Hello,
This has been going on for a little over a month now and seems to be getting worse.
We have a RED 50 connected to our UTM 220 and following recent firmware upgrades (I think) it has become unstable. I see lots of other similar cases out there quoting similar issues.
Starts like this;
SSL accept attempt failed with unknown error error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
Overflow happened on reds1:0
Missing keepalive from reds1:0
This can go on from 10 minutes to an hour at times. The Tunnel drops out and it cycles through trying to reconnect. It also appears to try and do a firmware update and doesn't ever get to the end. I think it has 7 stages and I'm told it doesn't get half of them.
The firmware on the box reads: "5.038" if that makes sense to anyone. (not me) We are running 9.411-3 on our UTM and at this point things are not really stable.
You never know when or how long it might go down the next time. There is no rhyme or reason to the timing of it.
One of a few things I want to know is;
1) Is there is a fix coming?
2) Can you manually update a RED 50 from the box?
3) Is there a way to read the log file on the box remotely or see what is really going on?
Here is the actual clip from the log file minus the RED ID and the IP address;
2017:03:28-13:39:13 ansutm red_server[12673]: A3400missing#sC: PONG local_tx=0 2017:03:28-13:39:16 ansutm red_server[27476]: A3400missing#sC: seems to be still connected, exiting. 2017:03:28-13:39:16 ansutm red_server[27535]: Self: SSL accept attempt failed with unknown error error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 2017:03:28-13:39:21 ansutm red_server[12673]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="A3400missing#sC" forced="1" 2017:03:28-13:39:21 ansutm red_server[12673]: A3400missing#sC is disconnected. 2017:03:28-13:39:21 ansutm red2ctl[4268]: Overflow happened on reds1:0 2017:03:28-13:39:21 ansutm red2ctl[4268]: Missing keepalive from reds1:0, disabling peer 00.00.000.000
2017:03:28-13:39:27 ansutm red2ctl[4268]: Received keepalive from reds1:0, enabling peer 00.00.000.000
2017:03:28-13:39:28 ansutm red_server[4259]: SELF: (Re-)loading device configurations 2017:03:28-13:40:19 ansutm red_server[28151]: Self: SSL accept attempt failed with unknown error error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 2017:03:28-13:47:08 ansutm red_server[29916]: Self: SSL accept attempt failed with unknown error error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 2017:03:28-13:51:13 ansutm red_server[31048]: Self: SSL accept attempt failed with unknown error error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 2017:03:28-14:00:57 ansutm red_server[1649]: SELF: New connection from 00.00.000.000 with ID A3400missing#sC (cipher AES256-GCM-SHA384), rev1<30>Mar 28 14:00:58 red_server[1649]: A3400missing#sC: connected OK, pushing config 2017:03:28-14:01:29 ansutm red_server[1649]: A3400missing#sC: No ping for 30 seconds, exiting. 2017:03:28-14:01:29 ansutm red_server[1649]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="A3400missing#sC" forced="0" 2017:03:28-14:01:29 ansutm red_server[1649]: A3400missing#sC is disconnected. 2017:03:28-14:02:05 ansutm red_server[1989]: Self: SSL accept attempt failed with unknown error error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 2017:03:28-14:07:48 ansutm red_server[4259]: SELF: (Re-)loading device configurations 2017:03:28-14:15:59 ansutm red_server[6695]: Self: SSL accept attempt failed with unknown error error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 2017:03:28-14:20:53 ansutm red_server[8081]: SELF: New connection from 00.00.000.000 with ID A3400missing#sC (cipher AES256-GCM-SHA384), rev1<30>Mar 28 14:20:53 red_server[8081]: A3400missing#sC: connected OK, pushing config 2017:03:28-14:20:56 ansutm red_server[8081]: A3400missing#sC: command 'UMTS_STATUS value=OK' 2017:03:28-14:20:56 ansutm red_server[8081]: A3400missing#sC: command 'PORTSTATE 1E04,1004,1004,1004,1E04' 2017:03:28-14:20:56 ansutm red_server[8081]: A3400missing#sC: PORTSTATE LAN1: 1Gb/s,LAN2: Down,LAN3: Down,LAN4: Down 2017:03:28-14:20:56 ansutm red_server[8081]: A3400missing#sC: command 'PING 0 uplink=WAN uplinkstate=0' 2017:03:28-14:20:56 ansutm red_server[8081]: id="4201" severity="info" sys="System" sub="RED" name="RED Tunnel Up" red_id="A3400missing#sC" forced="0" 2017:03:28-14:20:56 ansutm red_server[8081]: A3400missing#sC: PING remote_tx=0 local_rx=0 diff=0 2017:03:28-14:20:56 ansutm red_server[8081]: A3400missing#sC: PONG local_tx=0 2017:03:28-14:20:57 ansutm red2ctl[4268]: Overflow happened on reds1:0 2017:03:28-14:20:57 ansutm red2ctl[4268]: Missing keepalive from reds1:0, disabling peer 00.00.000.000 2017:03:28-14:21:00 ansutm red2ctl[4268]: Received keepalive from reds1:0, enabling peer 00.00.000.000
2017:03:28-14:21:03 ansutm red_server[4259]: SELF: (Re-)loading device configurations 2017:03:28-14:21:12 ansutm red_server[8081]: A3400missing#sC: command 'PORTSTATE 1E04,1004,1004,1004,1E04' 2017:03:28-14:21:12 ansutm red_server[8081]: A3400missing#sC: PORTSTATE LAN1: 1Gb/s,LAN2: Down,LAN3: Down,LAN4: Down 2017:03:28-14:21:12 ansutm red_server[8081]: A3400missing#sC: command 'PING 0 uplink=WAN uplinkstate=0' 2017:03:28-14:21:12 ansutm red_server[8081]: A3400missing#sC: PING remote_tx=0 local_rx=0 diff=0 2017:03:28-14:21:12 ansutm red_server[8081]: A3400missing#sC: PONG local_tx=0
One of the things I did a short time ago today was disable the "Low" Firewall setting on both modems in front of the UTM and the RED. Both of these devices are using a DSL Modem from Century Link one is: ZyXEL C1100Z and the other is: technicolor C2000T.
Hope this helps! (I have not started a case on this yet)
Looking forward to a quick and easy fix!
Thanks,
Mark
This thread was automatically locked due to age.
