Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 38 subscribers
  • Views 844 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

L2TP PSK issue

Ben@Network

Hello Community,

I have a strange issue with the L2TP PSK on one Firewall. I set the PSK  in the L2TP configuration on XG. The users can connect and have access to the network. After a while the users are unable to connect. On their Client they get an error message that the connection is not possible. I did some investigations about that and saw that the PSK on the Firewall has changed. When I check preshared key in the L2TP settings I see a long encrypted key starting with "$sfos$....". After I set my PSK again the users can connect. Now the encrypted key is shorter. So something will change the PSK on the firewall.

What is the reason for this behavior?

The Firewall runs on v18-MR5 but I had the same issue with MR4.

Thanks,

Ben



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Ben@Network,

    Thanks for reaching out to the Community!

    Could you confirm if SSMK(Secure Storage Master Key) is configured on your firewall?

    The SSMK(Secure Storage Master Key) could encrypt the IPsec/L2TP preshared key.

    Would it be possible for you to provide the strongswan and L2TP logs? Did you open a support case for this issue?  If not, please open a support case and send me the case number via personal message.

    Thanks,

Reply
  • FormerMember
    0 FormerMember

    Hi Ben@Network,

    Thanks for reaching out to the Community!

    Could you confirm if SSMK(Secure Storage Master Key) is configured on your firewall?

    The SSMK(Secure Storage Master Key) could encrypt the IPsec/L2TP preshared key.

    Would it be possible for you to provide the strongswan and L2TP logs? Did you open a support case for this issue?  If not, please open a support case and send me the case number via personal message.

    Thanks,

Children
Unfiltered HTML