Hi list!

It is my first post, and i have a question.

Im using the ShrewSoft Client to Site VPN on Linux. It connects to a firewall 
"Watchguard". On the configuration, im using just 1 ip address for the pool of 
virtual addresses that the firewall assigns to the VPN client.
The problem is that after a reboot of the machine, it tries to connect again 
and it fails, and on the firewall we see an error that says:

"2017-01-11 16:55:12 CreditoDeLaCasa-XTM-515-1 iked 
ras_request_ip_from_addr_pool(): user vpn-soca-3 requests for an IP from 
address pool VPN-Soca-3_mp, but none is available"

So, the firewall does not release the virtual IP address because it never 
receives the logout message.

Also, i performed some tests: at the time with the VPN client connected, if we 
disconnect the network cable, the firewall do receives the logout message  and 
the IP is free for another connection from that user. The same occurs if we 
kill the shrewsoft process. So the problema only occurs when the machine is 
restarted.

Does anyone has any clue on what may be happening and how to solve it?

Thanks a lot! Regards.

Federico Basso
CISSP - Consultor Seguridad IT
CODIC Seguridad IT
Argentina I EspaƱa I Uruguay
t:  +5411 52632230 I +3493 7243500 I +598 27066055
www.codic.com.uy<http://www.codic.com.uy/>

_______________________________________________
vpn-help mailing list
[email protected]
https://lists.shrew.net/mailman/listinfo/vpn-help

Reply via email to