Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
davidsteelerose
New Contributor II

Created on ‎07-21-2021 08:19 AM

FortiClient VPN on MacOS Monterey - error code: -121

I upgraded to test the beta version of Monterey. 

FortiClient6.0.9.162

 

The VPN connection terminates unexpectedly! (Error Code: -121)

 

 

20210721 10:59:08.513 [sslvpn:INFO] unknown:0 dns suffix: 20210721 10:59:08.513 [sslvpn:INFO] unknown:0 epctrl ping server: 20210721 10:59:08.514 [sslvpn:INFO] unknown:0 xml parsing split tunnel info 20210721 10:59:08.514 [sslvpn:INFO] unknown:0 xml parse split tunnel info success. Buffer length: 94 bytes 20210721 10:59:08.514 [sslvpn:INFO] unknown:0 blocked all ipv6 traffic 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 begin io loop 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 launch ssl read thread 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 launch tty read thread 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 ssl read thread started 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 main thread waiting for threads termination 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 tty read thread started 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 ssl write thread started 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 tty write thread started 20210721 10:59:08.536 [sslvpn:INFO] unknown:0 pppd may die...trying to fix it 20210721 10:59:08.536 [sslvpn:INFO] unknown:0 pppd may die...trying to fix it 20210721 10:59:40.617 [sslvpn:EROR] unknown:0 ppp interface is not up, so terminate sslvpn 20210721 10:59:40.618 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.617 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.618 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.618 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.623 [sslvpn:INFO] unknown:0 io loop finished 20210721 10:59:40.623 [sslvpn:INFO] unknown:0 io finished, kill pppd 20210721 10:59:40.624 [sslvpn:INFO] unknown:0 kill_child:1144 20210721 10:59:40.624 [sslvpn:INFO] unknown:0 tunnel shutdown 0 20210721 10:59:40.624 [sslvpn:INFO] unknown:0 sslvpn starts to clean up 20210721 10:59:40.626 [sslvpn:INFO] unknown:0 sslvpnd terminated

108631
2 Solutions
AlmightyBob
New Contributor II
In response to davidsteelerose

Created on ‎07-28-2021 10:42 AM

been trying on builds since beta 2 including yesterday's (27 July) release w/ no success. unfortunately we have to run vmware and go through a windows or ubuntu vm to get into the office.

 

the logs just show an extensive amount of this (below, over and over) followed by some IPv6 failed attempts just before it fails to connect.

 

Running on an intel 2019 macbook pro.

 

<?xml version='1.0' encoding='utf-8'?><sslvpn-tunnel ver='2' dtls='1' patch='1'><dtls-config heartbeat-interval='10' heartbeat-fail-count='10' heartbeat-idle-timeout='10' client-hello-timeout='10' /><tunnel-method value='ppp' /><tunnel-method value='tun' /><fos platform='FG100D' major='6' minor='02' patch='2' build='1010' branch='1010' /><auth-ses check-src-ip='1' tun-connect-without-reauth='0' tun-user-ses-timeout='30' /><client-config save-password='off' keep-alive='off' auto-connect='on' /><ipv4><dns domain='...' /><dns ip='...' /><dns ip='...' /><assigned-addr ipv4='...' /></ipv4><idle-timeout val='0' /><auth-timeout val='28800' /></sslvpn-tunnel>
----
20210714 12:37:01.778 [sslvpn:INFO] unknown:0 dns suffix: ...
20210714 12:37:01.778 [sslvpn:INFO] unknown:0 epctrl ping server: 
20210714 12:37:01.778 [sslvpn:INFO] unknown:0 begin io loop
20210714 12:37:01.778 [sslvpn:INFO] unknown:0 launch ssl read thread
20210714 12:37:01.779 [sslvpn:INFO] unknown:0 launch tty read thread
20210714 12:37:01.779 [sslvpn:INFO] unknown:0 ssl read thread started
20210714 12:37:01.779 [sslvpn:INFO] unknown:0 main thread waiting for threads termination
20210714 12:37:01.779 [sslvpn:INFO] unknown:0 ssl write thread started
20210714 12:37:01.779 [sslvpn:INFO] unknown:0 tty read thread started
20210714 12:37:01.779 [sslvpn:INFO] unknown:0 tty write thread started
20210714 12:37:01.859 [sslvpn:INFO] unknown:0 got peer's ip address
20210714 12:37:02.779 [sslvpn:INFO] unknown:0 ppp interface is up
20210714 12:37:02.780 [sslvpn:INFO] unknown:0 Current dns 0: ...
20210714 12:37:02.781 [sslvpn:INFO] unknown:0 No wins is set currently
20210714 12:37:03.855 [sslvpn:INFO] unknown:0 try to get ppp's ip address ...
20210714 12:37:03.861 [sslvpn:INFO] unknown:0 No split tunnel is specified
20210714 12:37:03.863 [sslvpn:INFO] unknown:0 ppp address: ... 
20210714 12:37:03.863 [sslvpn:INFO] unknown:0 sending sslvpn up message to vpn controller. ping server is  allow_save_password:0 allow_keep_alive:0 allow_auto_connect:1
20210714 12:37:03.868 [sslvpn:INFO] unknown:0 launch DNS monitor thread
20210714 12:37:03.868 [sslvpn:INFO] unknown:0 DNS monitor thread started
20210714 12:37:03.876 [sslvpn:INFO] unknown:0 DNS changed
20210714 12:37:03.882 [sslvpn:INFO] unknown:0 Current DNS and DNS got from FGT are same, no needs to reset
20210714 12:43:52.675 [sslvpn:INFO] unknown:0 shuting down the running tunnel
20210714 12:43:52.676 [sslvpn:INFO] unknown:0 the tunnel is shut down 
20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
20210714 12:43:52.715 [sslvpn:INFO] unknown:0 io loop finished
20210714 12:43:52.736 [sslvpn:INFO] unknown:0 io finished, kill pppd
20210714 12:43:52.768 [sslvpn:INFO] unknown:0 kill_child:7493
20210714 12:43:52.790 [sslvpn:INFO] unknown:0 tunnel shutdown 0
20210714 12:43:52.820 [sslvpn:INFO] unknown:0 sslvpn starts to clean up
20210714 12:43:52.843 [sslvpn:INFO] unknown:0 shuting down the running tunnel
20210714 12:43:52.843 [sslvpn:INFO] unknown:0 the tunnel is shut down 
20210714 12:43:52.862 [sslvpn:INFO] unknown:0 sslvpnd terminated
20210715 09:53:01.418 [sslvpn:INFO] unknown:0 current uid: 0
20210715 09:53:01.419 [sslvpn:INFO] unknown:0 get current proxy auto config settings
20210715 09:53:01.423 [sslvpn:INFO] unknown:0 use tty:/dev/ttys000
20210715 09:53:01.425 [sslvpn:INFO] unknown:0 connecting to ...:... - ...
20210715 09:53:01.521 [sslvpn:INFO] unknown:0 [DoLicCheck]...
20210715 09:54:12.548 [sslvpn:INFO] unknown:0 shuting down the running tunnel
20210715 09:54:12.548 [sslvpn:INFO] unknown:0 the tunnel is shut down 
20210715 09:54:12.549 [sslvpn:INFO] unknown:0 [DoLicCheck]: GET /remote/licensecheck ... (usr=(null), send 585 of 585 bytes): 
GET /remote/licensecheck HTTP/1.1
Host: sslvpn
Cookie: SVPNCOOKIE=+...

View solution in original post

94596
0 Kudos
keeno
New Contributor

Created on ‎07-29-2021 07:38 AM

I had a similar problem with "old" version of FC (Sorry I don't remember which one, since I didn't check before uninstall): every time I tried to connect, it said it couldn't, without any error message. I tried to download version 7 from site but I had another problem (it was "forticlientupdate" app and it gave the message "no updates found" - that's why I uninstalled the old one, to try to avoid this behavior). I came here and I found, in another thread, a hint to download offline installer, so I got version 7.0.0.0022 and it worked like a charm.

Hope this could help

View solution in original post

94596
0 Kudos
22 REPLIES 22
dibanez
New Contributor
In response to lokutus25

Created on ‎11-11-2021 01:10 PM

Hey All,

 

I hope this will work for everyone. It worked for me! Here are the steps on how I solve the problem.

[ol]
  • Turn OFF Private Relay by going to System Preferences>Apple ID>iCloud. And uncheck Private Relay (Turning this option OFF connecting to VPN might still not work)
  • Go to forticlient website and download the ZTNA Edition which includes SSL VPN with MFA

  • Run the installation
  • Restart Forticlient
  • Connect to VPN
  • Instead of entering the Token, the FortiToken mobile will show an alert popup to approve the connection. If there is no popup alert, simply enter the token number.[/ol]
    • 7194
    0 Kudos
    SS1
    New Contributor

    Created on ‎01-03-2022 05:45 AM

    Hi,

     

    Dont work in my environment: Log say “ppp interface is not up”

     

    0220103 15:31:17.425 [sslvpn:INFO] unknown:0 dns suffix: ad.xxxxx.xx
    20220103 15:31:17.425 [sslvpn:INFO] unknown:0 epctrl ping server:
    20220103 15:31:17.425 [sslvpn:INFO] unknown:0 xml parsing split tunnel info
    20220103 15:31:17.425 [sslvpn:INFO] unknown:0 xml parse split tunnel info success. Buffer length: 1038 bytes
    20220103 15:31:17.425 [sslvpn:DEBG] unknown:0 PPP
    20220103 15:31:17.425 [sslvpn:EROR] unknown:0 Error: ioctl CTLIOCGINFO: No such file or directory
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 blocked all ipv6 traffic
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 begin io loop
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 launch ssl read thread
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 launch tty read thread
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 ssl read thread started
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 main thread waiting for threads termination
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 tty read thread started
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 ssl write thread started
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 tty write thread started
    20220103 15:31:17.426 [sslvpn:DEBG] unknown:0 begin to write to ssl
    20220103 15:31:17.473 [sslvpn:INFO] unknown:0 pppd may die...trying to fix it
    20220103 15:31:49.264 [sslvpn:EROR] unknown:0 ppp interface is not up, so terminate sslvpn
    20220103 15:31:49.265 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 io loop finished
    20220103 15:31:49.267 [sslvpn:INFO] unknown:0 io finished, kill pppd
    20220103 15:31:49.267 [sslvpn:INFO] unknown:0 kill_child:70145
    20220103 15:31:49.268 [sslvpn:INFO] unknown:0 tunnel shutdown 0
    20220103 15:31:49.269 [sslvpn:INFO] unknown:0 sslvpn starts to clean up
    20220103 15:31:49.292 [sslvpn:INFO] unknown:0 sslvpnd terminated

    6314
    0 Kudos
    WIXI
    New Contributor

    Created on ‎08-24-2023 06:24 PM

    Chic@s les dejo unas versiones de Forti en el siguiente link, quizás les puede servir. A mí me sirvió una de esas versiones en macOS Monterey Versión 12.6.8.
    https://drive.google.com/drive/u/1/folders/1FA8LQX9rSLNt6IIhP68PwOzQYg_7zPwZ

    1115
    0 Kudos
    Announcements

    Select Forum Responses to become Knowledge Articles!

    Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

    Labels
    Top Kudoed Authors
    View all
    Broad. Integrated. Automated.

    The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

    Social Media
    Security Research
    Company
    News & Articles
    Contact Us

    Copyright 2024 Fortinet, Inc. All Rights Reserved.