Unable to connect Remote Access VPN after disconnect

[NhatKha]

Hello everyone,

Appliance: 6600 ; R81.20 take 65

I am unable to connect to RA VPN after disconnected from the first successful connection (after creating the site).

Connect to the site using IP Public

It's stuck at here about few minutes, and "Site not responding": 

This happen only when I reconnected.

But when I delete that site and create again, first connect always success

Log show:

I tried:

• Change Endpoint VPN version E88.40 ; E86.50
• Using SecuRemote VPN instead of Endpoint VPN

Have you encountered this problem, please help me..

Thanks & Best Regards. 

[AkosBakos]

Hi @NhatKha,

This is the tipycal sitution of that, when the RA client downloads a configuration (at the first connection), witch cause that the connection does not esthablished.

For eg.: Destop Policy etc.:

Akos

[NhatKha]

Hi AkosBakos,

Thanks for your infomation.

Can you give me some ideals to solve this problem, please. I tried some ways on the forum but still can't solve it.

Thanks & Best Regards.
Nhat Kha

[emmap]

Make sure the Main IP in the General properties page of the gateway in SmartConsole is the external IP.

[NhatKha]

Hi emmap,

If what you mean is this page, I already set it's the external IP

 

[AkosBakos · Accepted solution]

Hi @NhatKha 

As you can see under "Selected address from the topology table" the IP is a private IP (172.16.9.8)

Your VPN client never won't connect to this IP from the public internet

Here you need to change the IP to a publik IP which is reachable prom the outside. I think you should use 119.82.132.144

BR,

Akos

[emmap]

Yes, as AkosBakos says, you need a public IP in there. When the site is created, the client pulls the main IP or the IP specified as Link Selection in as the IP to connect to, not the IP or URL that you specified when you created the site. Hence it creates and connects the first time but not any subsequent time, as it's trying to connect to an IP address that is not publically routable. 

[NhatKha]

Hi emmap,

Thanks for your response, I understand more right now.

Best Regard.

[NhatKha]

Hi AkosBakos,

Thanks for your help, it's working perfectly.

Best Regard.