topic VPN Capsule reconnecting fails after client changing IP in Mobile

VPN Capsule reconnecting fails after client changing IP

Jacek2 — Wed, 10 Jul 2024 10:55:26 GMT

Hello Mates,

I am currently struggling with such problem: our vpn users travels a lot and when connected to vpn their mobile phone IP address changing the Capsule vpn client hungs on "reconnecting" state which needs to make the connection manually again.
However when they lost the Internet connection and IP address is the same Capsule recconects succesfully.

Capsule client logs looks like this:

07-09 14:47:02.268 31613 711 E NEMO.E 14:47:02.252 9d21cb0 match_pubkey: public key mismatch
07-09 14:47:02.320 31613 711 E NEMO.E 14:47:02.319 9d21cb0 settings: ClientSettings failed with permission denied
07-09 14:47:02.327 31613 711 E NEMO.E 14:47:02.326 9d21cb0 settings failed
07-09 14:47:02.328 31613 809 D NEMO.connect_cb(): connected=0
07-09 14:47:02.328 31613 711 E NEMO.E 14:47:02.326 9d21cb0 iterate: ccc_iter failed: Failed in settings command - permission denied (807)
07-09 14:47:02.328 31613 809 D NEMO.In Service::connect_cb()
07-09 14:47:02.329 31613 809 D NEMO.In Service::changeState(): got ERROR
07-09 14:47:02.329 31613 711 E NEMO.E 14:47:02.327 9d21cb0 iterate: set error: Failed in settings command - permission denied

What do I need to configure to allow clients to connect with different IP?

Regards, Jacek.

Re: VPN Capsule reconnecting fails after client changing IP

PhoneBoy — Wed, 10 Jul 2024 21:18:36 GMT

Pretty sure if the client changes IP addresses, the VPN client will need to be reconnected manually.
I believe this is expected behavior.

Re: VPN Capsule reconnecting fails after client changing IP

the_rock — Wed, 10 Jul 2024 23:48:13 GMT

Hey Jacek,

I know Phoneboy is 100% right, because we had exact same case with TAC while back and that was the answer they gave us.

Andy

Re: VPN Capsule reconnecting fails after client changing IP

kamilazat — Mon, 23 Dec 2024 13:24:50 GMT

We just experienced such a scenario with the same logs on the mobile devices. But the clients are not travelling. Instead, they're subject to DHCP, which also explains the IP change and the need for manual reconnect.

But the same behavior is not seen on the PC clients. Is the limitation you mentioned specific for mobile applications only?