SSL VPN UP but no traffic - intermittent

Question

Hi,

I'm setting VPN SSL tunnel for my salespersons (win10 + 4g network)

I use forticlient to connect, with split tunneling.

The laptop is connected via Wifi to a 4G mobile access point.

The firewall is a FG100D

Quite frequently, the connection goes well, tunnel is connected, but no traffic go through.

I have to disconnect the tunnel with forticlient, then reconnect, (sometimes more than once), and finally it's working fine.

(I tried to use the SSL VPN GATEWAY, to launch an RDP session, without FORTICLIENT installed, and it seems to work flawlessly in the same condition).

Any Idea ?

Thanks

Aymeric

aymericQA · Answer

here is what I found so far, when enabling debug log:

when the tunnel is working fine:

end of the log

[234:root:457]Destroy sconn 0x7f93d5188400, connSize=0. (root) lcp_reqci: returning CONFREJ. lcp_reqci: returning CONFACK. lcp_up: with mtu 1354 ipcp: returning Configure-REJ ipcp: returning Configure-NAK ipcp: returning Configure-ACK ipcp: up ppp:0x7f93d4417000 caller:0x7f93d5081000 tun:33 Cannot determine ethernet address for proxy ARP local IP address my.wan.ip.155 remote IP address 10.212.134.200 [235:root:458]ppp_associate_fd_to_ipaddr:634 associate 10.212.134.200 to tun (ssl.root:33) [235:root:457]ap_read_request,554, ret=-1 error=-1, sconn=0x7f93d5188400. [235:root:457]Destroy sconn 0x7f93d5188400, connSize=1. (root)

but when not working, there's a timeout (

[236:root:448]Destroy sconn 0x7f93d5188400, connSize=0. (root) lcp_reqci: returning CONFREJ. lcp_reqci: returning CONFACK. lcp_up: with mtu 1354 ipcp: returning Configure-REJ ipcp: returning Configure-NAK ipcp: returning Configure-ACK [234:root:454]Timeout for connection 0x7f93d5188400. [234:root:454]Destroy sconn 0x7f93d5188400, connSize=0. (root) [235:root:453]Timeout for connection 0x7f93d5188400. [235:root:453]Destroy sconn 0x7f93d5188400, connSize=1. (root) [235:root:454]sslvpn_send_ctrl_msg:874 0x7f93d5081000 message: heartbeat laptop.ip.55.245 [235:root:454]sslvpn_send_ctrl_msg:874 0x7f93d5081000 message: heartbeat laptop.ip.55.245

but the VPN is marked as connected !

Sign up

Login with SSO

Login to the community

Login with SSO