Remote access connection failed

marcinw — Tue, 02 Mar 2021 11:57:01 GMT

I have a problem with RA IPSec access on SMB 1550 , I checked everything in settings.

Here is a log from trac file, I don't see any traffic is being blocked in log, ANY ANY is allowed

[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Creating a new connection gw: 213.79.49.183, port: 80
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DirectConnect: Starting ...
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: init connect successfuly
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: Successfully init connect
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: Starting ...
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: cb_opq = 41342856
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: prxConn = 41342792
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: currentConns[prxConn] is NO_AUTH_PRX_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: *** (prxConnHandle->ConnState is INIT_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: *** currentConns[prxConn] is NO_AUTH_PRX_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::isProxyConnectivityAnalysisRequired: Starting ...
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::isProxyConnectivityAnalysisRequired: mGlobalConnectivityPreferringMode is INIT_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::isProxyConnectivityAnalysisRequired: proxy Analysis phase already started -> not required
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: proxy Analysis phase is not required -> this is probably part of it (this conn may be part of it or not) -> use currentConns[prxConn]
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::isProxyConnectivityAnalysisInProgress: Starting ...
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::isProxyConnectivityAnalysisInProgress: INIT_STATE == mGlobalConnectivityPreferringMode -> in progress
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: proxy Analysis phase is not in process or this request is part of it -> proceed...
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: debug: prxConnHandle->ConnState is NO_AUTH_PRX_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: about to DoConnect...
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Starting ...
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Current state is NO_AUTH_PRX_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Connecting to proxy..
[ 4940 6140][2 Mar 11:40:05][proxysupp] IsProxyDetected: Starting... m_proxyState.m_autoDetectFileLoadedOk - 'FILE_DOWNLOAD_NOT_NEEDED', m_proxyState.m_PACFileLoadedOk - 'FILE_DOWNLOAD_NOT_NEEDED'
[ 4940 6140][2 Mar 11:40:05][proxysupp] IsProxyDetected: Proxy is detected
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: No proxy is defined. Cannot connect via proxy.
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Moving to state AUTH_PRX_STATE with already 2 retries
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Current state is AUTH_PRX_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Connecting to proxy..
[ 4940 6140][2 Mar 11:40:05][proxysupp] IsProxyDetected: Starting... m_proxyState.m_autoDetectFileLoadedOk - 'FILE_DOWNLOAD_NOT_NEEDED', m_proxyState.m_PACFileLoadedOk - 'FILE_DOWNLOAD_NOT_NEEDED'
[ 4940 6140][2 Mar 11:40:05][proxysupp] IsProxyDetected: Proxy is detected
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: No proxy is defined. Cannot connect via proxy.
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Moving to state NO_PRX_STATE with already 3 retries
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Failed connecting using all methods. Aborting
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Set global proxy state back to NO_PRX_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoConnect: Failed to connect using all methods. Notify the failure
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::NotifyConnect: Starting ... prxConnHandle is 41342792
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::NotifyConnect: prxConnHandle is: 41342792 conn state is NO_PRX_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::NotifyConnect: note: conn managment - do not reset the conn - in order to release it later - if it is reset then there is no way to notify the FW later in order to remove the rule
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::NotifyConnect: *** conn address is: 0
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::NotifyConnect: *** conn address is: 0
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::NotifyConnect: Failed to connect. Notify the error.
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::connectivity_analysis_proxy_cb: Starting ... conn is 0, status is -1000
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::connectivity_analysis_proxy_cb: (client / orig) conn address is: 41342792 conn state is INIT_STATE
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::connectivity_analysis_proxy_cb: Failed to connect. status = -1000
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: status != RAISOS_STATUS_SUCCESS
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoProxyConnectivityAnalysis: proxy attempt failed....
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::DoProxyConnectivityAnalysis: done - OK
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] ProxyWrapper::Connect: DoProxyConnectivityAnalysis - OK -> return
[ 4940 6140][2 Mar 11:40:05][proxy_wrapper] [COVERAGE] [ProxyWrapper::CreateProxyConn(s)

Re: Remote access connection failed

G_W_Albrecht — Tue, 02 Mar 2021 11:59:50 GMT

Which client is used ? I would suggest to contact TAC to resolve this in a quick RAS !

Re: Remote access connection failed

marcinw — Tue, 02 Mar 2021 12:22:58 GMT

I just installed 84.40 , there is no problem with connection to the different site in the same RemoteUser group

Re: Remote access connection failed

marcinw — Tue, 02 Mar 2021 13:10:42 GMT

might it be a problem because 1550 is sitting behind router in bridged mode ?

Re: Remote access connection failed

G_W_Albrecht — Tue, 02 Mar 2021 13:57:02 GMT

I would suggest to contact TAC to resolve this in a quick RAS !

Re: Remote access connection failed

TA2ISB — Mon, 19 Dec 2022 13:26:54 GMT

Hello,

I'm having a similar problem, did you find a solution?

Re: Remote access connection failed

Edensh — Tue, 20 Dec 2022 13:12:26 GMT

Hi,

Did you open a TAC ticket on that topic?

topic Remote access connection failed in SASE and Remote Access

Remote access connection failed

Re: Remote access connection failed

Re: Remote access connection failed

Re: Remote access connection failed

Re: Remote access connection failed

Re: Remote access connection failed

Re: Remote access connection failed