This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Solved] SSL VPN : can't access the internet after 1 hour of use

Mueller over 4 years ago

#solved

This issue has been solved, caused by a very simple configuration.

Authentication -> Services -> Global settings -> Maximum session timeout: Default is 60Minutes.

Change it to unlimited, there is no problem.

Dear,

I configured the SSLVPN in XG210, can access the internet & intranet after connection.

But after using VPN for an hour each time, the internet can't be access, Chrome shows the following error.

The intranet access is OK.

Windows is used the OpenVPN client, Mac is used the tunnblick, they all have this problem

Which config shoud I check? No connection errors seen in logs

Is it bug? Firware version is SFOS 17.5.8 MR-8

Thank you.

This thread was automatically locked due to age.

Parents

0 lferrara over 4 years ago

Mueller,

are you still connected in the VPN tunnel?

Are you able to ping remote lan resources when this occur?

I recommed you to upgrade to MR9 also.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mueller over 4 years ago in reply to lferrara

lferrara,

Thank you.

Yes, still connected in the VPN tunnel, the LAN resources is OK, only can't access the WAN resources.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Mueller

Is the disconnect idle clients enabled on the VPN SSL?

Try to disable it.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Mueller over 4 years ago in reply to lferrara

I have disabled it, still has this issue
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 4 years ago in reply to Mueller

Did you try now or already in the previous days?

When you change the option, clients need to disconnect and reconnect to reflect the change.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Mueller over 4 years ago in reply to lferrara

I have tested these possible configurations before, but all have this problem.

I guess it should be OK with the setting of SSL VPN, because I can still access internal resources, such as the portal of XG210 and other LAN devices.

We have two WAN line, I use one WAN line for SSL VPN connect, then the VPN client access internet from other WAN line.

The following is the configuration of Firewall. Could you please help to check if it has problem?

Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mueller over 4 years ago in reply to lferrara

lferrara,

this issue has been solved, Maximum session timeout of Authentication's Services defalut is 60Min.

Thanks for your help
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Mueller over 4 years ago in reply to lferrara

lferrara,

this issue has been solved, Maximum session timeout of Authentication's Services defalut is 60Min.

Thanks for your help
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data