[7.460][QUESTION][ANSWERED] SSL VPN not working as expected

since I made the update from 7500 to this version SSL VPN doesnt connect.
here is the log:

2009:07:06-15:53:59 firewall openvpn[22880]: 81.193.124.59:3905 Data Channel MTU parms [ L:1554 D:1450 EF:54 EB:135 ET:0 EL:0 AF:3/1 ]
2009:07:06-15:53:59 firewall openvpn[22880]: 81.193.124.59:3905 Local Options hash (VER=V4): 'df0e0494'
2009:07:06-15:53:59 firewall openvpn[22880]: 81.193.124.59:3905 Expected Remote Options hash (VER=V4): 'a75583f2'
2009:07:06-15:54:01 firewall openvpn[22880]: read UDPv4 [CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH]: No route to host (code=113)
2009:07:06-15:54:06 firewall openvpn[22880]: read UDPv4 [CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH]: No route to host (code=113)
2009:07:06-15:54:10 firewall openvpn[22880]: read UDPv4 [CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH]: No route to host (code=113)
2009:07:06-15:54:14 firewall openvpn[22880]: read UDPv4 [CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH|CMSG=8|EHOSTUNREACH]: No route to host (code=113)
2009:07:06-15:54:16 firewall openvpn[22880]: 81.193.124.59:3814 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2009:07:06-15:54:16 firewall openvpn[22880]: 81.193.124.59:3814 TLS Error: TLS handshake failed

When does ASTARO releases the final version? this one have to many bugs...and more then a month passes from the initial release

Parents

0 BAlfson over 16 years ago

Did you try 'Network Services >> DNS' 'Global' tab [Flush resolver cache now]?

If that doesn't work, then I'd say there's a configuration error... like maybe the hostname was changed at some point?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 BAlfson over 16 years ago

Did you try 'Network Services >> DNS' 'Global' tab [Flush resolver cache now]?

If that doesn't work, then I'd say there's a configuration error... like maybe the hostname was changed at some point?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 gnomme over 16 years ago in reply to BAlfson

Did you try 'Network Services >> DNS' 'Global' tab [Flush resolver cache now]?

If that doesn't work, then I'd say there's a configuration error... like maybe the hostname was changed at some point?

Cheers - Bob

I also reboot the firewall!
No no no...I simply had imported the old configs...and it should work. its a bug
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 16 years ago in reply to gnomme

I've complained that a reboot seems necessary after restoring. Do you see the problem after a reboot?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 gnomme over 16 years ago in reply to BAlfson

I've complained that a reboot seems necessary after restoring. Do you see the problem after a reboot?

yes...no connection after reboot!
Now it is working but with the old version of ASG
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BAlfson over 16 years ago in reply to gnomme

Sorry, I can't confirm that. The only SSL VPN I've tried with my test unit was a site-to-site created after installing 7.460. It would be interesting if you could disable the one you've restored and create a new, identical one. Does that work?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 gnomme over 16 years ago in reply to BAlfson

Sorry, I can't confirm that. The only SSL VPN I've tried with my test unit was a site-to-site created after installing 7.460. It would be interesting if you could disable the one you've restored and create a new, identical one. Does that work?

Cheers - Bob

this version is very buggy. I returned to my 7450 until another update version corrects all this bugs that are so many and in crucial services that I need. Also my Cisco VPN of Iphone doesn´t work in the 7500 and in 7450 it works just fine.

I think you should change the title of this post, from question to bug or whatever

thanks bob
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel