Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 1106 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos RED Server- Client Entering Disconnect Loop

Yemliha Ipek

Hi All,

There are two XG106 which has v17.5 MR15 firmware and red pateern 3.0.003. I have created RED Server-Client tunnel.

I saw that RED tunnel entering disconnect loop everday. The tunnel connection was not coming back until you restarted the XG 106.

Finally I have noticed that there was connection between RED disconnect problem and PPPOE reconnect schedule on WAN Interface.

After the removing PPPOE reconnect schedule from WAN interface, RED tunnel was stable for a one week. But if the PPPOE interface was restarted for any reason(for example LCP Timeout), the problem occurs again.

I think it is not a configuration mistake, it is bug. Could you please reproduce the problematic situtation ?



This thread was automatically locked due to age.
  • 0

    Please check following logs.

    18014
    SYSTEM
    2021-01-30 04:57:34
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:56:50
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:56:07
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:55:23
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:54:39
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:54:08
    RED
    Connected
    1838943ba1401d3_c/XXXXXX is now re-connected after 45000 ms
    18014
    SYSTEM
    2021-01-30 04:53:54
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:53:23
    RED
    Connected
    1838943ba1401d3_c/XXXXXX is now re-connected after 87000 ms
    18014
    SYSTEM
    2021-01-30 04:53:10
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:52:50
    RED
    Interim
    1838943ba1401d3_c/XXXXXX transfered bytes TX: 2304 RX: 0
    18016
    SYSTEM
    2021-01-30 04:52:27
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:51:56
    RED
    Connected
    1838943ba1401d3_c/XXXXXX is now re-connected after 86000 ms
    18014
    SYSTEM
    2021-01-30 04:51:43
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:51:00
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:50:29
    RED
    Connected
    1838943ba1401d3_c/XXXXXX is now re-connected after 87000 ms
    18014
    SYSTEM
    2021-01-30 04:50:16
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:49:33
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:49:02
    RED
    Connected
    1838943ba1401d3_c/XXXXXX is now re-connected after 86000 ms
    18014
    SYSTEM
    2021-01-30 04:48:49
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:48:19
    SSL VPN
    Terminated
    xxxxx@xxxxx.local
    SSL VPN User 'xxxxx@xxxxx.local' disconnected
    17825
    SYSTEM
    2021-01-30 04:48:06
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:47:48
    RED
    Interim
    1838943ba1401d3_c/XXXXXX transfered bytes TX: 2400 RX: 0
    18016
    SYSTEM
    2021-01-30 04:47:35
    RED
    Connected
    1838943ba1401d3_c/XXXXXX is now re-connected after 246000 ms
    18014
    SYSTEM
    2021-01-30 04:47:22
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:46:39
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:45:55
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:45:01
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:44:22
    SSL VPN
    Established
    xxxxx@xxxxx.local
    SSL VPN User 'xxxxx@xxxxx.local' connected
    17824
    SYSTEM
    2021-01-30 04:44:21
    Gateway
    Gateway XXNET is Up
    17814
    SYSTEM
    2021-01-30 04:44:01
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:43:55
    Gateway
    Gateway XXNET is Down
    17814
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2: PPPoE Link UP
    17960
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2 : Set Aux DNS: xxx.xxx.xx.xx
    17960
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2 : Set Primary DNS: xx.xx.xx.xx
    17960
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2 : Set Gateway IP: xx.xx.xx.xx
    17960
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2 : Set Interface IP: xx.xxx.xx.xxx
    17960
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2: Authentication Successful
    17958
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2 : LCP Link Established
    17956
    SYSTEM
    2021-01-30 04:43:35
    PPPoE
    Port2 : Discovery Process Completed
    17955
    SYSTEM
    2021-01-30 04:43:34
    PPPoE
    Port2 : PADR Packet sent
    17955
    SYSTEM
    2021-01-30 04:43:34
    PPPoE
    Port2 : PADO Packet received from server
    17955
    SYSTEM
    2021-01-30 04:43:34
    PPPoE
    Port2 : PADI Packet sent from interface
    17955
    SYSTEM
    2021-01-30 04:43:29
    PPPoE
    Port2: PPPoE Link DOWN
    17965
    SYSTEM
    2021-01-30 04:43:29
    PPPoE
    Port2: Disconnect PPPoE due to LCP timeout
    17965
    SYSTEM
    2021-01-30 04:43:28
    RED
    Connected
    1838943ba1401d3_c/XXXXXX is now re-connected after 67000 ms
    18014
    SYSTEM
    2021-01-30 04:42:56
    RED
    Disconnected
    1838943ba1401d3_c/XXXXXX is now disconnected
    18015
    SYSTEM
    2021-01-30 04:42:46
    RED
    Interim
    1838943ba1401d3_c/XXXXXX transfered bytes TX: 480176 RX: 47800
    18016
    SYSTEM
    2021-01-30 04:37:44
    RED
    Interim
    1838943ba1401d3_c/XXXXXX transfered bytes TX: 417984 RX: 50384
    18016
    SYSTEM
    2021-01-30 04:32:42
    RED
    Interim
    1838943ba1401d3_c/XXXXXX transfered bytes TX: 380416 RX: 49760
    18016
    SYSTEM
    2021-01-30 04:27:40
    RED
    Interim
    1838943ba1401d3_c/xxxxxx transfered bytes TX: 406128 RX: 49728
    18016
    SYSTEM
  • 0

    Hello Yemliha,

    Thank you for contacting the Sophos Community!

     I would recommend you to open a case with Support to get this investigated, so this can get escalated if they find it is not a configuration issue, please submit the following logs:

    red.log syslog.log networkd.log

    And if you have steps to reproduce please also provide them.

    Regards,