BUG: Site2Site SSL routes not used if more than 1 Connection is up

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

Ben — Wed, 09 Mar 2016 01:05:25 GMT

not sure where else to post this, but i have this bug with 9.355 (latest stable release) aswell,

didnt notice earlier because i have these site2sites just up for testing purposes.

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

Ben — Fri, 04 Mar 2016 01:45:45 GMT

can confirm, problem solved in beta2, all working now!

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

HeikoHund — Wed, 17 Feb 2016 04:01:06 GMT

Ok we fixed the issue, thanks for the report. Next Beta will work as expected.

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

Ben — Wed, 17 Feb 2016 03:58:47 GMT

Hi Kofi,
thanks for the update! Now please fix Ipv6 Prefix Delegation over PPPoE and i'll be happy ;-)

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

kofi — Wed, 17 Feb 2016 03:53:33 GMT

Hi Ben,

I just want to inform you that we can reproduce the issue and currently working on a fix.

Thanks for reporting this issue.

The plan is to have a fix in the next Beta.

Cheers,
Kofi

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

Ben — Fri, 12 Feb 2016 14:58:03 GMT

TCP. My home sophos with 9.4 beta is server for 2 connections that are affected, 1 as client i use over ipv6. The two connections not over ipv6 that connect via ipv4 as clients run the latest 9.3 firmware.

this is my Site2Site Overview:

if i toggle either one of the IPv4 Site2Site off (the one for 192.168.20.0/24 or 192.168.22.0/24) i can access the other one and vice versa -> more specific, the one ssl vpn connection that got established first is useable. BONUS Info: traceroute shows that the connection that is not pingable on the UTM IP (for example 192.168.20.100) is trying to get routed outside over WAN so it seems home sophos utm doesnt set a route for the network. It is not pingable directly on the sophos either.

The IPsec i got up and the IPv6 Connection seem unaffected by either of these.

I am willing to provide access if needed if its over the weekend via webadmin, ssh or teamviewer if any dev wants to have a look.

I was able to access both 192.168.20.0/24 and 192.168.22.0/24 when i was on latest 9.3 release.

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

HeikoHund — Fri, 12 Feb 2016 11:44:15 GMT

Do you use TCP or UDP? What type are the two connections client or server?

RE: BUG: Site2Site SSL routes not used if more than 1 Connection is up

HolgerLehn — Fri, 12 Feb 2016 09:58:02 GMT

Hi Ben,

thank you for your post. We will check this issue with development. As soon as I receive an update, I will come back to you.

Greetings
Holger