și este același pentru toți.
De la un client am un fișier PCAP de la firewall și am activat înregistrarea prin netsh ras set tracing * activat. Nu sunt pe deplin sigur că ar trebui să mă uit la fișierul jurnal.

În Eventviewer există o intrare care spune că svchost.exe_IKEEXT este prăbușit. Din momentul în care se potrivește cu Deconectarea.

Mesaj: Fehlerbucket 2073847750892668993, tip 4
                       Numele propriu: APPCRASH
                       Răspuns: Nicht verfügbar
                       CAB-Datei-ID: 0
                       
                       Semnatura problemei:
                       P1: svchost.exe_IKEEXT
                       P2: 10.0.19041.1566
                       P3: 1f37eb46
                       P4: ikeext.dll
                       P5: 10.0.19041.1526
                       P6: 36e81ed5
                       P7: c0000005
                       P8: 00000000000554ab
                       P9: 
                       P10: 
                       
                       Angefügte Dateien:
                       \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF6AD.tmp.dmp
                       \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF789.tmp.WERInternalMetadata.xml
                       \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF7A9.tmp.xml
                       \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF7B7.tmp.csv
                       \?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERF835.tmp.txt
                       
                       Diese Dateien befinden sich möglicherweise hier:
                       \?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_svchost.exe_IKEE_2b0aed8c6968e72acfa52ee3da196696acb3a56_b42d39d9_74fb1b7a-5e1
                       4089-84ed-92a85ef6bd20
                       
                       Simbol de analiză: 
                       Es wird erneut nach einer Lösung gesucht: 0
                       Berichts-ID: a005dda7-22ed-4677-9ef3-c79cf81be685
                       Berichtstatus: 268435456
                       Bucket mit Hash: 654e8cadfaebfd171cc7c98aae334841
                       CAB-Datei-Guid: 0

Am adunat Raportul.wer. dar nu știu ce informații pot obține din el

Versiune=1
EventType=APPCRASH
EventTime=132926741435810051
ReportType=2
Consimțământ=1
UploadTime=132926741440232947
ReportStatus=268435456
ReportIdentifier=74fb1b7a-5e19-4089-84ed-92a85ef6bd20
IntegratorReportIdentifier=a005dda7-22ed-4677-9ef3-c79cf81be685
Wow64Host=34404
NsAppName=svchost.exe_IKEEXT
OriginalFilename=svchost.exe
AppSessionGuid=000051a8-0000-00f4-3746-2a612240d801
TargetAppId=W:0000f519feec486de87ed73cb92d3cac802400000000!00001f912d4bec338ef10b7c9f19976286f8acc4eb97!svchost.exe
TargetAppVer=1986//08//07:00:26:46!1a0fa!svchost.exe
BootId=4294967295
ServiceGroupName=netsvcs
ServiceDllName=ikeext.dll
ServiceSplit=1
TargetAsId=1509
IsFatal=1
EtwNonCollectReason=1
Response.BucketId=654e8cadfaebfd171cc7c98aae334841
Response.BucketTable=4
Response.LegacyBucketId=2073847750892668993
Response.type=4
Sig[0].Name=Anwendungsname
Sig[0].Value=svchost.exe_IKEEXT
Sig[1].Name=Anwendungsversion
Sig[1].Valoare=10.0.19041.1566
Sig[2].Name=Anwendungszeitstempel
Sig[2].Valoare=1f37eb46
Sig[3].Name=Fehlermodulname
Sig[3].Value=ikeext.dll
Sig[4].Nume=Fehlermodulversion
Sig[4].Valoare=10.0.19041.1526
Sig[5].Name=Fehlermodulzeitstempel
Sig[5].Valoare=36e81ed5
Sig[6].Nume=Ausnahmecode
Sig[6].Valoare=c0000005
Sig[7].Nume=Ausnahmeoffset
Sig[7].Valoare=00000000000554ab
DynamicSig[1].Nume=Betriebsystemversion
DynamicSig[1].Value=10.0.19042.2.0.0.256.48
DynamicSig[2].Name=Gebietsschema-ID
DynamicSig[2].Valoare=1031
DynamicSig[22].Nume=Zusatzinformation 1
DynamicSig[22].Valoare=fbc7
DynamicSig[23].Nume=Zusatzinformation 2
DynamicSig[23].Value=fbc707af6f2cf90c6793247c62607853
DynamicSig[24].Name=Zusatzinformation 3
DynamicSig[24].Valoare=fd8f
DynamicSig[25].Nume=Zusatzinformation 4
DynamicSig[25].Value=fd8ff660e04fd4578c8995654d3e9c06
UI[2]=C:\WINDOWS\system32\svchost.exe
UI[5]=SchlieÃen
UI[8]=IKE- und AuthIP IPsec-Schlüsselerstellungsmodule wurde beendet und geschlossen.
UI[9]=Die Anwendung wird aufgrund eines Problems nicht mehr richtig ausgeführt. Sie erhalten Nachricht, wenn eine Lösung verfügbar ist.
UI[10]=S&chlieÃen
LoadedModule[0]=C:\WINDOWS\system32\svchost.exe
LoadedModule[1]=C:\WINDOWS\SYSTEM32\ntdll.dll
LoadedModule[2]=C:\WINDOWS\System32\KERNEL32.dll
LoadedModule[3]=C:\Windows\system32\hmpalert.dll
LoadedModule[4]=C:\WINDOWS\System32\KERNELBASE.dll
LoadedModule[5]=C:\WINDOWS\System32\sechost.dll
LoadedModule[6]=C:\WINDOWS\System32\RPCRT4.dll
LoadedModule[7]=C:\WINDOWS\System32\ucrtbase.dll
LoadedModule[8]=C:\WINDOWS\System32\ADVAPI32.dll
LoadedModule[9]=C:\WINDOWS\System32\msvcrt.dll
LoadedModule[10]=C:\WINDOWS\System32\combase.dll
LoadedModule[11]=C:\WINDOWS\SYSTEM32\kernel.appcore.dll
LoadedModule[12]=C:\WINDOWS\System32\bcryptPrimitives.dll
LoadedModule[13]=C:\WINDOWS\System32\user32.dll
LoadedModule[14]=C:\WINDOWS\System32\win32u.dll
LoadedModule[15]=C:\WINDOWS\System32\GDI32.dll
LoadedModule[16]=C:\WINDOWS\System32\gdi32full.dll
LoadedModule[17]=C:\WINDOWS\System32\msvcp_win.dll
LoadedModule[18]=c:\windows\system32\ikeext.dll
LoadedModule[19]=C:\WINDOWS\System32\WS2_32.dll
LoadedModule[20]=C:\WINDOWS\System32\NSI.dll
LoadedModule[21]=c:\windows\system32\AUTHZ.dll
LoadedModule[22]=c:\windows\system32\fwpuclnt.dll
LoadedModule[23]=C:\WINDOWS\System32\bcrypt.dll
LoadedModule[24]=c:\windows\system32\MSASN1.dll
LoadedModule[25]=C:\WINDOWS\SYSTEM32\powrprof.dll
LoadedModule[26]=c:\windows\system32\CRYPTSP.dll
LoadedModule[27]=c:\windows\system32\UMPDC.dll
LoadedModule[28]=C:\WINDOWS\SYSTEM32\WLDP.DLL
LoadedModule[29]=c:\windows\system32\ncrypt.dll
LoadedModule[30]=c:\windows\system32\NTASN1.dll
LoadedModule[31]=C:\WINDOWS\system32\mswsock.dll
LoadedModule[32]=C:\WINDOWS\SYSTEM32\rmclient.dll
LoadedModule[33]=c:\windows\system32\SspiCli.dll
LoadedModule[34]=c:\windows\system32\IPHLPAPI.DLL
LoadedModule[35]=C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL
LoadedModule[36]=C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL
LoadedModule[37]=C:\WINDOWS\SYSTEM32\DNSAPI.dll
LoadedModule[38]=C:\WINDOWS\SYSTEM32\WINNSI.DLL
LoadedModule[39]=C:\WINDOWS\system32\rsaenh.dll
LoadedModule[40]=C:\WINDOWS\system32\CRYPTBASE.dll
LoadedModule[41]=C:\WINDOWS\system32\kerberos.DLL
State[0].Key=Transport.DoneStage1
Stare[0].Valoare=1
OsInfo[0].Key=vermaj
OsInfo[0].Valoare=10
OsInfo[1].Key=vermin
OsInfo[1].Valoare=0
OsInfo[2].Key=verbld
OsInfo[2].Valoare=19042
OsInfo[3].Key=ubr
OsInfo[3].Valoare=1586
OsInfo[4].Key=versp
OsInfo[4].Valoare=0
OsInfo[5].Key=arch
OsInfo[5].Valoare=9
OsInfo[6].Key=lcid
OsInfo[6].Valoare=1031
OsInfo[7].Key=geoid
OsInfo[7].Valoare=94
OsInfo[8].Key=sku
OsInfo[8].Valoare=48
OsInfo[9].Key=domeniu
OsInfo[9].Valoare=1
OsInfo[10].Key=prodsuite
OsInfo[10].Valoare=256
OsInfo[11].Key=ntprodtype
OsInfo[11].Valoare=1
OsInfo[12].Key=platid
OsInfo[12].Valoare=10
OsInfo[13].Key=sr
OsInfo[13].Valoare=0
OsInfo[14].Key=tmsi
OsInfo[14].Value=221541823
OsInfo[15].Key=osinsty
OsInfo[15].Valoare=3
OsInfo[16].Key=iever
OsInfo[16].Value=11.789.19041.0-11.0.1000
OsInfo[17].Key=portos
OsInfo[17].Valoare=0
OsInfo[18].Key=ram
OsInfo[18].Valoare=7399
OsInfo[19].Key=svolsz
OsInfo[19].Valoare=237
OsInfo[20].Key=wimbt
OsInfo[20].Valoare=0
OsInfo[21].Key=blddt
OsInfo[21].Value=191206
OsInfo[22].Key=bldtm
OsInfo[22].Valoare=1406
OsInfo[23].Key=bldbrch
OsInfo[23].Value=vb_release
OsInfo[24].Key=bldchk
OsInfo[24].Valoare=0
OsInfo[25].Key=wpvermaj
OsInfo[25].Valoare=0
OsInfo[26].Key=wpvermin
OsInfo[26].Valoare=0
OsInfo[27].Key=wpbuildmaj
OsInfo[27].Valoare=0
OsInfo[28].Key=wpbuildmin
OsInfo[28].Valoare=0
OsInfo[29].Key=osver
OsInfo[29].Value=10.0.19041.1586.amd64fre.vb_release.191206-1406
OsInfo[30].Key=buildflightid
OsInfo[30].Value=39c349a8-d2a6-4e3f-853f-d4b2f6ef300c
OsInfo[31].Key=ediție
OsInfo[31].Valoare=Profesional
OsInfo[32].Key=ring
OsInfo[32].Value=Retail
OsInfo[33].Key=expid
OsInfo[33].Value=RD:14F0,RD:150B,RD:1515,RD:1626,RD:16C0,RD:1807,RD:1907,RD:1C43,RD:6D7,RD:94A,RD:3361
OsInfo[34].Key=fconid
OsInfo[35].Key=containerid
OsInfo[36].Key=containertype
OsInfo[37].Key=edu
OsInfo[37].Valoare=0
FriendlyEventName=Nicht mehr funktionsfähig
ConsentKey=APPCRASH
AppName=IKE- und AuthIP IPsec-Schlüsselerstellungmodule
AppPath=C:\WINDOWS\system32\svchost.exe
NsPartner=windows
NsGroup=windows8
ApplicationIdentity=3865C238BFA1A3C11D2BA0FB43D6ECB6
MetadataHash=1987045312

O configurație Get-VpnServerIPsec de pe server arată așa. Prin urmare, nu ar trebui să fie reintrodusă cheia înainte de trecerea celor 8 ore.

PS C:\Windows\system32> Get-VpnServerIPsecConfiguration |fl -Proprietate *


Tip tunel: IKEV2
GrePorts: 0
IdleDisconnect: 300
Ikev2Ports: 0
L2tpPorts: 128
MMSALifeTime: 28800
SADataSizeForRenegotiation: 102400
SAlifeTime: 28800
SstpPorts: 0
EncryptionType : RequireEncryption
PSComputerName:
CimClass: root/Microsoft/Windows/RemoteAccess:VpnServerIPsecDefaultConfiguration
CimInstanceProperties : {GrePorts, IdleDisconnect, Ikev2Ports, L2tpPorts...}
CimSystemProperties: Microsoft.Management.Infrastructure.CimSystemProperties

Pot găsi un eveniment Rekeying într-un PCAP fără a decripta Traficul?

Unde ar trebui să mă uit pentru a găsi problema?

Salutări calde
Marco Hald
Crosspost la https://docs.microsoft.com/en-us/answers/questions/787506/l2tp-disconnect-after-59-minutes-1-hour-only-with.html