- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SRX5308 VPN can't connect suddently, need help, urgent, thks
Hi all,
our SRX5308 was running well during years and suddenlty this morning, cant connect to phase1 VPN ipsec. VPN doesn't work at all now. Nothing had been touched couple of weeks before. Don't understand. Need help our production is stopped...
I have this log, with strange "Quantum of Class" kernel error. I tried to change NTP server address, nothing changed.
VPN log :
Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO: Adding IKE configuration with identifier "OfficeVPN"
Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO: Adding IPSec configuration with identifier "OfficeVPN"
Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO: IKE configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] WARNING: no phase1 found for "OfficeVPN"
Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] INFO: IPSec configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 05 17:46:42 2019 (GMT +0100): [SRX5308] [IKE] WARNING: no phase2 found for "OfficeVPN"
Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO: Adding IKE configuration with identifier "OfficeVPN"
Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO: Adding IPSec configuration with identifier "OfficeVPN"
Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO: IKE configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] WARNING: no phase1 found for "OfficeVPN"
Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] INFO: IPSec configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 05 17:46:28 2019 (GMT +0100): [SRX5308] [IKE] WARNING: no phase2 found for "OfficeVPN"
Wed Jun 05 17:08:41 2019 (GMT +0100): [SRX5308] [IKE] INFO: Adding IKE configuration with identifier "OfficeVPN"
Wed Jun 05 17:08:41 2019 (GMT +0100): [SRX5308] [IKE] INFO: Adding IPSec configuration with identifier "OfficeVPN"
Wed Jun 05 16:07:49 2019 (GMT +0000): [SRX5308] [IKE] INFO: clock skew detected, restarting racoon
Wed Jun 05 16:07:49 2019 (GMT +0000): [SRX5308] [IKE] INFO: clock skew detected, restarting racoon
Wed Jun 05 16:07:49 2019 (GMT +0000): [SRX5308] [IKE] INFO: clock skew detected, restarting racoon
Sat Jan 01 00:00:11 2000 (GMT +0000): [SRX5308] [IKE] INFO: IKE started
logs:
Wed Jun 5 17:10:19 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IKE configuration with identifier "OfficeVPN"
Wed Jun 5 17:10:19 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IPSec configuration with identifier "OfficeVPN"
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IKE configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase1 found for "OfficeVPN"
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IPSec configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase2 found for "OfficeVPN"
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000419665a00
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000418d0e880,fh 0x0,skb a80000041e55a080,t a80000041e569010),p a800000418d0e800,r 0000000000000000,b a80000041e569038
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000418d0e880,handle 0x00000000,tca a80000041fc38a80,arg a800000417d0b950),opt a800000418f69230,p a800000418d0e800,r 0000000000000000,*arg 0x0
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000418d0e880,handle 0x00000000)
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000418d0e880)
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39580,arg 0xa800000418d0e808),p a800000418d0e880,f 0000000000000000
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39580,walker a80000041775f900),p a800000418d0e880
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39580),p a800000418d0e880
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000418f69400
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000418f88980,fh 0x0,skb a80000041e55a080,t a80000041e569010),p a800000417633680,r 0000000000000000,b a80000041e569038
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000418f88980,handle 0x00000000,tca a80000041fc38a80,arg a8000004181eb950),opt a800000418f69830,p a800000417633680,r 0000000000000000,*arg 0x0
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000418f88980,handle 0x00000000)
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000418f88980)
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39280,arg 0xa80000041a569f08),p a800000417f39480,f 0000000000000000
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39280,walker a800000417d0b900),p a800000417f39480
Wed Jun 5 17:10:18 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39280),p a800000417f39480
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] ntpEnable: NTPD started successfully
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Enabling NTP
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Using Secondary Server: 1.fr.pool.ntp.org
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Using Primary Server: 0.fr.pool.ntp.org
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Timezone difference :-60
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Daylight saving: Disabled
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Time Zone: 26
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Status: Enabled
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] ntpDisable: NTPD disabled successfully
Wed Jun 5 17:10:09 2019((GMT+0100)) [SRX5308][System][NTP] Disabling NTP
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 11024 is big. Consider r2q change.
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10002 is big. Consider r2q change.
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] HTB: quantum of class 10001 is big. Consider r2q change.
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000418f69200
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000417f39580,fh 0x0,skb a800000418f68500,t a80000041e55d010),p a800000418d0e880,r 0000000000000000,b a80000041e55d038
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000417f39580,handle 0x00000000,tca a80000041fc38a80,arg a800000417c0f950),opt a800000419665e30,p a800000418d0e880,r 0000000000000000,*arg 0x0
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000417f39580,handle 0x00000000)
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000417f39580)
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39400,arg 0xa800000418d0e888),p a800000417f39580,f 0000000000000000
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39400,walker a800000417c6b900),p a800000417f39580
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39400),p a800000417f39580
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] p->perfect 0000000000000000 p->h a800000418f69800
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_dump(tp a800000417f39280,fh 0x0,skb a800000418f68500,t a80000041e55d010),p a800000417f39480,r 0000000000000000,b a80000041e55d038
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_change(tp a800000417f39280,handle 0x00000000,tca a80000041fc38a80,arg a800000417c4f950),opt a800000419665a30,p a800000417f39480,r 0000000000000000,*arg 0x0
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_get(tp a800000417f39280,handle 0x00000000)
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_init(tp a800000417f39280)
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_delete(tp a800000417f39480,arg 0xa800000418d0e808),p a80000041a569f00,f 0000000000000000
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_walk(tp a800000417f39480,walker a800000417c0f900),p a80000041a569f00
Wed Jun 5 17:10:08 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] tcindex_destroy(tp a800000417f39480),p a80000041a569f00
Wed Jun 5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IKE configuration with identifier "OfficeVPN"
Wed Jun 5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] Adding IPSec configuration with identifier "OfficeVPN"
Wed Jun 5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IKE configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase1 found for "OfficeVPN"
Wed Jun 5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] IPSec configuration with identifier "OfficeVPN" deleted sucessfully
Wed Jun 5 17:10:05 2019((GMT+0100)) [SRX5308][System][VIPSECURE] no phase2 found for "OfficeVPN"
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] ntpEnable: NTPD started successfully
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Enabling NTP
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Using Secondary Server: 1.fr.pool.ntp.org
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Using Primary Server: 0.fr.pool.ntp.org
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Timezone difference :-60
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Daylight saving: Disabled
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Time Zone: 26
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Status: Enabled
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] ntpDisable: NTPD disabled successfully
Wed Jun 5 17:09:16 2019((GMT+0100)) [SRX5308][System][NTP] Disabling NTP
Wed Jun 5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb3: no IPv6 routers present
Wed Jun 5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb2: no IPv6 routers present
Wed Jun 5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb1: no IPv6 routers present
Wed Jun 5 17:08:53 2019((GMT+0100)) [SRX5308][Kernel][KERNEL] ifb0: no IPv6 routers present
Does anyone got this ? Any idea ?
How to contact Netgear support ?
Thanks
Laurent
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
ok for VPN trouble it was our internet provider (Orange in France) who changed their box setup and behavior without notified us... great. But this doesn't explain all the logs.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
Glad you figured this out and got it working.
The logs can have some weird stuff in them when things break. Some of the stuff in my fvs318n's error logs are so cryptic you can tell it was just for the programmer working on the firmware. 😞
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
And I forgot to add that it's not just netgear stuff that has these odd log messages as my cisco rv016 does the same thing--it's par for the course in smb routers it seems.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
Thanks for your reply.
Agree : difficult to understand if "HTB: quantum of class 11024 is big. Consider r2q change" is just harmless or very closed by a kernel panic.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
If you continued to have problems after your isp correct the issue on their end and you rebooted the unit, I would worry. Otherwise, it's just another quirk in these machines.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
Sounds like everything is fine now.
Our Orange ISP here in France knows what is good for us, even with pro contracts : sometimes they just change some rules without any notification, force their box update, then everything is down in our office after...
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
Don't you hate it when change does that? I've seen my fair share of that as well. Bon jour/Bonne nuit. 🙂
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
Of course they let me spent 2 crazy days to not understand what's happened. I was not on site...
Orange ISP are terribly arrogant, they really don't care customers, even doesn't know who they are, what they need, etc... Big brain engineers knowing what is good for us.
But... Orange network is really efficient at a pretty good cost : fiber 1Gb / 500Mb around 30€ / month...
Thanks for your french !
Best regards
Laurent
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: SRX5308 VPN can't connect suddently, need help, urgent, thks
Oh of course. 😞 I would have thought ISPs would be much better in Europe in terms of service, but it seems like they are the same is in the US, which is still better than what I've seen in India, but not by much anymore as the US ISPs get more and more shady.
But as you mention, the cost has come down--that's an amazing amount of bandwidth for that price! To give you some comparison, here's what I pay on the various accounts I administer:
500/50 - $80
100/10 - $67
100/10 - $55
400/10 - $90
At one of the locations 1G/1G is available, but I haven't inquired yet about the cost and installation since I will need to make time for network havoc and downtime. 😞
I met my spouse in Paris when she was studying there, and took French in high school that I never thought I'd use. I know enough French to get myself in trouble and then I use my 'getting out of trouble' phrase: Je ne parle pas Francais. Je suis bête American.
One of my wife's good friends there is getting married this year so we will be able to get to see the other areas of the country. 🙂 I can't wait. I really enjoy it there.