Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 20 replies
  • Subscribers 42 subscribers
  • Views 6756 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect 2.3 with disabled IPv6 component

Quallensaft

- upgraded our Windows Connect Clients from 2.2.9 to 2.3
- when now connecting with SSL VPN:

The client is connected (all is working) but the state in Sophos Connect will not switch to connected and stays in "is connecting"... -> not possible to disconnect anymore.

Client Log:

(...)
2024-05-17 09:32:30 add_route_ipv6(::/1 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(8000::/1 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(::/3 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(2000::/4 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(3000::/4 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(fc00::/7 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 Initialization Sequence Completed
2024-05-17 09:32:30 MANAGEMENT: >STATE:1715931150,CONNECTED,ROUTE_ERROR,192.168.50.6,[SSL VPN Gateway IP],443,,,2001:db8::5

- we have the problem on ANY our clients



This thread was automatically locked due to age.
Parents
  • 0

    Can you share your SSLVPN profile in SFOS? 

    __________________________________________________________________________________________________________________

  • 0 in reply to Quallensaft

    Those object in network, could you give us an overview about those elements. It looks like, some of those routes are off for Connect. 
    Could you give us also the log of a successful 2.2 connect client?

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    - just my internal /24 remote networks that are permitted (no changes made since upgrade)
    - with 2.29 same config, same client, same local network -> working -> LOG:

    (...)
    2024-05-17 12:21:18 add_route_ipv6(::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(8000::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(::/3 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(2000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(3000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 add_route_ipv6(fc00::/7 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
    2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
    2024-05-17 12:21:18 IPv6 route addition via service failed
    2024-05-17 12:21:18 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    2024-05-17 12:21:18 Initialization Sequence Completed
    2024-05-17 12:21:18 MANAGEMENT: >STATE:1715941278,CONNECTED,SUCCESS,192.168.50.68,[VPN GW address],443,,,2001:db8::4000:0:0:3

  • 0 in reply to Quallensaft

    Can you raise a support case as well and post the ID here?
    Those errors seems to be new in OpenVPN: https://github.com/angristan/openvpn-install/issues/1193 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    ID is: 07358965

    - meanwhile I will downgrade back to 2.2.9 Wink

Reply Children
Unfiltered HTML