Im having the same issue with RV320 , Reboot clears the issue.
Easy VPN , with IPSEC Enabled. After a reboot clients can connect . After some time connections fail , with only PPTP working .
Error Logs below
2017-07-02, 08:00:13 VPN Log [grpips1][13] 10.0.20.0/24=== ...82.9.102.84===?: [Tunnel Disconnected] grpips1 instance with peer 82.9.102.84 {isakmp=#0/ipsec=#0}
2017-07-02, 07:59:57 VPN Log [grpips1][13] 10.0.20.0/24=== ...82.9.102.84===? #19: [Tunnel Established] sent ModeCfg reply, established
2017-07-02, 07:59:57 VPN Log [grpips1][13] 10.0.20.0/24=== ...82.9.102.84===? #19: [Tunnel Established] received XAUTH ack, established
2017-07-02, 07:59:53 VPN Log [grpips1][13] 10.0.20.0/24=== ...82.9.102.84===? #19: [Tunnel Established] ISAKMP SA established
2017-07-02, 07:59:53 VPN Log [grpips1][13] 10.0.20.0/24=== ...82.9.102.84===? #19: [Tunnel Authorize Fail] received Hash Payload does not match computed value
2017-07-02, 07:59:53 VPN Log [grpips1][12] 10.0.20.0/24=== ...82.9.102.84===?: [Tunnel Disconnected] grpips1 instance with peer 82.9.102.84 {isakmp=#0/ipsec=#0}
2017-07-02, 07:59:53 VPN Log [grpips1][12] 10.0.20.0/24=== ...82.9.102.84===? #18: [Tunnel Authorize Fail] no acceptable Oakley Transform
2017-07-02, 07:59:53 VPN Log [grpips1][12] 10.0.20.0/24=== ...82.9.102.84===? #18: [Tunnel Authorize Fail] CAST_CBC is not enabled for this connection. Attribute OAKLEY_HASH_ALGORITHM
2017-07-02, 07:59:53 VPN Log [grpips1][12] 10.0.20.0/24=== ...82.9.102.84===? #18: [Tunnel Authorize Fail] DES_CBC is not enabled for this connection. Attribute OAKLEY_HASH_ALGORITHM
2017-07-02, 07:59:53 VPN Log [grpips1][12] 10.0.20.0/24=== ...82.9.102.84===? #18: [Tunnel Authorize Fail] MODP_2048 is not enabled for this connection. Attribute OAKLEY_GROUP_DESCRIPTION
2017-07-02, 07:59:53 VPN Log [grpips1][12] 10.0.20.0/24=== ...82.9.102.84===? #18: [Tunnel Authorize Fail] RC5_R16_B64_CBC is not enabled for this connection. Attribute OAKLEY_HASH_ALGORITHM
I also notice that we are using group VPN access , so this should allow multiple users to access the VPN under that group , but i'm finding my self hitting the DISCONNECT icon on the VPN group to allow users to reconnect .
Example :
The next log shows the user disconnected .
| VPN Log |
[grpips1][16] 10.0.20.0/24=== ...82.69.23.111===172.16.100.102/32: [Tunnel Disconnected] grpips1 instance with peer 82.69.23.111 {isakmp=#0/ipsec=#0} |
but the GUI shows him still connected.
| Easy VPN |
172.16.100.102 |
306964grpips1=up |
Manually hitting the vpn disconnect Button in the GUI , clears the tunnel . And allows others to connect.
Any further help would much be appreciated.
