Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
vasgogo
Participant

RDP IS DISCONECTED WHEN IN MOBILE VPN

Hello all, 

Recently we upgrated 5000 series to R81. 10 from R80. 20. After the upgrade the windows users are complying about frequent disconnections from RDP and other services(like SQL).

Has anyone encountered this problem, and if yes how did you solve it?

Thank you

0 Kudos
5 Replies
PhoneBoy
Admin
Admin

Have you taken tcpdumps and the like to see what is happening when applications are failing?
I suspect you’ll need to involve the TAC.
If you haven’t already, make sure to install the latest GA JHF.

0 Kudos
vasgogo
Participant

Hi ,

I have involved TAC, but nothing so far. I had the last JHF (take 66), but I uninstall it to default one as it was not working.

when I run zdebug I receive the below log:

@;144306869;[cpu_1];[fw4_0];fw_log_drop_ex: Packet proto=6 192.168.10.45:1433 -> 172.16.0.10:55173 dropped by vpnktcpt_chain_out Reason: vpnk_tcpt invalid negative tunnel id;
@;144307543;[cpu_1];[fw4_0];fw_log_drop_ex: Packet proto=6 192.168.10.45:1433 -> 172.16.0.10:55173 dropped by vpnktcpt_chain_out Reason: vpnk_tcpt invalid negative tunnel id

TCP dump didn't show anything.

 

 

 

0 Kudos
PhoneBoy
Admin
Admin

You’ll need to work with TAC on troubleshooting this since it’s clear the traffic is not being routed out of the gateway.

0 Kudos
vasgogo
Participant

hi,

I run zdebug and during the disconnection we saw the below:

 

@;144306869;[cpu_1];[fw4_0];fw_log_drop_ex: Packet proto=6 192.168.10.45:1433 -> 172.16.0.10:55173 dropped by vpnktcpt_chain_out Reason: vpnk_tcpt invalid negative tunnel id;
@;144307543;[cpu_1];[fw4_0];fw_log_drop_ex: Packet proto=6 192.168.10.45:1433 -> 172.16.0.10:55173 dropped by vpnktcpt_chain_out Reason: vpnk_tcpt invalid negative tunnel id

 

I have involved TAC but nothing so far. The odd thing is that users with MAC OS did,t experience any problem.

 

I had take 66, but I uninstalled it to check if the user was solved but nothing.

 

tcpdump was normal.

 

 

0 Kudos
Peter_Lyndley
Collaborator

I came across a similar problem when the gateways in question were running QoS blade (in both R81 and R81.10)

Either you can turn this off (if that is a sensible workaround for you), or try using fast_accel on the connections that you need to keep working. 

0 Kudos