Hi,
I'm setting VPN SSL tunnel for my salespersons (win10 + 4g network)
I use forticlient to connect, with split tunneling.
The laptop is connected via Wifi to a 4G mobile access point.
The firewall is a FG100D
Quite frequently, the connection goes well, tunnel is connected, but no traffic go through.
I have to disconnect the tunnel with forticlient, then reconnect, (sometimes more than once), and finally it's working fine.
(I tried to use the SSL VPN GATEWAY, to launch an RDP session, without FORTICLIENT installed, and it seems to work flawlessly in the same condition).
Any Idea ?
Thanks
Aymeric
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
here is what I found so far, when enabling debug log:
when the tunnel is working fine:
end of the log
[234:root:457]Destroy sconn 0x7f93d5188400, connSize=0. (root) lcp_reqci: returning CONFREJ. lcp_reqci: returning CONFACK. lcp_up: with mtu 1354 ipcp: returning Configure-REJ ipcp: returning Configure-NAK ipcp: returning Configure-ACK ipcp: up ppp:0x7f93d4417000 caller:0x7f93d5081000 tun:33 Cannot determine ethernet address for proxy ARP local IP address my.wan.ip.155 remote IP address 10.212.134.200 [235:root:458]ppp_associate_fd_to_ipaddr:634 associate 10.212.134.200 to tun (ssl.root:33) [235:root:457]ap_read_request,554, ret=-1 error=-1, sconn=0x7f93d5188400. [235:root:457]Destroy sconn 0x7f93d5188400, connSize=1. (root)
but when not working, there's a timeout (
[236:root:448]Destroy sconn 0x7f93d5188400, connSize=0. (root) lcp_reqci: returning CONFREJ. lcp_reqci: returning CONFACK. lcp_up: with mtu 1354 ipcp: returning Configure-REJ ipcp: returning Configure-NAK ipcp: returning Configure-ACK [234:root:454]Timeout for connection 0x7f93d5188400. [234:root:454]Destroy sconn 0x7f93d5188400, connSize=0. (root) [235:root:453]Timeout for connection 0x7f93d5188400. [235:root:453]Destroy sconn 0x7f93d5188400, connSize=1. (root) [235:root:454]sslvpn_send_ctrl_msg:874 0x7f93d5081000 message: heartbeat laptop.ip.55.245 [235:root:454]sslvpn_send_ctrl_msg:874 0x7f93d5081000 message: heartbeat laptop.ip.55.245
but the VPN is marked as connected !
Hi,
Have you found a solution here ? We have the same phenomena wit FortiOS 6.0.6 + FortiClient 5.6.6 and 6.0.8 too.
Cheers,
Hello, it was quite a long time ago ...
We identified the issue as coming from our 4G provider at that time (I guess some issue with NATing inside their network or something like that).
We could have switched to another provider, but we switched to an IPSec tunnel instead.
It made no différence for us ...
Hope it helps ...
Aymeric
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1702 | |
1092 | |
752 | |
446 | |
229 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.