NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

PopinatorWV's avatar
PopinatorWV
Aspirant
May 09, 2016
Solved

IPSec VPN tunnel between SRX5308 and a FVS336Gv3 suddenly changes to a SSLVPN tunnel

I had an IPSec VPN tunnel between a SRX5308 router and a FVS318G router had to change the FVS318G router went to a FVS336Gv3 router. Set up the IPSec VPN tunnel on the 336Gv3 router and all was fine for a couple of days, I then realized the IPSec tunnel was not working I investigated and found that a SSL VPN tunnel had replaced the IPSec one. I did not set this tunnel up the client address range begining and ending are no where near the client address ranges we actually use. Also there is no info in the DNS Suffix or the primary or secondary DNS servers.

1.) Can anyone please tell me what happened?

2.) As well as how do I fix this or turn off the SSLVPN tunnel and re-establish the IPSec tunnel

3.) Or is the SSL tunnel better than the IPSec tunnel?

 

Thank you in advance for any assistance on this problem.

  • DaneA's avatar
    DaneA
    May 19, 2016

    Hi PopinatorWV,

     

    For the logs to be analyzed, I advise you to open an online case with NETGEAR Support at anytime.  State your concerns and attach the logs on the online case you have opened.  The online case will be forwarded to the engineering team to be analyzed. 

     

     

    Regards,

     

    DaneA

    NETGEAR Community Team

6 Replies

  • DaneA's avatar
    DaneA
    NETGEAR Employee Retired

    Hi PopinatorWV, 

     

    For me, it is very unlikely for the IPSec VPN setup to suddenly switch to SSL VPN setup without having a person reconfigure the settings of both firewall(s).  Are you the only person that has access to both firewall(s)? 

     

    To re-establish the IPSec VPN tunnel, you will need to reconfigure everything.  Otherwise, if ever you have backed-up the configuration of both firewall(s) when IPSec VPN was working fine, then you may just restore the configuration file to the firewall(s). 

     

    Both IPSec VPN and SSL VPN have their own advantages depending on the requirements of the network or client(s).  Personally, I prefer IPSec VPN since I find it easier to set it up.

     

     

    Regards,

     

    DaneA

    NETGEAR Community Team

  • DaneA's avatar
    DaneA
    NETGEAR Employee Retired

    Hi PopinatorWV,

     

    I've just read your message.  Kindly keep us posted. :) 

     

     

    Regards,

     

    DaneA

    NETGEAR Community Team

    • PopinatorWV's avatar
      PopinatorWV
      Aspirant

      Hello again all,

      Well I tried what was suggested to no avail. I was able to get  the IPSec VPN tunnel up again only thing is that the SSL VPN was also still up. After about an hour or so I checked the on line status of the IPSec and found it was disconnected and  the SSL VPN was active and connected. I even went so far as to manualy re-configure both the SRX5308 and the FVS336Gv3 routers same exacxt thing happened again. Is there a way to turn off the SSLVPN or not? How difficult is the SSLVPN to set up, and do I need an SSL certificate for each router? I really need to get this tunnel established and working properly ASAP. Thank you in advance for your assistance.

      • DaneA's avatar
        DaneA
        NETGEAR Employee Retired

        Hi PopinatorWV,

         

        Kindly post image(s) or screenshot(s) that shows the IPSec VPN suddenly switches to SSL VPN on both SRX5308 and FVS336Gv3. 

         

         

        Regards,

         

        DaneA
        NETGEAR Community Team

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More