• 全部
  • 经验案例
  • 典型配置
  • 技术公告
  • FAQ
  • 漏洞说明
  • 全部
  • 全部
  • 大数据引擎
  • 知了引擎
产品线
搜索
取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式
高级搜索

F1050防火墙SSLVPN隧道建立失败

2023-07-17提问
  • 0关注
  • 0收藏,602浏览
零段
粉丝:0人 关注:0人

问题描述:

F1050防火墙开启SSLVPN功能,正常正常连接后突然断开,再次连接时提示VPN隧道建立失败。中间所有设备配置均为修改。

组网及组网描述:


最佳答案

粉丝:101人 关注:8人

其他终端正常吗

SSLVPN网关能访问吗。看下设备的日志

H3C SSL VPN客户端接入失败之破功大法

3 个回答
粉丝:32人 关注:3人

同时开启debug与抓包,然后拨测看一下

HN-CSX-ExtDC-G02-F1050-01>*Jul 14 15:16:13:261 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 594, pktid = 36004, offset = 0, ttl = 123, protocol = 6 checksum = 27167, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61885, destination port = 2000 sequence num = 0x8a0060cd, acknowledgement num = 0x1c562daf, flags = 0x18 window size = 511, checksum = 0xf3d7, header length = 20. *Jul 14 15:16:13:266 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36005, offset = 0, ttl = 123, protocol = 6 checksum = 27720, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61885, destination port = 2000 sequence num = 0x8a0062f7, acknowledgement num = 0x1c56302d, flags = 0x10 window size = 508, checksum = 0x73ed, header length = 20. *Jul 14 15:16:13:266 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36006, offset = 0, ttl = 123, protocol = 6 checksum = 27719, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61885, destination port = 2000 sequence num = 0x8a0062f7, acknowledgement num = 0x1c56302d, flags = 0x11 window size = 508, checksum = 0x73ec, header length = 20. *Jul 14 15:16:13:268 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36007, offset = 0, ttl = 123, protocol = 6 checksum = 27718, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61885, destination port = 2000 sequence num = 0x8a0062f8, acknowledgement num = 0x1c56302e, flags = 0x10 window size = 508, checksum = 0x73eb, header length = 20. *Jul 14 15:16:13:915 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Receiving, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 52, pktid = 36008, offset = 0, ttl = 123, protocol = 6 checksum = 27705, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Receiving IP packet from interface GigabitEthernet1/0/1.29. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x89320617, acknowledgement num = 0x00000000, flags = 0x2 window size = 64240, checksum = 0xe464, *Jul 14 15:16:13:915 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 52, pktid = 36008, offset = 0, ttl = 123, protocol = 6 checksum = 27705, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x89320617, acknowledgement num = 0x00000000, flags = 0x2 window size = 64240, checksum = 0xe618, header length = 32. *Jul 14 15:16:13:923 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36009, offset = 0, ttl = 123, protocol = 6 checksum = 27716, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x89320618, acknowledgement num = 0x439b8eab, flags = 0x10 window size = 512, checksum = 0x4bd2, header length = 20. *Jul 14 15:16:13:924 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 239, pktid = 36010, offset = 0, ttl = 123, protocol = 6 checksum = 27516, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x89320618, acknowledgement num = 0x439b8eab, flags = 0x18 window size = 512, checksum = 0xe53b, header length = 20. *Jul 14 15:16:13:935 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36011, offset = 0, ttl = 123, protocol = 6 checksum = 27714, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x893206df, acknowledgement num = 0x439b959c, flags = 0x10 window size = 512, checksum = 0x441a, header length = 20. *Jul 14 15:16:13:943 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 238, pktid = 36012, offset = 0, ttl = 123, protocol = 6 checksum = 27515, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x893206df, acknowledgement num = 0x439b959c, flags = 0x18 window size = 512, checksum = 0x738d, header length = 20. *Jul 14 15:16:13:950 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 258, pktid = 36013, offset = 0, ttl = 123, protocol = 6 checksum = 27494, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x893207a5, acknowledgement num = 0x439b9686, flags = 0x18 window size = 511, checksum = 0xbb0a, header length = 20. *Jul 14 15:16:13:955 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36014, offset = 0, ttl = 123, protocol = 6 checksum = 27711, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x8932087f, acknowledgement num = 0x439b9721, flags = 0x10 window size = 510, checksum = 0x40f7, header length = 20. *Jul 14 15:16:13:956 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36015, offset = 0, ttl = 123, protocol = 6 checksum = 27710, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61886, destination port = 2000 sequence num = 0x8932087f, acknowledgement num = 0x439b9721, flags = 0x11 window size = 510, checksum = 0x40f6, header length = 20. *Jul 14 15:16:13:967 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Receiving, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 52, pktid = 36016, offset = 0, ttl = 123, protocol = 6 checksum = 27697, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Receiving IP packet from interface GigabitEthernet1/0/1.29. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab041, acknowledgement num = 0x00000000, flags = 0x2 window size = 64240, checksum = 0xca50, *Jul 14 15:16:13:967 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 52, pktid = 36016, offset = 0, ttl = 123, protocol = 6 checksum = 27697, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab041, acknowledgement num = 0x00000000, flags = 0x2 window size = 64240, checksum = 0xcc04, header length = 32. *Jul 14 15:16:13:971 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36017, offset = 0, ttl = 123, protocol = 6 checksum = 27708, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab042, acknowledgement num = 0x356f0b6f, flags = 0x10 window size = 512, checksum = 0xc326, header length = 20. *Jul 14 15:16:13:971 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 239, pktid = 36018, offset = 0, ttl = 123, protocol = 6 checksum = 27508, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab042, acknowledgement num = 0x356f0b6f, flags = 0x18 window size = 512, checksum = 0x67ea, header length = 20. *Jul 14 15:16:13:975 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36019, offset = 0, ttl = 123, protocol = 6 checksum = 27706, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab109, acknowledgement num = 0x356f1260, flags = 0x10 window size = 512, checksum = 0xbb6e, header length = 20. *Jul 14 15:16:13:985 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 238, pktid = 36020, offset = 0, ttl = 123, protocol = 6 checksum = 27507, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab109, acknowledgement num = 0x356f1260, flags = 0x18 window size = 512, checksum = 0xa70e, header length = 20. *Jul 14 15:16:13:989 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 306, pktid = 36021, offset = 0, ttl = 123, protocol = 6 checksum = 27438, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab1cf, acknowledgement num = 0x356f134a, flags = 0x18 window size = 511, checksum = 0x9691, header length = 20. *Jul 14 15:16:13:992 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36022, offset = 0, ttl = 123, protocol = 6 checksum = 27703, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab2d9, acknowledgement num = 0x356f13f4, flags = 0x11 window size = 510, checksum = 0xb80b, header length = 20. *Jul 14 15:16:13:993 2023 HN-CSX-ExtDC-G02-F1050-01 IPFW/7/IPFW_PACKET: -COntext=1; Delivering, interface = GigabitEthernet1/0/1.29 version = 4, headlen = 20, tos = 0 pktlen = 40, pktid = 36023, offset = 0, ttl = 123, protocol = 6 checksum = 27702, s = 10.82.212.66, d = 10.82.29.252 channelID = 0, vpn-InstanceIn = 0, vpn-InstanceOut = 0. prompt: Forwarding IP packet to upper layer. Payload: TCP source port = 61887, destination port = 2000 sequence num = 0xf91ab2da, acknowledgement num = 0x356f13f5, flags = 0x10 window size = 510, checksum = 0xb80a, header length = 20. 这是隧道建立失败时的debug信息, 建立失败时看了虚拟网卡,状态是正常的。

发表时间:2023-07-17

还有一点,多次连接有时又能脸上,设备同时在线数60多,在授权范围内。

发表时间:2023-07-17
粉丝:186人 关注:0人

您好,是iNode连接的吗

是的

发表时间:2023-07-17

你用的版本是啥?用新的适配比较好一点

无名之辈 发表时间:2023-07-17

E0548,这个是定制的版本,我再搞个试下。

发表时间:2023-07-17
知了小白
粉丝:0人 关注:0人


故障现象:inode客户端连接提示隧道建立失败

故障原因:SSLVPN地址池IP地址被分配完。

编辑答案

你正在编辑答案

如果你要对问题或其他回答进行点评或询问,请使用评论功能。

分享扩散:

提出建议

    +

亲~登录后才可以操作哦!

确定

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作

举报

×

侵犯我的权益 >
对根叔社区有害的内容 >
辱骂、歧视、挑衅等(不友善)

侵犯我的权益

×

泄露了我的隐私 >
侵犯了我企业的权益 >
抄袭了我的内容 >
诽谤我 >
辱骂、歧视、挑衅等(不友善)
骚扰我

泄露了我的隐私

×

您好,当您发现根叔知了上有泄漏您隐私的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您认为哪些内容泄露了您的隐私?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)

侵犯了我企业的权益

×

您好,当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱,我们会在审核后尽快给您答复。
  • 1. 您举报的内容是什么?(请在邮件中列出您举报的内容和链接地址)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
  • 3. 是哪家企业?(营业执照,单位登记证明等证件)
  • 4. 您与该企业的关系是?(您是企业法人或被授权人,需提供企业委托授权书)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

×

原文链接或出处

诽谤我

×

您好,当您发现根叔知了上有诽谤您的内容时,您可以向根叔知了进行举报。 请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱,我们会尽快处理。
  • 1. 您举报的内容以及侵犯了您什么权益?(请在邮件中列出您举报的内容、链接地址,并给出简短的说明)
  • 2. 您是谁?(身份证明材料,可以是身份证或护照等证件)
我们认为知名企业应该坦然接受公众讨论,对于答案中不准确的部分,我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

×

垃圾广告信息
色情、暴力、血腥等违反法律法规的内容
政治敏感
不规范转载 >
辱骂、歧视、挑衅等(不友善)
骚扰我
诱导投票

不规范转载

×

举报说明