topic Re: VPN Authentication is Not Working on R80.10 Load Sharing Cluster in SASE and Remote Access

VPN Authentication is Not Working on R80.10 Load Sharing Cluster

An_Nguyen — Fri, 19 Oct 2018 19:39:47 GMT

We have a Load Sharing ClusterXL (Multicast) setup for a while now with IPSec VPN, using OfificeMode IPs.

Previously, when the Cluster (two members active/active so we can utilize both ISP circuits) was running on R77.30 (just a couple weeks ago), everything was working ok.

Since the Cluster was upgraded to R80.10, VPN authentication doesn't work when both members are active.

We are using RSA Tokens for VPN authentication. However, using username/password authentication doesn't work either.

Whichever authentication method we use, VPN authentication fails when both members are active. If we bring down one member (doesn't matter that is member 1 or member 2), VPN authentication works ok, with RSA Tokens and with username and password authentication.

It seems to me there is an issue with the Load Sharing ClusterXL R80.10 gateway (management server is running R80.20).

For now, I have to run cpstop on one member for VPN authentication to work.

Please advise.

Thanks

Re: VPN Authentication is Not Working on R80.10 Load Sharing Cluster

PhoneBoy — Fri, 19 Oct 2018 23:11:04 GMT

Please contact the TAC for assistance.

Re: VPN Authentication is Not Working on R80.10 Load Sharing Cluster

An_Nguyen — Wed, 24 Oct 2018 02:23:08 GMT

Thanks for the suggestion.

Tried that with the same result.

We are running ClusterXL Load Sharing Multicast.

We are using IPsec VPN only since we don't have Mobile Access.

Any other suggestion?

Thanks

Re: VPN Authentication is Not Working on R80.10 Load Sharing Cluster

PhoneBoy — Wed, 24 Oct 2018 04:47:13 GMT

To be clear, my suggestion was to contact the TAC to assist with troubleshooting.