This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ssl vpn loose route

It looks strange for me since some months, if I connect from a windows xp SSL-VPN remote to the central site, I always loose the route.
Version is 7.402 and ASG320.

PC is windows xp sp3 and all fixes no Antivirus (for Testtime). Novell Client 4.91SP5.
I make a SSL-VPN connection to the corporate Site this connection comes up (green light), but if I check at the cmd with route print, there is no point to point route from the SSL-VPN net, summary it is not possible to ping any IP at the LAN site.
I removed the netware client from the windows xp PC, after that SSL-VPN works okay, because there is a P2P route.
I Installed the Novell Client once again on this PC and the the SSL-VPN route is still gone, no ping to the LAN site.
It is interest because this Novell Client is installed since more then 8 months now and the problems are there since 4 months.[:S]

This thread was automatically locked due to age.

Parents

0 MaxPalue over 16 years ago

It looks strange for me since some months, if I connect from a windows xp SSL-VPN remote to the central site, I always loose the route.
Version is 7.402 and ASG320.

PC is windows xp sp3 and all fixes no Antivirus (for Testtime). Novell Client 4.91SP5.
I make a SSL-VPN connection to the corporate Site this connection comes up (green light), but if I check at the cmd with route print, there is no point to point route from the SSL-VPN net, summary it is not possible to ping any IP at the LAN site.
I removed the netware client from the windows xp PC, after that SSL-VPN works okay, because there is a P2P route.
I Installed the Novell Client once again on this PC and the the SSL-VPN route is still gone, no ping to the LAN site.
It is interest because this Novell Client is installed since more then 8 months now and the problems are there since 4 months.[:S]

Hi,

I am using Novell Client 4.91.SP5 on my notebook and I have the same problem. I found no solution yet
Cancel
Vote Up 0 Vote Down

Cancel
0 akgolx over 16 years ago in reply to MaxPalue

I have tested some possibilities also that with
route-method exe
route-delay 2
without success.
Now I found out, if I disable under Lan-card --> Authentification --> IEEE 802.1X Authentification my problem seems to be solved.
I checked this on different PCs and after I disable that point, it was working fine. At the moment I do not need this IEEE 802.1X, so I have a workaround.
I think, I have to open a call by novell.
Cancel
Vote Up 0 Vote Down

Cancel
0 lester over 16 years ago in reply to akgolx
Hi,
I had the same problem with vpn-ssl.
I made to fix this :
- i have added in /var/openvpn/client/client.ovpn-default at the end of the file
route-up "ipconfig -registerdns"

this fix had solved my problem
Cancel
Vote Up 0 Vote Down

Cancel
0 eganders_01 over 16 years ago in reply to akgolx

I have tested some possibilities also that with
route-method exe
route-delay 2
without success.

Some have also had success bumping the route-delay up to 20
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 eganders_01 over 16 years ago in reply to akgolx

I have tested some possibilities also that with
route-method exe
route-delay 2
without success.

Some have also had success bumping the route-delay up to 20
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 16 years ago in reply to eganders_01

Searchig here on registerdns, I found this post from jasgomes: https://community.sophos.com/products/unified-threat-management/astaroorg/f/58/p/53075/192725#192725.

I suspect that Lester's experience confirms that his is the right fix for akgolx

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 akgolx over 16 years ago in reply to BAlfson

Hi,

thank you for your response.
I tried the entry for -registerdns. After I added this I deployed the ssl-vpn once more from the server. I could see in the ssl-vpn log that this entry is working, but my route was gone after 3 to 5 seconds.
After ssl-vpn ist connected (green light) I can see the correct route and also at the ssl-vpn log I can see that the route was added, but what I mentioned before after 3 to 5 seconds vpn route is gone.

The only thing what is working for me is to disable IEEE...
I tried the same on a really fresh installed pc, winxppro+sp3 no Antivirus no Novell client and IEEE enabled--> it is working. After installing novell netware client it is only working with IEEE on the ssl-vpn NIC disabled.[:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to akgolx

Now try putting in the commands as per eganders above. One of the Astaro folks commented that you might need 20 or even a lot higher on some machines.
Cancel
Vote Up 0 Vote Down

Cancel
0 eganders_01 over 16 years ago in reply to BAlfson

And try it with the 2.16RC version from Welcome to OpenVPN
Cancel
Vote Up 0 Vote Down

Cancel
0 akgolx over 16 years ago in reply to eganders_01

Hi,
thank you for your suggestion. I tried all, also with the new openvpn client, but without success. I tried it also on a new installed windows xp pc and it is always the same. The only workaround that is working for me, to disable IEE.. at the TAP Interface.
I opened a call to Astaro support, but they think the problem is the netware client ??.
Cancel
Vote Up 0 Vote Down

Cancel