This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XGS4500 (SFOS 20.0.2 MR-2-Build378) after Firmware update from 20GA to MR2 stays dead

Hello Sophos Community,

we just updated two XGS4500 (in HA) to 20 MR2 and now the SSLVPN stays dead:

After checking the admin interfance I logged into the shell:

I used the command: service sslvpn:restart -ds nosync

503 Service Failed

We don't use SSLVPN (for now) but still we would like to know what we can do to get this service up again and running.

Thanks for your help

This thread was automatically locked due to age.

Top Replies

Mayur Makvana 3 months ago in reply to Speedfish +3 verified

Hello, I believe you must increase the lease range: 2024-08-10 10:07:59Z [19479] IPv4 pool size is too small (1), must be at least 2 2024-08-10 10:07:59Z [19479] Exiting due to fatal error

Parents

0 Mayur Makvana 3 months ago

Hello,

Thank you for contacting Sophos Community.

Could you please share us the sslvpn.log while starting the service?

You can collect using below:

tail -f /log/sslvpn.log

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Speedfish 3 months ago in reply to Mayur Makvana

2024-08-10 10:07:59Z [19479] TCPv6_SERVER link remote: [AF_UNSPEC]
2024-08-10 10:07:59Z [19479] MULTI: multi_init called, r=256 v=256
2024-08-10 10:07:59Z [19479] IPv4 pool size is too small (1), must be at least 2
2024-08-10 10:07:59Z [19479] Exiting due to fatal error
2024-08-10 10:07:59Z [19479] Closing TUN/TAP interface
2024-08-10 10:07:59Z [19479] /sbin/ip addr del dev tun6 10.242.2.249/30

So I assume its due to an inactive sslvpn configuration right?
If I delete it or disable the service then it should fine I guess
Cancel
Vote Up 0 Vote Down

Cancel
+1 Mayur Makvana 3 months ago in reply to Speedfish

Hello,

I believe you must increase the lease range:

2024-08-10 10:07:59Z [19479] IPv4 pool size is too small (1), must be at least 2
2024-08-10 10:07:59Z [19479] Exiting due to fatal error

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +3 Vote Down

Cancel

Reply

+1 Mayur Makvana 3 months ago in reply to Speedfish

Hello,

I believe you must increase the lease range:

2024-08-10 10:07:59Z [19479] IPv4 pool size is too small (1), must be at least 2
2024-08-10 10:07:59Z [19479] Exiting due to fatal error

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +3 Vote Down

Cancel

Children

0 Speedfish 3 months ago in reply to Mayur Makvana

Yes we had a wrong SSL VPN global setting.
Now the service is running again without errors.
Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 Mayur Makvana 3 months ago in reply to Speedfish

Hello,

Thank you for sharing the update and we are glad to know that the service shows running.

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel