This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

v17 MR5: VPN still unstable!

Hi,

I Upgraded to MR5 yesterday, all went great, suddenly this evening, tunnels start dropping up and down, and I am being "spammed" with notifications from my SFM that tunnels are terminated.

charon.log shows a lot of theese:

invalid ID_V1 payload length, decryption failed?                                

I have Read here:
Sophos XG Firewall: Cannot handle more than 2 concurrent Quick Mode exchanges per IKE_SA when using IKEv1

That there are issues in MR5, that will be resolved in MR6, but theese errors should read:
"invalid HASH_V1 payload length, decryption failed?"
as stated in the KB above.

I have 4 tunnels on my XG.

Are others seeing this?

A little more log:

2018-01-29 19:54:58 10[ENC] <622> invalid ID_V1 payload length, decryption fail 
ed?                                                                             
2018-01-29 19:54:58 10[ENC] <622> could not decrypt payloads                    
2018-01-29 19:54:58 10[IKE] <622> message parsing failed                        
2018-01-29 19:54:58 10[ENC] <622> generating INFORMATIONAL_V1 request 158523599 
 [ HASH N(PLD_MAL) ]                                                            
2018-01-29 19:54:58 10[NET] <622> sending packet: from x.x.x.x[500] to 5.1 
03.12.171[500] (76 bytes)                                                       
2018-01-29 19:54:58 10[IKE] <622> ID_PROT request with message ID 0 processing  
failed                                                                          
2018-01-29 19:54:58 10[DMN] <622> [GARNER-LOGGING] (child_alert) ALERT: parsing 
 IKE message from x.x.x.x[500] failed                                      
2018-01-29 19:54:58 19[JOB] <622> deleting half open IKE_SA with x.x.x.x a 
fter timeout                                                                    
2018-01-29 19:54:58 19[DMN] <622> [GARNER-LOGGING] (child_alert) ALERT: IKE_SA  
timed out before it could be established

All tunnels are unstable during this, yesterday with MR3, it worked great for weeks!

This thread was automatically locked due to age.

Parents

0 samuel.heinrich over 7 years ago

We have a running setup with 6 XG85 Firewalls which do mesh VPN in between. all firewalls run the latest XG 17.0.6 code.

IPSEC VPN is extremly unstable, the tunnels are flapping within seconds. that leads to the problem that the CPU of the XG85's runs up to 100%.

no problem with SSL S2S VPN as a workaround, except that you cannot add/delete tunnel confiigs without disconnecting all sites. furthermore you can not monitor SSL S2S from CFM.

Firewall y.y.199.126
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHF-1[154]: ESTABLISHED 6 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[153]: ESTABLISHED 16 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[152]: ESTABLISHED 21 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[151]: ESTABLISHED 32 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[155]: ESTABLISHED 6 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[154]: ESTABLISHED 14 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[153]: ESTABLISHED 24 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHN-1[151]: ESTABLISHED 40 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[157]: ESTABLISHED 1 second ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[156]: ESTABLISHED 10 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[155]: ESTABLISHED 18 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[154]: ESTABLISHED 26 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[153]: ESTABLISHED 36 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHF-1[158]: ESTABLISHED 6 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[157]: ESTABLISHED 11 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[156]: ESTABLISHED 20 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[155]: ESTABLISHED 28 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[159]: ESTABLISHED 2 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[158]: ESTABLISHED 14 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[157]: ESTABLISHED 19 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHN-1[155]: ESTABLISHED 36 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 22 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[163]: ESTABLISHED 1 second ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[162]: ESTABLISHED 14 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[161]: ESTABLISHED 16 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHN-1[159]: ESTABLISHED 32 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 22 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#

Firewall x.x.172.166
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
WAR_TO_RHN-1[12583]: ESTABLISHED 14 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_THY-1[12494]: ESTABLISHED 25 minutes ago, x.x.172.166[x.x.172.166]...y.y.199.126[y.y.199.126]
WAR_TO_RHF-1[12008]: ESTABLISHED 2 hours ago, x.x.172.166[x.x.172.166]...x.x.172.174[x.x.172.174]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
WAR_TO_RHN-1[12584]: ESTABLISHED 5 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_RHN-1[12583]: ESTABLISHED 20 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_THY-1[12494]: ESTABLISHED 25 minutes ago, x.x.172.166[x.x.172.166]...y.y.199.126[y.y.199.126]
WAR_TO_RHF-1[12008]: ESTABLISHED 2 hours ago, x.x.172.166[x.x.172.166]...x.x.172.174[x.x.172.174]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
WAR_TO_RHN-1[12584]: ESTABLISHED 12 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_THY-1[12494]: ESTABLISHED 25 minutes ago, x.x.172.166[x.x.172.166]...y.y.199.126[y.y.199.126]
WAR_TO_RHF-1[12008]: ESTABLISHED 2 hours ago, x.x.172.166[x.x.172.166]...x.x.172.174[x.x.172.174]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#

Firewall x.x.172.170
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25857]: ESTABLISHED 9 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 10 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 15 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 26 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25853]: ESTABLISHED 28 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_THY-1[25851]: ESTABLISHED 41 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25857]: ESTABLISHED 14 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 15 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 20 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 31 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25860]: ESTABLISHED 2 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25859]: ESTABLISHED 2 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25858]: ESTABLISHED 5 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25857]: ESTABLISHED 20 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 21 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 26 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 37 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25860]: ESTABLISHED 7 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25859]: ESTABLISHED 7 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25858]: ESTABLISHED 9 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25857]: ESTABLISHED 24 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 25 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 30 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 41 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 samuel.heinrich over 7 years ago

We have a running setup with 6 XG85 Firewalls which do mesh VPN in between. all firewalls run the latest XG 17.0.6 code.

IPSEC VPN is extremly unstable, the tunnels are flapping within seconds. that leads to the problem that the CPU of the XG85's runs up to 100%.

no problem with SSL S2S VPN as a workaround, except that you cannot add/delete tunnel confiigs without disconnecting all sites. furthermore you can not monitor SSL S2S from CFM.

Firewall y.y.199.126
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHF-1[154]: ESTABLISHED 6 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[153]: ESTABLISHED 16 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[152]: ESTABLISHED 21 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[151]: ESTABLISHED 32 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[155]: ESTABLISHED 6 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[154]: ESTABLISHED 14 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[153]: ESTABLISHED 24 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHN-1[151]: ESTABLISHED 40 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[157]: ESTABLISHED 1 second ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[156]: ESTABLISHED 10 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[155]: ESTABLISHED 18 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[154]: ESTABLISHED 26 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[153]: ESTABLISHED 36 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHF-1[158]: ESTABLISHED 6 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[157]: ESTABLISHED 11 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[156]: ESTABLISHED 20 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[155]: ESTABLISHED 28 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 21 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[159]: ESTABLISHED 2 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[158]: ESTABLISHED 14 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[157]: ESTABLISHED 19 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHN-1[155]: ESTABLISHED 36 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 22 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6#
XG85_AM02_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
THY_TO_RHN-1[163]: ESTABLISHED 1 second ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHF-1[162]: ESTABLISHED 14 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.174[x.x.172.174]
THY_TO_RHN-1[161]: ESTABLISHED 16 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_RHN-1[159]: ESTABLISHED 32 seconds ago, y.y.199.126[y.y.199.126]...x.x.172.170[x.x.172.170]
THY_TO_WAR-1[3]: ESTABLISHED 22 minutes ago, y.y.199.126[y.y.199.126]...x.x.172.166[x.x.172.166]
XG85_AM02_SFOS 17.0.6 MR-6#

Firewall x.x.172.166
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
WAR_TO_RHN-1[12583]: ESTABLISHED 14 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_THY-1[12494]: ESTABLISHED 25 minutes ago, x.x.172.166[x.x.172.166]...y.y.199.126[y.y.199.126]
WAR_TO_RHF-1[12008]: ESTABLISHED 2 hours ago, x.x.172.166[x.x.172.166]...x.x.172.174[x.x.172.174]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
WAR_TO_RHN-1[12584]: ESTABLISHED 5 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_RHN-1[12583]: ESTABLISHED 20 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_THY-1[12494]: ESTABLISHED 25 minutes ago, x.x.172.166[x.x.172.166]...y.y.199.126[y.y.199.126]
WAR_TO_RHF-1[12008]: ESTABLISHED 2 hours ago, x.x.172.166[x.x.172.166]...x.x.172.174[x.x.172.174]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
WAR_TO_RHN-1[12584]: ESTABLISHED 12 seconds ago, x.x.172.166[x.x.172.166]...x.x.172.170[x.x.172.170]
WAR_TO_THY-1[12494]: ESTABLISHED 25 minutes ago, x.x.172.166[x.x.172.166]...y.y.199.126[y.y.199.126]
WAR_TO_RHF-1[12008]: ESTABLISHED 2 hours ago, x.x.172.166[x.x.172.166]...x.x.172.174[x.x.172.174]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#

Firewall x.x.172.170
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25857]: ESTABLISHED 9 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 10 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 15 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 26 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25853]: ESTABLISHED 28 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_THY-1[25851]: ESTABLISHED 41 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25857]: ESTABLISHED 14 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 15 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 20 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 31 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25860]: ESTABLISHED 2 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25859]: ESTABLISHED 2 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25858]: ESTABLISHED 5 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25857]: ESTABLISHED 20 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 21 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 26 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 37 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6# ipsec status | grep ESTA
RHN_TO_THY-1[25860]: ESTABLISHED 7 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25859]: ESTABLISHED 7 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25858]: ESTABLISHED 9 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25857]: ESTABLISHED 24 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
RHN_TO_WAR-1[25856]: ESTABLISHED 25 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.166[x.x.172.166]
RHN_TO_RHF-1[25855]: ESTABLISHED 30 seconds ago, x.x.172.170[x.x.172.170]...x.x.172.174[x.x.172.174]
RHN_TO_THY-1[25854]: ESTABLISHED 41 seconds ago, x.x.172.170[x.x.172.170]...y.y.199.126[y.y.199.126]
XG85_XN01_SFOS 17.0.6 MR-6#
XG85_XN01_SFOS 17.0.6 MR-6#
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 FloSupport over 7 years ago in reply to samuel.heinrich

Hi samuel.heinrich

I'm sorry to hear about the issues you have been experiencing with your XG85 VPN tunnels. Have you already raised a support case for this so that further troubleshooting and investigation can be performed? If so, please PM this to me for further follow up.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel