This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RED15 SYSSTATE unstable peer using stabilization timeout 30

We have 10 RED15 on an SG310 HA Cluster.

2 of them are connected over an Versatel static IP Internet Connection the other 8 over Telecom and Deutsche Glasfaser.

Since yesterday morning the 2 RED15s on the Versatel internte connection are making problems, see the attached log output.

Versatel support said that there is no problem with the internet connection, but all other REDs are working without problems.

The 2 REDs on the Versatel line are reconnecting every Minute or two and no one can work behind them.

What is wrong?

What can i do to repair it?

 

2017:10:24-09:00:44 sophos-internet-1 red_server[24184]: XXX: command 'SYSSTATE unstable peer using stabilization timeout 30'
2017:10:24-09:00:44 sophos-internet-1 red_server[24184]: XXX: command 'CON_CLOSE reason=no_peer'
2017:10:24-09:00:48 sophos-internet-1 red_server[25780]: SELF: New connection from xxx.xxx.xxx.xxx with ID XXX(cipher AES256-GCM-SHA384), rev1
2017:10:24-09:00:48 sophos-internet-1 red_server[25780]: XXX: already connected, releasing old connection.
2017:10:24-09:00:48 sophos-internet-1 red_server[24184]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="XXX" forced="1"
2017:10:24-09:00:48 sophos-internet-1 red_server[24184]: XXX is disconnected.
2017:10:24-09:00:49 sophos-internet-1 red_server[25780]: XXX: connected OK, pushing config
2017:10:24-09:00:53 sophos-internet-1 red_server[25780]: XXX: command 'UMTS_STATUS value=OK'
2017:10:24-09:00:54 sophos-internet-1 red_server[25780]: XXX: command 'PING 0 uplink=WAN'
2017:10:24-09:00:54 sophos-internet-1 red_server[25780]: id="4201" severity="info" sys="System" sub="RED" name="RED Tunnel Up" red_id="XXX" forced="0"
2017:10:24-09:00:54 sophos-internet-1 red_server[25780]: XXX: PING remote_tx=0 local_rx=0 diff=0
2017:10:24-09:00:54 sophos-internet-1 red_server[25780]: XXX: PONG local_tx=0
2017:10:24-09:01:08 sophos-internet-1 red_server[25780]: XXX: command 'PING 0 uplink=WAN'
2017:10:24-09:01:08 sophos-internet-1 red_server[25780]: XXX: PING remote_tx=0 local_rx=0 diff=0
2017:10:24-09:01:08 sophos-internet-1 red_server[25780]: XXX: PONG local_tx=0
2017:10:24-09:01:23 sophos-internet-1 red_server[25780]: XXX: command 'PING 0 uplink=WAN'
2017:10:24-09:01:23 sophos-internet-1 red_server[25780]: XXX: PING remote_tx=0 local_rx=0 diff=0
2017:10:24-09:01:23 sophos-internet-1 red_server[25780]: XXX: PONG local_tx=0
2017:10:24-09:01:24 sophos-internet-1 red_server[25780]: XXX: command 'SYSSTATE unstable peer using stabilization timeout 30'
2017:10:24-09:01:24 sophos-internet-1 red_server[25780]: XXX: command 'CON_CLOSE reason=no_peer'
2017:10:24-09:01:28 sophos-internet-1 red_server[26938]: SELF: New connection from xxx.xxx.xxx.xxx with ID XXX(cipher AES256-GCM-SHA384), rev1
2017:10:24-09:01:28 sophos-internet-1 red_server[26938]: XXX: already connected, releasing old connection.
2017:10:24-09:01:28 sophos-internet-1 red_server[25780]: id="4202" severity="info" sys="System" sub="RED" name="RED Tunnel Down" red_id="XXX" forced="1"
2017:10:24-09:01:28 sophos-internet-1 red_server[25780]: XXX is disconnected.
2017:10:24-09:01:29 sophos-internet-1 red_server[26938]: XXX: connected OK, pushing config
2017:10:24-09:01:34 sophos-internet-1 red_server[26938]: XXX: command 'UMTS_STATUS value=OK'
2017:10:24-09:01:34 sophos-internet-1 red_server[26938]: XXX: command 'PING 0 uplink=WAN'
2017:10:24-09:01:34 sophos-internet-1 red_server[26938]: id="4201" severity="info" sys="System" sub="RED" name="RED Tunnel Up" red_id="XXX" forced="0"
2017:10:24-09:01:34 sophos-internet-1 red_server[26938]: XXX: PING remote_tx=0 local_rx=0 diff=0
2017:10:24-09:01:34 sophos-internet-1 red_server[26938]: XXX: PONG local_tx=0


This thread was automatically locked due to age.
Parents
  • when i look in the kernel logs i find this:

     

    2017:10:24-20:04:07 sophos-internet-1 kernel: [361809.211357] reds6: RX decryption failed

    2017:10:24-20:04:08 sophos-internet-1 kernel: [361809.710913] reds6: RX decryption failed

    2017:10:24-20:04:08 sophos-internet-1 kernel: [361810.210519] reds6: RX decryption failed

    2017:10:24-20:04:09 sophos-internet-1 kernel: [361810.710085] reds6: RX decryption failed

    2017:10:24-20:04:09 sophos-internet-1 kernel: [361811.209507] reds6: RX decryption failed

    2017:10:24-20:04:10 sophos-internet-1 kernel: [361812.630662] reds7: auto-removing peer XXX.XXX.XXX.XXX:3410

    2017:10:24-20:04:53 sophos-internet-1 kernel: [361854.787477] reds6: auto-removing peer XXX.XXX.XXX.XXX:3410

    2017:10:24-20:04:59 sophos-internet-1 kernel: [361861.031151] reds7: Autoadd peer 0 (from XXX.XXX.XXX.XXX:3410 to XXX.XXX.XXX.XXX:3410)

    2017:10:24-20:05:25 sophos-internet-1 kernel: [361887.266672] net_ratelimit: 4 callbacks suppressed

    2017:10:24-20:05:37 sophos-internet-1 kernel: [361898.994604] reds7: Autoadd peer 0 (from XXX.XXX.XXX.XXX:3410 to XXX.XXX.XXX.XXX:3410)

    2017:10:24-20:05:38 sophos-internet-1 kernel: [361899.993847] reds7: RX decryption failed

    2017:10:24-20:05:38 sophos-internet-1 kernel: [361900.493127] reds7: RX decryption failed

    2017:10:24-20:05:39 sophos-internet-1 kernel: [361900.993137] reds7: RX decryption failed

    2017:10:24-20:05:39 sophos-internet-1 kernel: [361901.492399] reds7: RX decryption failed

    2017:10:24-20:05:40 sophos-internet-1 kernel: [361901.875879] reds6: Autoadd peer 0 (from XXX.XXX.XXX.XXX:3410 to XXX.XXX.XXX.XXX:3410)

Reply
  • when i look in the kernel logs i find this:

     

    2017:10:24-20:04:07 sophos-internet-1 kernel: [361809.211357] reds6: RX decryption failed

    2017:10:24-20:04:08 sophos-internet-1 kernel: [361809.710913] reds6: RX decryption failed

    2017:10:24-20:04:08 sophos-internet-1 kernel: [361810.210519] reds6: RX decryption failed

    2017:10:24-20:04:09 sophos-internet-1 kernel: [361810.710085] reds6: RX decryption failed

    2017:10:24-20:04:09 sophos-internet-1 kernel: [361811.209507] reds6: RX decryption failed

    2017:10:24-20:04:10 sophos-internet-1 kernel: [361812.630662] reds7: auto-removing peer XXX.XXX.XXX.XXX:3410

    2017:10:24-20:04:53 sophos-internet-1 kernel: [361854.787477] reds6: auto-removing peer XXX.XXX.XXX.XXX:3410

    2017:10:24-20:04:59 sophos-internet-1 kernel: [361861.031151] reds7: Autoadd peer 0 (from XXX.XXX.XXX.XXX:3410 to XXX.XXX.XXX.XXX:3410)

    2017:10:24-20:05:25 sophos-internet-1 kernel: [361887.266672] net_ratelimit: 4 callbacks suppressed

    2017:10:24-20:05:37 sophos-internet-1 kernel: [361898.994604] reds7: Autoadd peer 0 (from XXX.XXX.XXX.XXX:3410 to XXX.XXX.XXX.XXX:3410)

    2017:10:24-20:05:38 sophos-internet-1 kernel: [361899.993847] reds7: RX decryption failed

    2017:10:24-20:05:38 sophos-internet-1 kernel: [361900.493127] reds7: RX decryption failed

    2017:10:24-20:05:39 sophos-internet-1 kernel: [361900.993137] reds7: RX decryption failed

    2017:10:24-20:05:39 sophos-internet-1 kernel: [361901.492399] reds7: RX decryption failed

    2017:10:24-20:05:40 sophos-internet-1 kernel: [361901.875879] reds6: Autoadd peer 0 (from XXX.XXX.XXX.XXX:3410 to XXX.XXX.XXX.XXX:3410)

Children
No Data