This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect 2.3 with disabled IPv6 component

- upgraded our Windows Connect Clients from 2.2.9 to 2.3
- when now connecting with SSL VPN:

The client is connected (all is working) but the state in Sophos Connect will not switch to connected and stays in "is connecting"... -> not possible to disconnect anymore.

Client Log:

(...)
2024-05-17 09:32:30 add_route_ipv6(::/1 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(8000::/1 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(::/3 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(2000::/4 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(3000::/4 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 add_route_ipv6(fc00::/7 -> 2001:db8:: metric -1) IF 4
2024-05-17 09:32:30 ERROR: route addition failed using service: Element nicht gefunden. [status=1168 if_index=4]
2024-05-17 09:32:30 Initialization Sequence Completed
2024-05-17 09:32:30 MANAGEMENT: >STATE:1715931150,CONNECTED,ROUTE_ERROR,192.168.50.6,[SSL VPN Gateway IP],443,,,2001:db8::5

- we have the problem on ANY our clients

This thread was automatically locked due to age.

Top Replies

LuCar Toni 3 months ago in reply to K-M +3 verified

There was a KB released for this situation: https://support.sophos.com/support/s/article/KB-000046098?language=en_US

Parents

0 LuCar Toni 3 months ago

Can you share your SSLVPN profile in SFOS?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Quallensaft 3 months ago in reply to LuCar Toni
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 3 months ago in reply to Quallensaft

Those object in network, could you give us an overview about those elements. It looks like, some of those routes are off for Connect.
Could you give us also the log of a successful 2.2 connect client?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Quallensaft 3 months ago in reply to LuCar Toni

- just my internal /24 remote networks that are permitted (no changes made since upgrade)
- with 2.29 same config, same client, same local network -> working -> LOG:

(...)
2024-05-17 12:21:18 add_route_ipv6(::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
2024-05-17 12:21:18 IPv6 route addition via service failed
2024-05-17 12:21:18 add_route_ipv6(8000::/1 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
2024-05-17 12:21:18 IPv6 route addition via service failed
2024-05-17 12:21:18 add_route_ipv6(::/3 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
2024-05-17 12:21:18 IPv6 route addition via service failed
2024-05-17 12:21:18 add_route_ipv6(2000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
2024-05-17 12:21:18 IPv6 route addition via service failed
2024-05-17 12:21:18 add_route_ipv6(3000::/4 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
2024-05-17 12:21:18 IPv6 route addition via service failed
2024-05-17 12:21:18 add_route_ipv6(fc00::/7 -> 2001:db8:0:0:4000:: metric -1) dev Ethernet
2024-05-17 12:21:18 ROUTE: route addition failed using service: Element nicht gefunden. [status=1168 if_index=42]
2024-05-17 12:21:18 IPv6 route addition via service failed
2024-05-17 12:21:18 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-05-17 12:21:18 Initialization Sequence Completed
2024-05-17 12:21:18 MANAGEMENT: >STATE:1715941278,CONNECTED,SUCCESS,192.168.50.68,[VPN GW address],443,,,2001:db8::4000:0:0:3
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 3 months ago in reply to Quallensaft

Can you raise a support case as well and post the ID here?
Those errors seems to be new in OpenVPN: https://github.com/angristan/openvpn-install/issues/1193

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Quallensaft 3 months ago in reply to LuCar Toni

ID is: 07358965

- meanwhile I will downgrade back to 2.2.9
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 3 months ago in reply to Quallensaft

Thank you Quallensaft , will get this expedited on priority...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Quallensaft 3 months ago in reply to Vivek Jagad

Take your time. As long 2.2.9 is working it's OK for us.
Just wondering why no one else has this problem... (pretty default what we do here)
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 3 months ago in reply to Quallensaft

thanks will inform my team to re-produce in the labs too, will keep you posted...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Giridhar Katti 3 months ago in reply to LuCar Toni

The route add is failing only for the IPv6 routes. We will try to reproduce the issue locally.

Quallensaft - Can we try to lease only IPv4 and see if we hit the issue ? This is to check if the issue is specific to IPv6.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Giridhar Katti 3 months ago in reply to LuCar Toni

The route add is failing only for the IPv6 routes. We will try to reproduce the issue locally.

Quallensaft - Can we try to lease only IPv4 and see if we hit the issue ? This is to check if the issue is specific to IPv6.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data