|
Question : SSL VPN doesn't work with wireless
|
|
Here is an interesting problem:
I've setup a WatchGuard x1250e and enabled SSL VPN. I've got the client installed on the machnine and I am able to successfully connect when my machine is wired to the network. When I'm wireless (in the same network as the wired) the SSL VPN has problems. Here is a snippet from the log file:
2008-12-23T15:53:03.368 OVPN:>LOG:1230065583,,NOTE: FlushIpNetTable failed on interface [16] {9F9FF7F7-2660-4F05-9DF7-D32C26C6AAB5} (status=5) : Access is denied.
2008-12-23T15:53:08.594 OVPN:>LOG:1230065588,,TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
2008-12-23T15:53:08.594 OVPN:>LOG:1230065588,,C:\WINDOWS\system32\route.exe ADD xxx.xxx.xxx.xxx MASK 255.255.255.255 5.1.1.254
2008-12-23T15:53:08.594 OVPN:>LOG:1230065588,W,ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=10]
2008-12-23T15:53:08.594 OVPN:>LOG:1230065588,,Route addition via IPAPI failed [adaptive]
2008-12-23T15:53:08.594 OVPN:>LOG:1230065588,,Route addition fallback to route.exe
2008-12-23T15:53:08.594 OVPN:>LOG:1230065588,W,ERROR: Windows route add command failed [adaptive]: returned error code 1
2008-12-23T15:53:08.594 OVPN:>LOG:1230065588,,C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.2.1.1
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,W,ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=16]
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,,Route addition via IPAPI failed [adaptive]
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,,Route addition fallback to route.exe
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,W,ERROR: Windows route add command failed [adaptive]: returned error code 1
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,,C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.2.1.1
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,W,ROUTE: route addition failed using CreateIpForwardEntry: Access is denied. [status=5 if_index=16]
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,,Route addition via IPAPI failed [adaptive]
2008-12-23T15:53:08.610 OVPN:>LOG:1230065588,,Route addition fallback to route.exe
2008-12-23T15:53:08.626 OVPN:>LOG:1230065588,W,ERROR: Windows route add command failed [adaptive]: returned error code 1
2008-12-23T15:53:12.682 Failed to restart DNS Client
2008-12-23T15:53:12.682 OVPN:>LOG:1230065588,I,Initialization Sequence Completed
2008-12-23T15:53:12.682 OVPN:>LOG:1230065588,,MANAGEMENT: >STATE:1230065588,CONNECTED,SUCCESS,10.2.1.2,xxx.xxx.xxx.xxx
2008-12-23T15:53:12.682 OVPN:>STATE:1230065588,CONNECTED,SUCCESS,10.2.1.2,xxx.xxx.xxx.xxx
2008-12-23T15:53:19.078 OVPN:>LOG:1230065598,,TCP/UDP: Closing socket
2008-12-23T15:53:19.078 OVPN:>LOG:1230065598,,C:\WINDOWS\system32\route.exe DELETE xxx.xxx.xxx.xxx MASK 255.255.255.255 5.1.1.254
2008-12-23T15:53:19.078 OVPN:>LOG:1230065598,W,ROUTE: route deletion failed using DeleteIpForwardEntry: Access is denied.
2008-12-23T15:53:19.078 OVPN:>LOG:1230065598,,Route deletion via IPAPI failed [adaptive]
2008-12-23T15:53:19.078 OVPN:>LOG:1230065598,,Route deletion fallback to route.exe
2008-12-23T15:53:19.234 OVPN:>LOG:1230065598,W,ERROR: Windows route delete command failed [adaptive]: returned error code 1
2008-12-23T15:53:19.234 OVPN:>LOG:1230065598,,C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.2.1.1
2008-12-23T15:53:19.234 OVPN:>LOG:1230065598,W,ROUTE: route deletion failed using DeleteIpForwardEntry: Access is denied.
2008-12-23T15:53:19.234 OVPN:>LOG:1230065598,,Route deletion via IPAPI failed [adaptive]
2008-12-23T15:53:19.234 OVPN:>LOG:1230065598,,Route deletion fallback to route.exe
2008-12-23T15:53:19.312 OVPN:>LOG:1230065598,W,ERROR: Windows route delete command failed [adaptive]: returned error code 1
2008-12-23T15:53:19.312 OVPN:>LOG:1230065598,,C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.2.1.1
2008-12-23T15:53:19.312 OVPN:>LOG:1230065598,W,ROUTE: route deletion failed using DeleteIpForwardEntry: Access is denied.
2008-12-23T15:53:19.312 OVPN:>LOG:1230065598,,Route deletion via IPAPI failed [adaptive]
2008-12-23T15:53:19.312 OVPN:>LOG:1230065598,,Route deletion fallback to route.exe
2008-12-23T15:53:19.374 Connection Closed.
I've tried this on two different computers and both work fine when wired, but not wireless. The connection ultimately gets established, but if the routes aren't changed it's useless.
Any thoughts?
|
Answer : SSL VPN doesn't work with wireless
|
|
The problem was in the encryption level. I had the VPN set to AES (192), switching to 3DES solved the problem.
|
|
|
|
|
