Securifi Community Forum

Securifi Products => Almond+ => Topic started by: francehopper on November 09, 2014, 02:03:38 pm

Title: [Resolved] VPN seems to have stopped working
Post by: francehopper on November 09, 2014, 02:03:38 pm
It seems like the VPN Server on my Almond+ has stopped working. Worked fine for a number of days and then just stopped. I applied some settings edits Lars posted back in August. Still no luck. I did not get a chance to update my firmware before it was pulled. Restarted all the VPN processes and gave the router a reboot. No luck. If it helps, the message OS X gives is the server did not respond.
Title: Re: VPN seems to have stopped working
Post by: jjoepaulines on November 09, 2014, 06:17:28 pm
what is your current firmware version ?

If possible can you please share your log messages ?

Title: Re: VPN seems to have stopped working
Post by: francehopper on November 09, 2014, 10:48:13 pm
Firmware is R066. These are the logs as far back as I have them:

Nov  9 21:47:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:47:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:48:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:48:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:49:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:49:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:49:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: associated
Nov  9 21:49:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 RADIUS: starting accounting session 533E2F47-00000028
Nov  9 21:49:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 WPA: pairwise key handshake completed (RSN)
Nov  9 21:49:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPDISCOVER(br-lan) d4:4b:5e:59:94:72
Nov  9 21:49:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPOFFER(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 21:49:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPREQUEST(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 21:49:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPACK(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 21:50:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:50:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:51:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:51:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:52:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:52:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:53:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:53:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:54:39 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:54:39 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:55:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:55:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:56:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:56:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:57:11 TreeDiagram daemon.info hostapd: wlan10: STA 10:9a:dd:bf:fb:a1 WPA: group key handshake completed (RSN)
Nov  9 21:57:11 TreeDiagram daemon.info hostapd: wlan10: STA 44:39:c4:6e:70:42 WPA: group key handshake completed (RSN)
Nov  9 21:57:12 TreeDiagram daemon.info hostapd: wlan00: STA 00:1c:b3:ff:44:69 WPA: group key handshake completed (RSN)
Nov  9 21:57:12 TreeDiagram daemon.info hostapd: wlan00: STA 78:fd:94:89:e6:cc WPA: group key handshake completed (RSN)
Nov  9 21:57:12 TreeDiagram daemon.info hostapd: wlan00: STA 60:45:bd:67:e9:ac WPA: group key handshake completed (RSN)
Nov  9 21:57:20 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: deauthenticated due to local deauth request
Nov  9 21:57:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:57:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:58:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:58:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 21:59:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 21:59:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:00:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:00:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:01:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:01:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:02:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:02:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:03:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:03:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:04:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:04:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:04:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: associated
Nov  9 22:04:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 RADIUS: starting accounting session 533E2F47-00000029
Nov  9 22:04:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 WPA: pairwise key handshake completed (RSN)
Nov  9 22:04:55 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPDISCOVER(br-lan) d4:4b:5e:59:94:72
Nov  9 22:04:55 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPOFFER(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:04:55 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPREQUEST(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:04:55 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPACK(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:05:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:05:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:06:25 TreeDiagram authpriv.info dropbear[17976]: Child connection from ::ffff:91.220.131.33:49982
Nov  9 22:06:26 TreeDiagram authpriv.warn dropbear[17976]: login attempt for nonexistent user from ::ffff:91.220.131.33:49982
Nov  9 22:06:26 TreeDiagram authpriv.info dropbear[17976]: exit before auth: Disconnect received
Nov  9 22:06:40 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:06:40 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:07:11 TreeDiagram daemon.info hostapd: wlan10: STA 10:9a:dd:bf:fb:a1 WPA: group key handshake completed (RSN)
Nov  9 22:07:11 TreeDiagram daemon.info hostapd: wlan00: STA 00:1c:b3:ff:44:69 WPA: group key handshake completed (RSN)
Nov  9 22:07:12 TreeDiagram daemon.info hostapd: wlan00: STA 78:fd:94:89:e6:cc WPA: group key handshake completed (RSN)
Nov  9 22:07:12 TreeDiagram daemon.info hostapd: wlan10: STA 44:39:c4:6e:70:42 WPA: group key handshake completed (RSN)
Nov  9 22:07:12 TreeDiagram daemon.info hostapd: wlan00: STA 60:45:bd:67:e9:ac WPA: group key handshake completed (RSN)
Nov  9 22:07:15 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: disassociated
Nov  9 22:07:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:07:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:08:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:08:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:09:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:09:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:10:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:10:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:11:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:11:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:12:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:12:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:13:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:13:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:14:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:14:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:15:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:15:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:16:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:16:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:17:12 TreeDiagram daemon.info hostapd: wlan10: STA 10:9a:dd:bf:fb:a1 WPA: group key handshake completed (RSN)
Nov  9 22:17:12 TreeDiagram daemon.info hostapd: wlan10: STA 44:39:c4:6e:70:42 WPA: group key handshake completed (RSN)
Nov  9 22:17:12 TreeDiagram daemon.info hostapd: wlan00: STA 00:1c:b3:ff:44:69 WPA: group key handshake completed (RSN)
Nov  9 22:17:12 TreeDiagram daemon.info hostapd: wlan00: STA 78:fd:94:89:e6:cc WPA: group key handshake completed (RSN)
Nov  9 22:17:12 TreeDiagram daemon.info hostapd: wlan00: STA 60:45:bd:67:e9:ac WPA: group key handshake completed (RSN)
Nov  9 22:17:41 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:17:41 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:18:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:18:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:19:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:19:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:19:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: associated
Nov  9 22:19:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 RADIUS: starting accounting session 533E2F47-0000002A
Nov  9 22:19:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 WPA: pairwise key handshake completed (RSN)
Nov  9 22:19:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPDISCOVER(br-lan) d4:4b:5e:59:94:72
Nov  9 22:19:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPOFFER(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:19:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPREQUEST(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:19:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPACK(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:20:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:20:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:21:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:21:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:22:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:22:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:23:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:23:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:24:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:24:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:25:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:25:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:26:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:26:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:27:12 TreeDiagram daemon.info hostapd: wlan00: STA 00:1c:b3:ff:44:69 WPA: group key handshake completed (RSN)
Nov  9 22:27:12 TreeDiagram daemon.info hostapd: wlan10: STA 10:9a:dd:bf:fb:a1 WPA: group key handshake completed (RSN)
Nov  9 22:27:12 TreeDiagram daemon.info hostapd: wlan00: STA 78:fd:94:89:e6:cc WPA: group key handshake completed (RSN)
Nov  9 22:27:12 TreeDiagram daemon.info hostapd: wlan10: STA 44:39:c4:6e:70:42 WPA: group key handshake completed (RSN)
Nov  9 22:27:12 TreeDiagram daemon.info hostapd: wlan00: STA 60:45:bd:67:e9:ac WPA: group key handshake completed (RSN)
Nov  9 22:27:20 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: deauthenticated due to local deauth request
Nov  9 22:27:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:27:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:28:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:28:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:29:42 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:29:42 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:30:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:30:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:31:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:31:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:32:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:32:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:33:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:33:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:34:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:34:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:34:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: associated
Nov  9 22:34:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 RADIUS: starting accounting session 533E2F47-0000002B
Nov  9 22:34:53 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 WPA: pairwise key handshake completed (RSN)
Nov  9 22:34:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPDISCOVER(br-lan) d4:4b:5e:59:94:72
Nov  9 22:34:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPOFFER(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:34:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPREQUEST(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:34:53 TreeDiagram daemon.info dnsmasq-dhcp[2977]: DHCPACK(br-lan) 144.118.192.112 d4:4b:5e:59:94:72
Nov  9 22:35:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:35:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:36:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:36:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:37:11 TreeDiagram daemon.info hostapd: wlan10: STA 44:39:c4:6e:70:42 WPA: group key handshake completed (RSN)
Nov  9 22:37:12 TreeDiagram daemon.info hostapd: wlan00: STA 00:1c:b3:ff:44:69 WPA: group key handshake completed (RSN)
Nov  9 22:37:12 TreeDiagram daemon.info hostapd: wlan00: STA 78:fd:94:89:e6:cc WPA: group key handshake completed (RSN)
Nov  9 22:37:12 TreeDiagram daemon.info hostapd: wlan10: STA 10:9a:dd:bf:fb:a1 WPA: group key handshake completed (RSN)
Nov  9 22:37:12 TreeDiagram daemon.info hostapd: wlan00: STA 60:45:bd:67:e9:ac WPA: group key handshake completed (RSN)
Nov  9 22:37:15 TreeDiagram daemon.info hostapd: wlan10: STA d4:4b:5e:59:94:72 IEEE 802.11: disassociated
Nov  9 22:37:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:37:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:38:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:38:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:39:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:39:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:40:43 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:40:43 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:41:44 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:41:44 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:42:44 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:42:44 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:43:44 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:43:44 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:44:44 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:44:44 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:45:44 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:45:44 TreeDiagram user.info sysinit: IP address is already set for the interface
Nov  9 22:46:44 TreeDiagram user.info sysinit: iface = br-lan
Nov  9 22:46:44 TreeDiagram user.info sysinit: IP address is already set for the interface
Title: Re: VPN seems to have stopped working
Post by: jjoepaulines on November 09, 2014, 11:13:04 pm
Log does't have anything related to VPN ... we may have to try the following to troubleshoot this problem...

     * Try to connect your clinet to your VPN server
     *  then please copy the Log and send to me..

I would like to work with you on this issue .. so please email me at [suspicious]joe.john@securifi.com[/suspicious]

Title: Re: VPN seems to have stopped working
Post by: francehopper on November 09, 2014, 11:32:54 pm
Log does't have anything related to VPN ... we may have to try the following to troubleshoot this problem...

     * Try to connect your clinet to your VPN server
     *  then please copy the Log and send to me..

I would like to work with you on this issue .. so please email me at [suspicious]joe.john@securifi.com[/suspicious]



Just sent you an email. Cheers!
Title: Re: VPN seems to have stopped working
Post by: jake on November 10, 2014, 07:32:34 am
Not sure if this is relevant, but I recently noticed my VPN server stopped working.  I checked the settings and found that the "Local Endpoint-Address" was wrong.  My WAN IP had changed, and the VPN settings had become incorrect.

I would expect that the VPN server settings would have been updated upon WAN IP change.  Just something to check.

Running R067
Title: Re: VPN seems to have stopped working
Post by: francehopper on November 12, 2014, 09:22:49 am
Considering this has now be isolated to one user on one machine, I'm inclined to say it's an issue with their machine. I do find it confusing though that the IP address to connect to is the WAN IP (which makes a lot more sense), and not the LAN IP that is displayed on the setup page for the VPN Server (at least that's how it appears on mine anyway).