Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
Hallo zusammen
Wir bekommen es leider nicht hin eine L2TP Verbindung zwischen unserer XG und Windows 10 herzustellen.
Die Verbindung wird sofort hergestellt und sofort wieder getrennt:
Der Windows 10 PC meldet: "Die Verbindung wurde vom Remotecomputer beendet, bevor sie vollständig hergestellt werden konnte"
Das L2TP-Log der XG Console sagt:
xl2tpd[1347]: start_pppd: I'm running:
xl2tpd[1347]: "/bin/pppd"
xl2tpd[1347]: "/dev/pts/2"
xl2tpd[1347]: "ipparam"
xl2tpd[1347]: "l2tp#80.187.66.24"
xl2tpd[1347]: "passive"
xl2tpd[1347]: "nodetach"
xl2tpd[1347]: "XXX.XXX.XXX.XXX:0.0.0.0"
xl2tpd[1347]: "auth"
xl2tpd[1347]: "name"
xl2tpd[1347]: "cyberoamserver"
xl2tpd[1347]: "debug"
xl2tpd[1347]: "file"
xl2tpd[1347]: "/cfs/options.l2tpd"
xl2tpd[1347]: Call established with 80.187.66.24, PID: 16136, Local: 57386, Remo
te: 1, Serial: 0
xl2tpd[1347]: control_finish: Connection closed to 80.187.66.24, serial 0 ()
xl2tpd[1347]: Terminating pppd: sending TERM signal to pid 16136
xl2tpd[1347]: control_finish: Connection closed to 80.187.66.24, port 1701 (), L
ocal: 44966, Remote: 6
Das IPSec Log sagt:
2021-11-22 10:12:26 23[APP] [COP-UPDOWN] (do_cop_updown_invoke_once) ---- exec s
ubnet updown -- down --
2021-11-22 10:12:26 23[APP] [COP-UPDOWN] (do_cop_updown_invoke_once) [IPSEC0] us
ing ipsec dummy interface 'ipsec0'
2021-11-22 10:12:26 23[APP] [COP-UPDOWN][NET] (get_src_ip) source address for 21
7.6.108.99 is IP: 217.6.108.99
2021-11-22 10:12:26 23[APP]
2021-11-22 10:12:26 23[APP] [COP-UPDOWN][SHELL] (run_shell) 'ip route del 80.187
.66.24/32 dev ipsec0 src XXX.XXX.XXX.XXX table 220': success 0
2021-11-22 10:12:26 23[APP] [COP-UPDOWN] (add_routes) no routes to del for VPN_R
oadwarrior on interface ipsec0
2021-11-22 10:12:26 23[APP] [COP-UPDOWN][SHELL] (run_shell) 'ip route flush cach
e': success 0
2021-11-22 10:12:26 23[APP] [COP-UPDOWN][SHELL] (run_shell) 'ip route flush cach
e': success 0
2021-11-22 10:12:26 23[APP] [COP-UPDOWN][SHELL] (run_shell) '/bin/service fwm:vp
n_connection_chains -t json -s nosync -b '{"me":"XXX.XXX.XXX.XXX","peer":"80.187.66
.24","mynet":"XXX.XXX.XXX.XXX/32","peernet":"80.187.66.24/32","connop":"0","iface":
"unknown","myproto":"17","myport":"1701","peerproto":"17","peerport":"1701","con
ntype":"hth","actnet":"","compress":"0","conn_id":"3"}'': error returned 255
2021-11-22 10:12:26 23[APP] [COP-UPDOWN][SHELL] (run_shell) '/bin/opcode set_tim
er_mail_updown -s nosync -t json -b '{"event":"down","conn":"VPN_Roadwarrior","l
ocal_net":"217.6.108.99","remote_net":"80.187.66.24","reason":"0"}'': success 0
Es handelt sich um Windows 10 Pro PCs, es wurden folgende Anleitungen der Sophos Community verwendet.Die ersten Tests waren mit Windows AD Usern und PreShared Keys
Danke für jeden Tipp ;-)
Gruß Alex
Quote