Orbi WiFi 7 RBE973
Reply

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

Laurent78000
Aspirant

SRX5308 VPN can't connect suddently, need help, urgent, thks

Hi all,

 

our SRX5308 was running well during years and suddenlty this morning, cant connect to phase1 VPN ipsec. VPN doesn't work at all now. Nothing had been touched couple of weeks before. Don't understand. Need help our production is stopped...

 

I have this log, with strange "Quantum of Class" kernel error. I tried to change NTP server address, nothing changed.

 

VPN log :

 

Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO:  Adding IKE configuration with identifier "OfficeVPN"

Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO:  Adding IPSec configuration with identifier "OfficeVPN"

Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO:  IKE configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] WARNING:  no phase1 found for "OfficeVPN"

Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO:  IPSec configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] WARNING:  no phase2 found for "OfficeVPN"

Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO:  Adding IKE configuration with identifier "OfficeVPN"

Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO:  Adding IPSec configuration with identifier "OfficeVPN"

Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO:  IKE configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] WARNING:  no phase1 found for "OfficeVPN"

Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO:  IPSec configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] WARNING:  no phase2 found for "OfficeVPN"

Wed Jun 05 17:08:41 2019 (GMT +0100): [SRX5308] [IKE] INFO:  Adding IKE configuration with identifier "OfficeVPN"

Wed Jun 05 17:08:41 2019 (GMT +0100): [SRX5308] [IKE] INFO:  Adding IPSec configuration with identifier "OfficeVPN"

Wed Jun 05 16:07:49 2019 (GMT +0000): [SRX5308] [IKE] INFO:  clock skew detected, restarting racoon 

Wed Jun 05 16:07:49 2019 (GMT +0000): [SRX5308] [IKE] INFO:  clock skew detected, restarting racoon 

Wed Jun 05 16:07:49 2019 (GMT +0000): [SRX5308] [IKE] INFO:  clock skew detected, restarting racoon 

Sat Jan 01 00:00:11 2000 (GMT +0000): [SRX5308] [IKE] INFO:  IKE started

 

 

logs:

 

Wed Jun  5 17:10:19 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IKE configuration with identifier "OfficeVPN"

Wed Jun  5 17:10:19 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IPSec configuration with identifier "OfficeVPN"

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IKE configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase1 found for "OfficeVPN"

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IPSec configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase2 found for "OfficeVPN"

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000419665a00

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000418d0e880,fh 0x0,skb a80000041e55a080,t a80000041e569010),p a800000418d0e800,r 0000000000000000,b a80000041e569038

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000418d0e880,handle 0x00000000,tca a80000041fc38a80,arg a800000417d0b950),opt a800000418f69230,p a800000418d0e800,r 0000000000000000,*arg 0x0

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000418d0e880,handle 0x00000000)

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000418d0e880)

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39580,arg 0xa800000418d0e808),p a800000418d0e880,f 0000000000000000

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39580,walker a80000041775f900),p a800000418d0e880

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39580),p a800000418d0e880

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000418f69400

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000418f88980,fh 0x0,skb a80000041e55a080,t a80000041e569010),p a800000417633680,r 0000000000000000,b a80000041e569038

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000418f88980,handle 0x00000000,tca a80000041fc38a80,arg a8000004181eb950),opt a800000418f69830,p a800000417633680,r 0000000000000000,*arg 0x0

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000418f88980,handle 0x00000000)

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000418f88980)

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39280,arg 0xa80000041a569f08),p a800000417f39480,f 0000000000000000

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39280,walker a800000417d0b900),p a800000417f39480

Wed Jun  5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39280),p a800000417f39480

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] ntpEnable: NTPD started successfully

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Enabling NTP

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Using Secondary Server: 1.fr.pool.ntp.org 

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Using Primary Server: 0.fr.pool.ntp.org 

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Timezone difference :-60

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Daylight saving: Disabled 

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Time Zone: 26 

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Status: Enabled 

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] ntpDisable: NTPD disabled successfully

Wed Jun  5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Disabling NTP

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000418f69200

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000417f39580,fh 0x0,skb a800000418f68500,t a80000041e55d010),p a800000418d0e880,r 0000000000000000,b a80000041e55d038

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000417f39580,handle 0x00000000,tca a80000041fc38a80,arg a800000417c0f950),opt a800000419665e30,p a800000418d0e880,r 0000000000000000,*arg 0x0

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000417f39580,handle 0x00000000)

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000417f39580)

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39400,arg 0xa800000418d0e888),p a800000417f39580,f 0000000000000000

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39400,walker a800000417c6b900),p a800000417f39580

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39400),p a800000417f39580

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000418f69800

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000417f39280,fh 0x0,skb a800000418f68500,t a80000041e55d010),p a800000417f39480,r 0000000000000000,b a80000041e55d038

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000417f39280,handle 0x00000000,tca a80000041fc38a80,arg a800000417c4f950),opt a800000419665a30,p a800000417f39480,r 0000000000000000,*arg 0x0

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000417f39280,handle 0x00000000)

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000417f39280)

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39480,arg 0xa800000418d0e808),p a80000041a569f00,f 0000000000000000

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39480,walker a800000417c0f900),p a80000041a569f00

Wed Jun  5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39480),p a80000041a569f00

Wed Jun  5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IKE configuration with identifier "OfficeVPN"

Wed Jun  5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IPSec configuration with identifier "OfficeVPN"

Wed Jun  5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IKE configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun  5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase1 found for "OfficeVPN"

Wed Jun  5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IPSec configuration with identifier "OfficeVPN" deleted sucessfully

Wed Jun  5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase2 found for "OfficeVPN"

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] ntpEnable: NTPD started successfully

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Enabling NTP

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Using Secondary Server: 1.fr.pool.ntp.org 

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Using Primary Server: 0.fr.pool.ntp.org 

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Timezone difference :-60

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Daylight saving: Disabled 

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Time Zone: 26 

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Status: Enabled 

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] ntpDisable: NTPD disabled successfully

Wed Jun  5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Disabling NTP

Wed Jun  5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb3: no IPv6 routers present

Wed Jun  5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb2: no IPv6 routers present

Wed Jun  5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb1: no IPv6 routers present

Wed Jun  5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb0: no IPv6 routers present

 

 

Does anyone got this ? Any idea ?

How to contact Netgear support ?

 

Thanks

Laurent

Model: SRX5308|PROSAFE Gigabit Quad WAN SSL & IPSEC VPN Firewall
Message 1 of 10
Laurent78000
Aspirant

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

ok for VPN trouble it was our internet provider (Orange in France) who changed their box setup and behavior without notified us... great. But this doesn't explain all the logs.

 

 

Message 2 of 10
SamirD
Prodigy

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

Glad you figured this out and got it working.

 

The logs can have some weird stuff in them when things break.  Some of the stuff in my fvs318n's error logs are so cryptic you can tell it was just for the programmer working on the firmware. 😞

Message 3 of 10
SamirD
Prodigy

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

And I forgot to add that it's not just netgear stuff that has these odd log messages as my cisco rv016 does the same thing--it's par for the course in smb routers it seems.

Message 4 of 10
Laurent78000
Aspirant

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

Thanks for your reply.

 

Agree : difficult to understand if "HTB: quantum of class 11024 is big. Consider r2q change" is just harmless or very closed by a kernel panic.

 

 

Message 5 of 10
SamirD
Prodigy

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

If you continued to have problems after your isp correct the issue on their end and you rebooted the unit, I would worry.  Otherwise, it's just another quirk in these machines.

Message 6 of 10
Laurent78000
Aspirant

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

Sounds like everything is fine now.

 

Our Orange ISP here in France knows what is good for us, even with pro contracts : sometimes they just change some rules without any notification, force their box update, then everything is down in our office after...

Message 7 of 10
SamirD
Prodigy

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

Don't you hate it when change does that?  I've seen my fair share of that as well.  Bon jour/Bonne nuit. 🙂

Message 8 of 10
Laurent78000
Aspirant

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

Of course they let me spent 2 crazy days to not understand what's happened. I was not on site...

 

Orange ISP are terribly arrogant, they really don't care customers, even doesn't know who they are, what they need, etc... Big brain engineers knowing what is good for us.

 

But... Orange network is really efficient at a pretty good cost : fiber 1Gb / 500Mb around 30€ / month...

 

Thanks for your french !

Best regards

Laurent

Message 9 of 10
SamirD
Prodigy

Re: SRX5308 VPN can't connect suddently, need help, urgent, thks

Oh of course. 😞  I would have thought ISPs would be much better in Europe in terms of service, but it seems like they are the same is in the US, which is still better than what I've seen in India, but not by much anymore as the US ISPs get more and more shady.

 

But as you mention, the cost has come down--that's an amazing amount of bandwidth for that price!  To give you some comparison, here's what I pay on the various accounts I administer:

500/50 - $80

100/10 - $67

100/10 - $55

400/10 - $90

 

At one of the locations 1G/1G is available, but I haven't inquired yet about the cost and installation since I will need to make time for network havoc and downtime. 😞

 

I met my spouse in Paris when she was studying there, and took French in high school that I never thought I'd use.  I know enough French to get myself in trouble and then I use my 'getting out of trouble' phrase:  Je ne parle pas Francais.  Je suis bête American. Smiley LOL

 

One of my wife's good friends there is getting married this year so we will be able to get to see the other areas of the country. 🙂  I can't wait.  I really enjoy it there. Smiley Happy

Message 10 of 10
Discussion stats
  • 9 replies
  • 3224 views
  • 0 kudos
  • 2 in conversation
Announcements