Connect. Communicate. Collaborate. Securely.

Domů » Česky » Kerio Control » Nepodařilo se navázat VPN připojení
  •  
marian

Příspěvky: 225
Odeslat poštu tomuto uživateli
Používám Kerio Control 8.0.1 a od včerejška (aniž bych něco měnil v Controlu nebo ve Windows) se mi u některých laptopů s Windows 7 začalo objevovat toto hlášení Kerio VPN Clienta, "Nepodařilo se navázat trvalé VPN připojení k serveru '...' z důvodů chyby: Nelze vytvořit datový tunel (komunikace protokolem UDP je pravděpodobně blokována).".

U jednoho laptopu se toto objevilo při 3G připojení k internetu, pokud jsem ho připojil v kavárně wifi, tak se VPN tunel vytvořil, když jsem se připojil zpátky k 3G a odpojil wifi, tak stále fungoval.
U dalšího laptopu jsem připojen domácí wifi a tunel se nechce vytvořit.

V logu Dial se stále opakuje,
02/May/2013 19:27:32] Kerio VPN client '...' disconnected from A.B.C.D, connection time 00:00:10
[02/May/2013 19:28:06] Kerio VPN client '...' connected from A.B.C.D
připojení vždy jen na 10s.

Zkusil jsem explicitně ve Windows Firewallu povolit Kerio VPN Clienta, ale to nepomáhá.

[Aktualizováno: Čt, 02 květen 2013 19:41]

  •  
marian

Příspěvky: 225
Odeslat poštu tomuto uživateli
Opět se mi tato chyba objevuje. zatím jsem vypozoroval, že se to děje pokud je laptop připojen přes 3G připojení (bohužel ne vždy). Našel jsem tam chybu "09:31:16....UDP CONNECT not received - timeout".

zkusil jsem na laptopu úplně vypnout Firewall a nepomohlo to.

výpis debug logu:

[07/Jun/2013 09:31:01] {vpn} vpnHandler: 89.24.14.160:32524 -> X.X.X.X:4090, interface: "eth1"
[07/Jun/2013 09:31:01] {vpn} Peer[89.24.14.160:32524]: new incoming connection
[07/Jun/2013 09:31:02] {vpn} Peer[89.24.14.160:32524]: SSL connection established
[07/Jun/2013 09:31:02] {vpn} Peer[89.24.14.160:32524]: remote peer is a client
[07/Jun/2013 09:31:02] {vpnippool} VpnIpPool reference count incremented, count = 5
[07/Jun/2013 09:31:02] {vpnclient} Client[89.24.14.160:32524](1554): service thread registered
[07/Jun/2013 09:31:02] {vpnclient} Client[89.24.14.160:32524]: client successfully added into list, assigned id = 1554
[07/Jun/2013 09:31:02] {vpnclient} Client[89.24.14.160:32524](1554): local TCP address = X.X.X.X:4090
[07/Jun/2013 09:31:02] {vpnclient} Client[89.24.14.160:32524](1554): received complete command
[07/Jun/2013 09:31:02] {vpnclient} Client[89.24.14.160:32524](1554): received VERSION message, version = 4
[07/Jun/2013 09:31:02] {vpnclient} Client[89.24.14.160:32524](1554): sending VERSION message, version = 4
[07/Jun/2013 09:31:03] {vpnclient} Client[89.24.14.160:32524](1554): received complete command
[07/Jun/2013 09:31:03] {vpnclient} Client[89.24.14.160:32524](1554): received USER message, user = XXX
[07/Jun/2013 09:31:03] {vpnclient} Client[89.24.14.160:32524](1554): sending OK message
[07/Jun/2013 09:31:04] {vpnclient} Client[89.24.14.160:32524](1554): received complete command
[07/Jun/2013 09:31:04] {vpnclient} Client[89.24.14.160:32524](1554): received PASSWD message
[07/Jun/2013 09:31:05] {vpnclient} Client[89.24.14.160:32524](1554): user 'XXX' successfully authenticated.
[07/Jun/2013 09:31:05] {vpnclient} Client[89.24.14.160:32524](1554): sending OK message
[07/Jun/2013 09:31:06] {vpnclient} Client[89.24.14.160:32524](1554): received complete command
[07/Jun/2013 09:31:06] {vpnclient} Client[89.24.14.160:32524](1554): received Q_IPCONFIG message
[07/Jun/2013 09:31:06] {vpncipher} BLF[2680/1]: processing incoming config message
[07/Jun/2013 09:31:06] {vpncipher} BLF[2680/1]: allocated memory for blowfish cipher configuration.
[07/Jun/2013 09:31:06] {vpncipher} BLF[2680/1]: configured from message
[07/Jun/2013 09:31:06] {vpnclient} Client[89.24.14.160:32524](1554): cipher exchange period 3600 s
[07/Jun/2013 09:31:06] {vpnippool} --- VpnIpPool::assign(XXX)
[07/Jun/2013 09:31:06] {vpnippool} IP address 172.26.159.23 leased for user 'XXX@nt_domain' (lease updated)
[07/Jun/2013 09:31:06] {vpnclient} Client[89.24.14.160:32524](1554): client registered
[07/Jun/2013 09:31:06] {vpnclient} Client[89.24.14.160:32524](1554): localIp = X.X.X.X
[07/Jun/2013 09:31:06] {vpncore} Creating new VPN connection: local IP 172.26.159.1/255.255.255.0, DNS 0.0.0.0, 0.0.0.0
[07/Jun/2013 09:31:06] {vpncore} oldapi: KVpnConnectionAdd(1538) -> SUCCESS
[07/Jun/2013 09:31:06] {vpncore} Refcount for IP address 172.26.159.1/255.255.255.0 incremented to 4
[07/Jun/2013 09:31:06] {vpncore} oldapi: KVpnConnectionLocalIpUp(1538) -> SUCCESS
[07/Jun/2013 09:31:06] {vpncipher} BLF[2680/1]: generating config message
[07/Jun/2013 09:31:06] {vpncipher} BLF[2680/1]: generating config message
[07/Jun/2013 09:31:06] {vpncore} oldapi: KVpnCipherAdd() -> SUCCESS
[07/Jun/2013 09:31:06] {vpncipher} Client[89.24.14.160:32524](1554): primary cipher added in driver
[07/Jun/2013 09:31:06] {vpnclient} Client[89.24.14.160:32524](1554): sending R_IPCONFIG message - client IP = 172.26.159.23/255.255.255.0, CEP = 3600 s, DNS = 127.0.0.1, 0.0.0.0
[07/Jun/2013 09:31:06] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:06] {vpncore} Last message repeated 4 times
[07/Jun/2013 09:31:07] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:07] {vpncore} Last message repeated 6 times
[07/Jun/2013 09:31:07] {vpncore} Received unexpected secret from 89.24.14.164:2787
[07/Jun/2013 09:31:07] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:07] {vpncore} Last message repeated 4 times
[07/Jun/2013 09:31:08] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:08] {vpncore} Last message repeated 10 times
[07/Jun/2013 09:31:09] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:09] {vpncore} Last message repeated 10 times
[07/Jun/2013 09:31:10] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:10] {vpncore} Last message repeated 9 times
[07/Jun/2013 09:31:10] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:11] {vpncore} Last message repeated 10 times
[07/Jun/2013 09:31:11] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:12] {vpncore} Last message repeated 9 times
[07/Jun/2013 09:31:12] {vpncore} Unable to handle VPN keepalive packet from 89.24.14.164:2787: connection not found
[07/Jun/2013 09:31:12] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:12] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:13] {vpncore} Last message repeated 10 times
[07/Jun/2013 09:31:13] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:14] {vpncore} Last message repeated 10 times
[07/Jun/2013 09:31:14] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:15] {vpncore} Last message repeated 10 times
[07/Jun/2013 09:31:15] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:16] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:16] {vpncore} oldapi: KVpnConnectionGetStatus() -> SUCCESS
[07/Jun/2013 09:31:16] {vpncore} oldapi: KVpnSecretReceived() -> SUCCESS
[07/Jun/2013 09:31:16] {vpncore} Last message repeated 5 times
[07/Jun/2013 09:31:16] {vpnclient} Client[89.24.14.160:32524](1554): UDP CONNECT not received - timeout
[07/Jun/2013 09:31:16] {vpnclient} Client[89.24.14.160:32524](1554): X.X.X.X:4090 <--- 172.26.159.23 ---> 89.24.14.160:32524tcp/0udp - DEREGISTER
[07/Jun/2013 09:31:16] {vpnclient} Client[89.24.14.160:32524](1554): client deregistered
[07/Jun/2013 09:31:16] {vpnippool} IP 172.26.159.23 freed
[07/Jun/2013 09:31:16] {vpncore} Refcount for IP address 172.26.159.1 decremented to 3
[07/Jun/2013 09:31:16] {vpncore} oldapi: KVpnConnectionDelete(1538) -> SUCCESS
[07/Jun/2013 09:31:16] {vpncore} oldapi: KVpnGetVpnAdapterIndex() -> SUCCESS
[07/Jun/2013 09:31:16] {vpnclient} Client[89.24.14.160:32524](1554): flushing ARP cache for adapter 0x6, IP 172.26.159.23
[07/Jun/2013 09:31:16] {vpnippool} VpnIpPool reference count decremented, count = 4
[07/Jun/2013 09:31:16] {vpnclient} Client[89.24.14.160:32524](1554): client erased
[07/Jun/2013 09:31:16] {vpnclient} client removed from maps, 2/2 remaining
[07/Jun/2013 09:31:16] {vpnclient} VPN Client deregister connection: X.X.X.X:4090 <--- 172.26.159.23 ---> 89.24.14.160:32524tcp/0udp DEREGISTER


[Aktualizováno: Pá, 07 červen 2013 10:07]

  •  
marian

Příspěvky: 225
Odeslat poštu tomuto uživateli
Chyba byla nakonec potvrzena u providera připojení (konkrétně T-Mobile), kde měnili nastavení routerů, které pak s VPN připojeními měly problém. Po cca 2-3 týdnech to opravili.

[Aktualizováno: Čt, 12 září 2013 18:58]

Předchozí téma: IPSEC s PSK mobil a administrace
Další téma: Antivirová kontrola protokolu SMTP a greylisting
Jít na fórum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Aktuální čas: St pro 13 23:48:49 CET 2017

Celkový čas potřebný k vygenerování této stránky: 1.00337 vteřin
.:: Kontakt :: Domů ::.
Běží na: FUDforum 3.0.4.