[SunRay-Users] Re: VPN Problem 28E with SR2

[Detlev Habicht]

Hi all,

i will answer myself:

Ciscos firmware asa802-k8.bin is buggy. So don't use it.
I found some hints about memory leaks.
I am now using asa804-k8.bin and asdm-615.bin and i don't have
to reboot the router now anymore (as described).

And i just saw the new patch 120879-08.

Here i found this:

6685185 Sun Ray VPN connection to Cisco ASA gateway doesn't re-key  
properly

Maybe, there was also a problem on SunRay side ...

Detlev


Am 23.11.2008 um 16:34 schrieb Detlev Habicht:

> Hi again,
>
> in addition to my posting i was able to catch some messages from the  
> ASA:
>
> 6|Nov 23 2008 16:23:21|302015: Built inbound UDP connection 18 for  
> outside:xx.x.xxx.58/56661 (xx.x.xxx.58/56661) to NP Identity  
> Ifc:xxx.xx.xx.209/500 (130.75.57.209/500)
> 3|Nov 23 2008 16:23:53|713902: Group = sxxxxxx1, IP = xx.x.xxx.58,  
> Removing peer from peer table failed, no match!
> 4|Nov 23 2008 16:23:53|713903: Group = sxxxxxx1, IP = xx.x.xxx.58,  
> Error: Unable to remove PeerTblEntry
> 6|Nov 23 2008 16:25:53|302016: Teardown UDP connection 18 for  
> outside:xx.x.xxx.58/56661 to NP Identity Ifc:xxx.xx.xx.209/500  
> duration 0:02:32 bytes 2020
>
> What does this mean - especially the removing message????
>
> Detlev
>
>
> Am 23.11.2008 um 13:39 schrieb Detlev Habicht:
>
>> Hi all,
>>
>> i have setuped a VPN connection with a Cisco ASA 5505 to a server  
>> cluster with server
>> software 4.0.
>>
>> I tested it with a Gobi7 from home via DSL. No problems.
>>
>> Now i do the same with a SunRay 2.
>>
>> Normally it works fine, but sometimes i see an OSD icon with the  
>> message 28E
>> and the SunRay is freezed.
>>
>> Start booting the SunRay via keyboard don't work. Keyboard does  
>> nothing.
>>
>> Access to the menu via stop m works, but restarting the SunRay with  
>> this way
>> stops also at 28E.
>>
>> Power recycle don't work, too.
>>
>> When i am rebooting the ASA 5505 while the SunRay still shows 28E  
>> don't work, too.
>>
>> Only first rebooting the ASA and then power recycle the SunRay helps.
>>
>> The first day i have this problem several times. So i was playing  
>> with
>> MTU value and set it now to 1256. The effect was that my problem is  
>> now
>> rare, but still exists.
>>
>> I found in the SuNRay OSD menu a lifetime value for VPN.
>> I set it now to a very small value, but i don't the
>> sense of this parameter.
>>
>> So, any ideas available?
>>
>> Thanx for any help.
>>
>> Detlev
>>
>> P.S.: Very funny and i don't want to think about this: Every time,  
>> when i see 28E
>>     on the SunRay, i noticed on a laptop in my home network that  
>> MSN messenger
>>     is disconnected. I hope this happened only by mischance ...
>>
>> --
>> Detlev  | Institut fuer Mikroelektronische Systeme
>> Habicht | D-30167 Hannover +49 511 76219662  
>> habicht at ims.unihannover.de
>> --------+-------- Handy    +49 172 5415752   
>> ---------------------------
>>
>> _______________________________________________
>> SunRay-Users mailing list
>> SunRay-Users at filibeto.org
>> http://www.filibeto.org/mailman/listinfo/sunray-users
>
> _______________________________________________
> SunRay-Users mailing list
> SunRay-Users at filibeto.org
> http://www.filibeto.org/mailman/listinfo/sunray-users