| Solution |
The error in the GUI:
date=2023-06-16 time=17:46:09 eventtime=1686905169441057904 tz="+0900" logid="0101039425" type="event" subtype="vpn" level="information" vd="root" logdesc="SSL VPN tunnel down" action="tunnel-down" tunneltype="ssl-web" tunnelid=19067030 remip=10.200.20.10 user="guest" group="N/A" dst_host="N/A" reason="tunnel connection setup timeout" duration=32 sentbyte=0 rcvdbyte=0 msg="SSL tunnel shutdown"
date=2023-06-16 time=17:45:57 eventtime=1686905157425931211 tz="+0900" logid="0101039944" type="event" subtype="vpn" level="error" vd="root" logdesc="SSL VPN alert" action="ssl-alert" tunneltype="ssl" tunnelid=0 remip=10.200.20.10 user="N/A" group="N/A" dst_host="N/A" reason="warning" desc="close notify" msg="SSL alerts"
date=2023-06-16 time=17:45:37 eventtime=1686905137405436816 tz="+0900" logid="0101039424" type="event" subtype="vpn" level="information" vd="root" logdesc="SSL VPN tunnel up" action="tunnel-up" tunneltype="ssl-web" tunnelid=19067030 remip=10.200.20.10 srccountry="Reserved" user="guest" group="N/A" dst_host="N/A" reason="login successfully" msg="SSL tunnel established"
date=2023-06-16 time=17:45:37 eventtime=1686905137367253443 tz="+0900" logid="0101039943" type="event" subtype="vpn" level="information" vd="root" logdesc="SSL VPN new connection" action="ssl-new-con" tunneltype="ssl" tunnelid=0 remip=10.200.20.10 srccountry="Reserved" user="N/A" group="N/A" dst_host="N/A" fctuid="N/A" reason="N/A" msg="SSL new connection"
date=2023-06-16 time=17:45:37 eventtime=1686905137310940065 tz="+0900" logid="0101039946" type="event" subtype="vpn" level="error" vd="root" logdesc="SSL VPN exit error" action="ssl-exit-error" tunneltype="ssl" tunnelid=0 remip=10.200.20.10 srccountry="Reserved" user="N/A" group="N/A" dst_host="N/A" fctuid="N/A" reason="N/A" msg="SSL exit error"
In the CLI:
diag debug application sslvpn -1
diag debug application fnbamd -1
diag debug enable
[2612:root:1b]deconstruct_session_id:716 decode session id ok, user=[guest], group=[],authserver=[],portal=[full-access],host[10.200.20.10],realm=[],csrf_token=[D3D4129C5AB9CB25CDCE01CCF8E40],idx=0,auth=1,sid=2d772154,login=1686904099,access=1686904099,saml_logout_url=no,pip=no,grp_info=[4xAcoJ],rmt_grp_info=[]
[2612:root:1b]rmt_web_auth_info_parser_common:557 authentication required
[2612:root:1b]rmt_web_access_check:776 access failed, uri=[/remote/logout],ret=4103,
[2612:root:1b]SSL state:fatal decode error (10.200.20.10)
[2612:root:0]ap_read,105, error=1, errno=0 ssl 0x7f3bb1bb6000 Success. error:0A000126:SSL routines::unexpected eof while reading
[2612:root:1b]sslvpn_read_request_common,684, ret=-1 error=-1, sconn=0x7f3bb2854800.
[2612:root:1b]Destroy sconn 0x7f3bb2854800, connSize=0. (root)
This may occur due to a number of reasons:
1. The user ID or password is incorrect.
2. If 'Internet Options -> Security -> Security Level for this zone' is 'High'.
To fix the second case, reduce security level from 'High' to 'Medium-high' or 'Medium'.
Related article:
Technical Tip: Unable to establish the SSL VPN connection on Windows server.
|
