[7.450][BUG][NOTABUG] new ethernet connexion, no more IP-Sec VPNs !

Hi

I was using a PPPOE connexion which was working fine... and 2 Site2Site VPNs which was working... then I added a new ethernet Cable/Modem (DHCP) connexion which is working fine and I disabled the PPPOE connexion but IPSec Site-2-Site VPN is no more working... both connexion are set as active but in the Site2Site status page I still have:


There is no Site-to-site VPN status information available

I've tried to reboot without luck

in the live log I've:


2009:06:08-16:13:38 asg pluto[4658]: ERROR: "S_Unknown Object" #3: sendto on ppp0 to 217.26.197.100:500 failed in delete notify. Errno 101: Network is unreachable

2009:06:08-16:13:38 asg pluto[4658]: ERROR: "S_Unknown Object" #3: fgets failed on output of down-client command. Errno 4: Interrupted system call

2009:06:08-16:13:38 asg pluto[4658]: "S_Unknown Object" #1: deleting state (STATE_MAIN_I4)

2009:06:08-16:13:38 asg pluto[4658]: ERROR: "S_Unknown Object" #1: sendto on ppp0 to 217.26.197.100:500 failed in delete notify. Errno 101: Network is unreachable

2009:06:08-16:13:39 asg pluto[4658]: ERROR: "S_Unknown Object": fgets failed on output of unroute-client command. Errno 4: Interrupted system call

2009:06:08-16:13:39 asg pluto[4658]: "S_Unknown Object": deleting connection

2009:06:08-16:13:39 asg pluto[4658]: shutting down interface ipsec0/ppp0 79.92.70.213

2009:06:08-16:13:39 asg pluto[4658]: shutting down interface ipsec0/ppp0 79.92.70.213

2009:06:08-16:13:39 asg pluto[]: updown: /sbin/ip route del 172.18.0.0/16 dev ipsec0 src 192.168.9.1 proto 42 failed with status 2:

2009:06:08-16:13:39 asg pluto[]: updown: RTNETLINK answers: No such process

any hints ?

thx

Parents

0 snowcrash_01 over 16 years ago

is the S2S VPN still there? Perhaps it was deleted as child object when deleting the pppoe interface.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 16 years ago in reply to snowcrash_01

is the S2S VPN still there? Perhaps it was deleted as child object when deleting the pppoe interface.

configs are still there... and as soon as I reactive my pppoe connexion the VPNs are working again...

probably something wrong with the uplink stuff (with my tests uplink was disabled and the PPPOE connexion disabled only Fiber connection was active..

thx
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 16 years ago in reply to BuBU

BuBu, you lost me. Can you show pictures of the 'Connections' tab when it works and when it doesn't work? And the same for your 'Interfaces' tab?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 16 years ago in reply to BAlfson

Ok

so here is the configuration with DSL connection and VPNs are OK
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 16 years ago in reply to BuBU

and here only Interface is active...

VPNs are not ok, it is even not showing... and got the error message I pasted in the first post...

also to make the fiber link working I did uncheck the default route for ADSL and checked default route for fiber of course... (and changed MASQUERADING for the right interface of course)

even after reboot it did not helped...

and when using uplink the VPNs are working but seems it is using the ADSL/PPPOE interface... whereas I want it to use of course the fiber connection...

maybe a problem with fiber connection set as Cable/Modem DHCP ? I will test that... but how to make DNS working if I need to set manually the fiber router entry manually when fiber is down ?

also first VPN is initiate... and second is respond only... (I know respond only will not work at moment until I set the dyndns stuff correctly, but the first one should work... at least a status MUST be shown which is not the case ATM)

hope there is enough info.. else let me know...

thx
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 16 years ago in reply to BuBU

For Info using Standard Ethernet connection did not helped [:(]

problems remains..

thx
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 16 years ago in reply to BuBU

Thanks, BuBu. For the second picture in each post above, I meant the 'Connections' tab of 'Site-to-site >> IPsec', not the overview before selecting 'IPsec'.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 16 years ago in reply to BAlfson

Thanks, BuBu. For the second picture in each post above, I meant the 'Connections' tab of 'Site-to-site >> IPsec', not the overview before selecting 'IPsec'.

Cheers - Bob

Oh just seen that one of the feature I asked some time ago had been completed ! [[[[:)]]]]

to choose which interface is used for the IPSec site2site VPN [[[[:)]]]]

and of course it was set only on the PPPOE interface...

so changed it to the Fiber Interface which made things better...

then now using uplink mode and things seems working... but how to be sure that ipsec vpn is using the uplink interface ?

thx (sorry for the non bug [[[[:)]]]] )

thx BAlfson this made me point to my mistake...

and thx Astaro team to have replied to one of my query [[[[:)]]]]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 16 years ago in reply to BuBU

For info that was settings started from a backup from 7.4xx...

So for upgrade be carefull to update the right interface if there are or are no uplink interface... this will avoid to loose time (like I did) in searching where is the problem..

thx
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 BuBU over 16 years ago in reply to BuBU

For info that was settings started from a backup from 7.4xx...

So for upgrade be carefull to update the right interface if there are or are no uplink interface... this will avoid to loose time (like I did) in searching where is the problem..

thx
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 BuBU over 16 years ago in reply to BuBU

I finally re-open that one !

I just did a fresh install of 7.450 from scratch... with only internal network and a cable/modem dhcp connexion... and just created all IPSec site-2-site vpn and checked that te right interface is selected for ipsec...

but nothing appear in the IPSec VPN screen... [:(] and no logs....

will try to reboot soon...

Initially I did a full wizard process... then I removed all packet filter rules to only have Internal -> Any -> Internet

thx
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BuBU over 16 years ago in reply to BuBU

after reboot IPSec VPNs are shown and active...

so seems there seems to have problems with initial VPNs setup...

thx

edit1: for info initial test on first posts was made onto an Astaro ASG120 with a restored 7.40x backup... and last test is on a VM under latest VirtualBox (2.2.4)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

0 Astaro Beta Bot over 16 years ago in reply to BuBU

Astaro Beta Report
--------------------------------
Version: 7.450
Type: BUG
State: NOTABUG
Reporter: BuBU
Contributor: 
MantisID: 
--------------------------------