topic Re: Unable to connect Remote Access VPN after disconnect in SASE and Remote Access

Unable to connect Remote Access VPN after disconnect

Mk_83 — Mon, 29 Jul 2024 11:11:30 GMT

Hello everyone,

Appliance: 6600 ; R81.20 take 65

I am unable to connect to RA VPN after disconnected from the first successful connection (after creating the site).

Connect to the site using IP Public

It's stuck at here about few minutes, and "Site not responding":

This happen only when I reconnected.

But when I delete that site and create again, first connect always success

Log show:

I tried:

Change Endpoint VPN version E88.40 ; E86.50
Using SecuRemote VPN instead of Endpoint VPN

Have you encountered this problem, please help me..

Thanks & Best Regards.

Re: Unable to connect Remote Access VPN after disconnect

AkosBakos — Mon, 29 Jul 2024 11:32:31 GMT

Hi @Mk_83,

This is the tipycal sitution of that, when the RA client downloads a configuration (at the first connection), witch cause that the connection does not esthablished.

For eg.: Destop Policy etc.:

Akos

Re: Unable to connect Remote Access VPN after disconnect

Mk_83 — Tue, 30 Jul 2024 07:39:09 GMT

Hi AkosBakos,

Thanks for your infomation.

Can you give me some ideals to solve this problem, please. I tried some ways on the forum but still can't solve it.

Thanks & Best Regards.
Nhat Kha

Re: Unable to connect Remote Access VPN after disconnect

emmap — Tue, 30 Jul 2024 09:12:05 GMT

Make sure the Main IP in the General properties page of the gateway in SmartConsole is the external IP.

Re: Unable to connect Remote Access VPN after disconnect

Mk_83 — Tue, 30 Jul 2024 10:36:42 GMT

Hi emmap,

If what you mean is this page, I already set it's the external IP

Re: Unable to connect Remote Access VPN after disconnect

AkosBakos — Tue, 30 Jul 2024 10:42:36 GMT

Hi @Mk_83

As you can see under "Selected address from the topology table" the IP is a private IP (172.16.9.8)

Your VPN client never won't connect to this IP from the public internet

Here you need to change the IP to a publik IP which is reachable prom the outside. I think you should use 119.82.132.144

BR,

Akos

Re: Unable to connect Remote Access VPN after disconnect

emmap — Fri, 02 Aug 2024 04:56:29 GMT

Yes, as AkosBakos says, you need a public IP in there. When the site is created, the client pulls the main IP or the IP specified as Link Selection in as the IP to connect to, not the IP or URL that you specified when you created the site. Hence it creates and connects the first time but not any subsequent time, as it's trying to connect to an IP address that is not publically routable.

Re: Unable to connect Remote Access VPN after disconnect

Mk_83 — Fri, 02 Aug 2024 09:30:58 GMT

Hi AkosBakos,

Thanks for your help, it's working perfectly.

Best Regard.

Re: Unable to connect Remote Access VPN after disconnect

Mk_83 — Fri, 02 Aug 2024 09:32:24 GMT

Hi emmap,

Thanks for your response, I understand more right now.

Best Regard.