Site2Site Problem - more connections

Hi Basti25,

this problem was raised already by Ben ( Feb 12th, 7:30 PM) . We are investigating this issue already.

Greetings
Holger

Hi Basti,

I' not able to reproduce your problem.

Can you pls provide more details about your setup? Does your setup work when only one tunnel is activated?

Cheers,
Kofi

Hi kofi,

I have got two Site2Site connections. One is connected. The other is idle. The connection from connection one works.

When I want to open the other connection both will close and in the logfile is the error. Auth Username/Password verification failed for peer. username attempted to change from 'REF_AaaUse1' to 'REF_AaaUse3' -- tunnel disabled

Connection One is a connection between two UTM and connection two is a connection from a linux server. The user / password configuration is on booth connections correct. REF_AaaUse1 and REF_AaaUse3.

If I would like to connect only from connection two and disable connection one the same issue, because the server tries to connect. Same issue: username attempted to change from 'REF_AaaUse1' to 'REF_AaaUse3' -- tunnel disabled

Hi Basti,

I'm sorry but there is no official support for linux server or any other 3rd party system for S2S connections. We only support S2S with UTMs.

Cheers,
Kofi

Do you use UDP? I ran into weird problems using UDP and multiple site-to-site connections recently.

Yes! Does it work with TCP?

Probably not. Your issue won't appear, but then you will run into the problem Holger Lehn mentioned above.
The latter is going to be solved in the next beta. This one is supposed to be solved by then.
So with the next beta at least multiple S2S TCP connections will work.

Hi,

this problem is solved in current UTM 9.4 release.

Thank you for testing and sharing your experience.

Grettings

Holger

Hi Holger,

I installed the latest beta update (9.375-5), but the problem is not solved yet.

2016:03:16-21:36:00 test123 openvpn[11910]: REF_AaaUse3/x.x.x.x:43968 PLUGIN_CALL: POST /usr/lib/openvpn/plugins/openvpn-plugin-utm.so/PLUGIN_AUTH_USER_PASS_VERIFY status=2
2016:03:16-21:36:00 test123 openvpn[11910]: REF_AaaUse3/x.x.x.x:43968 TLS Auth Error: username attempted to change from 'REF_AaaUse3' to 'REF_AaaUse1' -- tunnel disabled
2016:03:16-21:36:00 test123 openvpn[11910]: REF_AaaUse3/x.x.x.x:43968 TLS Auth Error: Auth Username/Password verification failed for peer

Or do I need a special configuration?

Greetings

basti

Yes, you're right. The fix didn't make it into 9.375. It will be in the soft-release of UTM 9.4.

Please check it out, it is scheduled to be released today if I'm not mistaken. =)