Message authentication code incorrect with RV325

[gabriel.lewertowski]

Hi,

We have a small network with few computers behind a RV325 router. When we try to download gigabytes of data from outside, it crashes after a random amount of time :

ssh_dispatch_run_fatal: Connection to x.x.x.x port 22: message authentication code incorrect
rsync: connection unexpectedly closed (15967126271 bytes received so far) [receiver]
rsync error: error in rsync protocol data stream (code 12) at io.c(235) [receiver=3.1.2]
rsync: connection unexpectedly closed (178631 bytes received so far) [generator]
rsync error: unexplained error (code 255) at io.c(235) [generator=3.1.2]

We are in the same situation as the one described here : https://serverfault.com/questions/878394/how-to-diagnose-strange-network-failure

It seems that the RV320 router was responsible for this. Has anyone already encountered this problem ? Is there a solution ?

Thanks.

[Georg Pauwen]

Hello

just to be sure, check if you are running the latest firmware, which currently is release 1.4.2.19.

Also, unless you need ssh, try and disable it for all users (page 104 of the attached guide)...

https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv320/administration/guide/en/rv32x_ag_en.pdf

[gabriel.lewertowski]

Hi,

Thanks for your answer.

I am indeed running the latest 1.4.2.19 firmware. For the attached guide, the page you mention refers to VPN, but we don't use it...

[gabriel.lewertowski]

Hi,

We have bought another Cisco RV325, but the problem persists. We have tried different setups, it shows that the problem comes from the RV325, more particularly when it communicates with the outside of the network.

 The red cross indicates that when we download a big file (~15GB) from a dedicated server through SSH, it crashes with :

ssh_dispatch_run_fatal: Connection to x.x.x.x port 22: message authentication code incorrect
rsync: connection unexpectedly closed (15967126271 bytes received so far) [receiver]
rsync error: error in rsync protocol data stream (code 12) at io.c(235) [receiver=3.1.2]
rsync: connection unexpectedly closed (178631 bytes received so far) [generator]
rsync error: unexplained error (code 255) at io.c(235) [generator=3.1.2]

The green V indicates that the download succeeds.

Here a screenshot of the wireshark capture at the moment of crash (I cannot upload the .pcap file to the forum, is there a way ?)

Our internal server is p54BE8357.dip0.t-ipconnect.de., the dedicated server is host109-155-125-176.range109-155.btcentralplus.com..

Thanks.