VPN stopped working

2»

All Replies

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited February 23

    update

    So from the time 22th 23:50 it stopped working going in a loop of trying to connect to the 23th 02:57 its now connected.... log show a lot of "[COOKIE] Invalid cookie, no sa found"

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited April 5

    4 days uptime this happened again there is this problem then there is the other problem the two are not the same where the bridge on VPN300 passes UDP 4500 but VPN tunnel drops it will try and try and likely should connect in some hours on the same IP but still a problem why it not connecting when it should

    from FLEX200

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited June 28

    VPN300

    V5.37(ABFC.2)

    Still happing VPN stopped working this is not the same as this

    ^ which I think by me removing the LAG and just having a simple two port bridge has solved that

    VPN just goes in a loop

    1
    2024-06-28 17:21:18
    info
    IKE
    [COOKIE] Invalid cookie, no sa found [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    2
    2024-06-28 17:21:18
    info
    IKE
    The cookie pair is : 0x7b576d8c225d393a / 0x2f09f7269c493b97 [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    18
    2024-06-28 17:21:03
    info
    IKE
    Send:[KE][NONCE][PRV][PRV]
    10.187.154.135:500

    blank:500

    IKE_LOG
    19
    2024-06-28 17:21:03
    info
    IKE
    The cookie pair is : 0x7b576d8c225d393a / 0x2f09f7269c493b97
    10.187.154.135:500

    blank:500

    IKE_LOG
    22
    2024-06-28 17:21:03
    info
    IKE
    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]
    10.187.154.135:500

    blank:500

    IKE_LOG
    23
    2024-06-28 17:21:03
    info
    IKE
    Send Main Mode request to [blank]
    10.187.154.135:500

    blank:500

    IKE_LOG
    24
    2024-06-28 17:21:03
    info
    IKE
    Tunnel [link_to_flex200_4G] Sending IKE request
    10.187.154.135:500

    blank:500

    IKE_LOG
    25
    2024-06-28 17:21:03
    info
    IKE
    The cookie pair is : 0x7b576d8c225d393a / 0x0000000000000000 [count=3]
    10.187.154.135:500

    blank:500

    IKE_LOG
    27
    2024-06-28 17:20:47
    info
    IKE
    [COOKIE] Invalid cookie, no sa found [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    28
    2024-06-28 17:20:47
    info
    IKE
    The cookie pair is : 0xca94966c8872f095 / 0xd2190f5a85b316cf [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    42
    2024-06-28 17:20:29
    info
    IKE
    Send:[KE][NONCE][PRV][PRV]
    10.187.154.135:500

    blank:500

    IKE_LOG
    43
    2024-06-28 17:20:29
    info
    IKE
    The cookie pair is : 0xca94966c8872f095 / 0xd2190f5a85b316cf
    10.187.154.135:500

    blank:500

    IKE_LOG
    46
    2024-06-28 17:20:29
    info
    IKE
    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]
    10.187.154.135:500

    blank:500

    IKE_LOG
    47
    2024-06-28 17:20:29
    info
    IKE
    Send Main Mode request to [blank]
    10.187.154.135:500

    blank:500

    IKE_LOG
    48
    2024-06-28 17:20:29
    info
    IKE
    Tunnel [link_to_flex200_4G] Sending IKE request
    10.187.154.135:500

    blank:500

    IKE_LOG
    49
    2024-06-28 17:20:29
    info
    IKE
    The cookie pair is : 0xca94966c8872f095 / 0x0000000000000000 [count=3]
    10.187.154.135:500

    blank:500

    IKE_LOG
    58
    2024-06-28 17:20:16
    info
    IKE
    [COOKIE] Invalid cookie, no sa found [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    59
    2024-06-28 17:20:16
    info
    IKE
    The cookie pair is : 0x4cbdfa8a11ca935b / 0x3106c9629516c8ad [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    71
    2024-06-28 17:19:59
    info
    IKE
    Send:[KE][NONCE][PRV][PRV]
    10.187.154.135:500

    blank:500

    IKE_LOG
    72
    2024-06-28 17:19:59
    info
    IKE
    The cookie pair is : 0x4cbdfa8a11ca935b / 0x3106c9629516c8ad
    10.187.154.135:500

    blank:500

    IKE_LOG
    75
    2024-06-28 17:19:59
    info
    IKE
    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]
    10.187.154.135:500

    blank:500

    IKE_LOG
    76
    2024-06-28 17:19:59
    info
    IKE
    Send Main Mode request to [blank]
    10.187.154.135:500

    blank:500

    IKE_LOG
    77
    2024-06-28 17:19:59
    info
    IKE
    Tunnel [link_to_flex200_4G] Sending IKE request
    10.187.154.135:500

    blank:500

    IKE_LOG
    78
    2024-06-28 17:19:59
    info
    IKE
    The cookie pair is : 0x4cbdfa8a11ca935b / 0x0000000000000000 [count=3]
    10.187.154.135:500

    blank:500

    IKE_LOG
    79
    2024-06-28 17:19:41
    info
    IKE
    [COOKIE] Invalid cookie, no sa found [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    80
    2024-06-28 17:19:41
    info
    IKE
    The cookie pair is : 0x6ea742077a3a1deb / 0xd7af22105c5b5bbd [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    93
    2024-06-28 17:19:26
    info
    IKE
    Send:[KE][NONCE][PRV][PRV]
    10.187.154.135:500

    blank:500

    IKE_LOG
    94
    2024-06-28 17:19:26
    info
    IKE
    The cookie pair is : 0x6ea742077a3a1deb / 0xd7af22105c5b5bbd
    10.187.154.135:500

    blank:500

    IKE_LOG
    97
    2024-06-28 17:19:25
    info
    IKE
    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]
    10.187.154.135:500

    blank:500

    IKE_LOG
    98
    2024-06-28 17:19:25
    info
    IKE
    Send Main Mode request to [blank]
    10.187.154.135:500

    blank:500

    IKE_LOG
    99
    2024-06-28 17:19:25
    info
    IKE
    Tunnel [link_to_flex200_4G] Sending IKE request
    10.187.154.135:500

    blank:500

    IKE_LOG
    100
    2024-06-28 17:19:25
    info
    IKE
    The cookie pair is : 0x6ea742077a3a1deb / 0x0000000000000000 [count=3]
    10.187.154.135:500

    blank:500

    IKE_LOG
    104
    2024-06-28 17:19:10
    info
    IKE
    [COOKIE] Invalid cookie, no sa found [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    105
    2024-06-28 17:19:10
    info
    IKE
    The cookie pair is : 0x951287bb6803c07d / 0xb5a9e3d0de57aff6 [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    117
    2024-06-28 17:18:55
    info
    IKE
    Send:[KE][NONCE][PRV][PRV]
    10.187.154.135:500

    blank:500

    IKE_LOG
    118
    2024-06-28 17:18:55
    info
    IKE
    The cookie pair is : 0x951287bb6803c07d / 0xb5a9e3d0de57aff6
    10.187.154.135:500

    blank:500

    IKE_LOG
    121
    2024-06-28 17:18:55
    info
    IKE
    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]
    10.187.154.135:500

    blank:500

    IKE_LOG
    122
    2024-06-28 17:18:55
    info
    IKE
    Send Main Mode request to [blank]
    10.187.154.135:500

    blank:500

    IKE_LOG
    123
    2024-06-28 17:18:55
    info
    IKE
    Tunnel [link_to_flex200_4G] Sending IKE request
    10.187.154.135:500

    blank:500

    IKE_LOG
    124
    2024-06-28 17:18:55
    info
    IKE
    The cookie pair is : 0x951287bb6803c07d / 0x0000000000000000 [count=3]
    10.187.154.135:500

    blank:500

    IKE_LOG
    126
    2024-06-28 17:18:35
    info
    IKE
    [COOKIE] Invalid cookie, no sa found [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    127
    2024-06-28 17:18:35
    info
    IKE
    The cookie pair is : 0x6aa249cddb51cb9d / 0x0170db1383dda361 [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    149
    2024-06-28 17:18:21
    info
    IKE
    Send:[KE][NONCE][PRV][PRV]
    10.187.154.135:500

    blank:500

    IKE_LOG
    150
    2024-06-28 17:18:21
    info
    IKE
    The cookie pair is : 0x6aa249cddb51cb9d / 0x0170db1383dda361
    10.187.154.135:500

    blank:500

    IKE_LOG
    153
    2024-06-28 17:18:21
    info
    IKE
    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]
    10.187.154.135:500

    blank:500

    IKE_LOG
    154
    2024-06-28 17:18:21
    info
    IKE
    Send Main Mode request to [blank]
    10.187.154.135:500

    blank:500

    IKE_LOG
    155
    2024-06-28 17:18:21
    info
    IKE
    Tunnel [link_to_flex200_4G] Sending IKE request
    10.187.154.135:500

    blank:500

    IKE_LOG
    156
    2024-06-28 17:18:21
    info
    IKE
    The cookie pair is : 0x6aa249cddb51cb9d / 0x0000000000000000 [count=3]
    10.187.154.135:500

    blank:500

    IKE_LOG
    160
    2024-06-28 17:18:08
    info
    IKE
    [COOKIE] Invalid cookie, no sa found [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG
    161
    2024-06-28 17:18:08
    info
    IKE
    The cookie pair is : 0xfcbffb47f7681327 / 0x6195c47eee0d1d9b [count=2]
    10.187.154.135:500

    blank:4500

    IKE_LOG

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited June 28
  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited June 28

    and after leaving it in a loop of trying to connect it did

    from when it stopping working

    Arrival Time: Jun 28, 2024 15:59:31.745253000 GMT Summer Time

    to working

    Arrival Time: Jun 28, 2024 22:47:09.830605000 GMT Summer Time

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited September 4

    VPN dropped out again at the same my internet dropped and the VPN is trying to reconnect but is failing going to leave it and see if it reconnects at some point.


    1

    2024-09-04 10:42:20

    info

    IKE

    Phase 1 IKE SA process done

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    2

    2024-09-04 10:42:20

    info

    IKE

    Recv:[ID][HASH]

    92.239.xxx.xxx:4500


    10.71.71.221:4500



    IKE_LOG

    3

    2024-09-04 10:42:20

    info

    IKE

    The cookie pair is : 0x21501875e72460a2 / 0x21dfe45a2618b9dd

    92.239.xxx.xxx:4500


    10.71.71.221:4500



    IKE_LOG

    4

    2024-09-04 10:42:20

    info

    IKE

    Send:[ID][HASH]

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    5

    2024-09-04 10:42:20

    info

    IKE

    The cookie pair is : 0x21dfe45a2618b9dd / 0x21501875e72460a2 [count=2]

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    6

    2024-09-04 10:42:20

    info

    IKE

    Recv:[KE][NONCE][PRV][PRV]

    92.239.xxx.xxx:500


    10.71.71.221:500



    IKE_LOG

    7

    2024-09-04 10:42:19

    info

    IKE

    Send:[KE][NONCE][PRV][PRV]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    8

    2024-09-04 10:42:19

    info

    IKE

    The cookie pair is : 0x21dfe45a2618b9dd / 0x21501875e72460a2

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    9

    2024-09-04 10:42:19

    info

    IKE

    Recv:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]

    92.239.xxx.xxx:500


    10.71.71.221:500



    IKE_LOG

    10

    2024-09-04 10:42:19

    info

    IKE

    The cookie pair is : 0x21501875e72460a2 / 0x21dfe45a2618b9dd [count=2]

    92.239.xxx.xxx:500


    10.71.71.221:500



    IKE_LOG

    11

    2024-09-04 10:42:19

    info

    IKE

    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    12

    2024-09-04 10:42:19

    info

    IKE

    Send Main Mode request to [92.239.xxx.xxx]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    13

    2024-09-04 10:42:19

    info

    IKE

    Tunnel [link_to_flex200_4G] Sending IKE request

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    14

    2024-09-04 10:42:19

    info

    IKE

    The cookie pair is : 0x21dfe45a2618b9dd / 0x0000000000000000 [count=3]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    15

    2024-09-04 10:42:07

    info

    IKE

    [COOKIE] Invalid cookie, no sa found [count=2]

    10.71.71.221:500


    92.239.xxx.xxx:4500



    IKE_LOG

    16

    2024-09-04 10:42:07

    info

    IKE

    The cookie pair is : 0x4e5abc8b83a87341 / 0xceebc8e6453cc697 [count=2]

    10.71.71.221:500


    92.239.xxx.xxx:4500



    IKE_LOG

    17

    2024-09-04 10:42:07

    info

    IKE

    ISAKMP SA [link_to_flex200_4G] is disconnected

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    18

    2024-09-04 10:42:07

    info

    IKE

    The cookie pair is : 0x4e5abc8b83a87341 / 0xceebc8e6453cc697

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    19

    2024-09-04 10:42:07

    info

    IKE

    Received delete notification

    92.239.xxx.xxx:4500


    10.71.71.221:4500



    IKE_LOG

    20

    2024-09-04 10:42:07

    info

    IKE

    Recv:[HASH][DEL]

    92.239.xxx.xxx:4500


    10.71.71.221:4500



    IKE_LOG

    21

    2024-09-04 10:42:07

    info

    IKE

    The cookie pair is : 0xceebc8e6453cc697 / 0x4e5abc8b83a87341 [count=2]

    92.239.xxx.xxx:4500


    10.71.71.221:4500



    IKE_LOG

    24

    2024-09-04 10:41:50

    info

    IKE

    Phase 1 IKE SA process done

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    25

    2024-09-04 10:41:50

    info

    IKE

    Recv:[ID][HASH]

    92.239.xxx.xxx:4500


    10.71.71.221:4500



    IKE_LOG

    26

    2024-09-04 10:41:50

    info

    IKE

    The cookie pair is : 0xceebc8e6453cc697 / 0x4e5abc8b83a87341

    92.239.xxx.xxx:4500


    10.71.71.221:4500



    IKE_LOG

    27

    2024-09-04 10:41:50

    info

    IKE

    Send:[ID][HASH]

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    28

    2024-09-04 10:41:50

    info

    IKE

    The cookie pair is : 0x4e5abc8b83a87341 / 0xceebc8e6453cc697 [count=2]

    10.71.71.221:4500


    92.239.xxx.xxx:4500



    IKE_LOG

    29

    2024-09-04 10:41:50

    info

    IKE

    Recv:[KE][NONCE][PRV][PRV]

    92.239.xxx.xxx:500


    10.71.71.221:500



    IKE_LOG

    30

    2024-09-04 10:41:49

    info

    IKE

    Send:[KE][NONCE][PRV][PRV]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    31

    2024-09-04 10:41:49

    info

    IKE

    The cookie pair is : 0x4e5abc8b83a87341 / 0xceebc8e6453cc697

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    32

    2024-09-04 10:41:49

    info

    IKE

    Recv:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]

    92.239.xxx.xxx:500


    10.71.71.221:500



    IKE_LOG

    33

    2024-09-04 10:41:49

    info

    IKE

    The cookie pair is : 0xceebc8e6453cc697 / 0x4e5abc8b83a87341 [count=2]

    92.239.xxx.xxx:500


    10.71.71.221:500



    IKE_LOG

    34

    2024-09-04 10:41:49

    info

    IKE

    Send:[SA][VID][VID][VID][VID][VID][VID][VID][VID][VID][VID]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    35

    2024-09-04 10:41:49

    info

    IKE

    Send Main Mode request to [92.239.xxx.xxx]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    36

    2024-09-04 10:41:49

    info

    IKE

    Tunnel [link_to_flex200_4G] Sending IKE request

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    37

    2024-09-04 10:41:49

    info

    IKE

    The cookie pair is : 0x4e5abc8b83a87341 / 0x0000000000000000 [count=3]

    10.71.71.221:500


    92.239.xxx.xxx:500



    IKE_LOG

    could the problem be I use Site-to-site with Dynamic Peer on one end?

  • PeterUK
    PeterUK Posts: 3,389  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited September 4

    So 8:50am today was when I lost VPN working and 3:53pm was when after itself trying to reconnect now is up.

    Seem like when my internet drops out between the two ends one side is not detecting the drop and on reconnecting fails as logs show Phase 1 IKE SA process done the problem could be Phase 2 holds on the last known encryption but the other end want to start over? so if I set Phase 2 SA life time low 180 then the next time this happens it will be that long to start the encryption over?

Security Highlight