This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

cannot install eroute -- it is in use

We are having issues with our VPN networks, every few days one is randomly dropping out.

Looking at the live log is is being rejected - cannot install eroute -- it is in use

I can confirm the connection is down and the connection state screen shows Error: No Connection.

This only started a few releases ago and had expected it to be a bug fix and resolved, but so far it hasn't.

We can resolve the issue when it happens by removing the network from the gateway list and re-inserting.  The VPN then reconnects without dropping any of the already established VPN's.

Does anybody know if this is a bug, mis-configuration, known issue or any workaround?

Thanks.


This thread was automatically locked due to age.
  • I've seen a similar error when a VPN connection drops out on one end, but not at the main Astaro end... when a reconnect is attempted, it won't work because of the eroute problem.  Have you tried disabling then re-enabling IPSEC.... if this temporarily corrects it, then it's probably the same problem I've run into... the new version that's coming out is supposed to address this.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • I am reluctant to disable and re-enable IPSec as expect this would drop all the VPN's.  Simply removing the affected one from the gateway list and re-adding it seems to be a cleaner solution.  The live log shows the VPN's being re-enumerated and the dropped VPN connects without disconnecting the existing connected ones.

    We use dynamic IP's for the connecting VPN's.  I wonder if this is a memory issue as the reconnection would be from a different IP.

    Is this listed on the known issues list?
  • I don't know if it's on the KIL, but my issue is at least on their internal list, as they specifically told me that it will be fixed (a timeout issue) in 7.200.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.