Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

【SSLVPN】All user unable connect to resources after connecting SSL VPN

Posted
Updated
Bysengchun.yap@sangfor.com
Views13

Issue Description

All user unable connect to resources after connecting SSL VPN.

Error/Warning Information

  1. When logging in with Easy Connect, user unable to connect to resources and it will prompt out error "The requested IP address is illegal. Please contact the administartor"
    file
  2. SSL VPN system log will prompt the following error.
    file
  3. User unable to get virtual IP.

    Handling Process

  4. Known issue in SSL VPN M6.9-M7.6.8R2 version. (YJ20201207001, YJ20200712001）
  5. Root cause of the problem was due to the gateway ID obtained from the session session is inconsistent with the gateway ID obtained by the virtual IP allocation service, causing the client and server to fail to establish a command tunnel.
  6. Require to apply patch CTI-Support_M6.2-M7.6.9R1_TDComIpPolicy.ssu (Refer to attachments)

    Root Cause

    The gateway ID obtained from the session session is inconsistent with the gateway ID obtained by the virtual IP allocation service, causing the client and server to fail to establish a command tunnel.

Solution

If happen any abnormal after applying the patch, kindly rollback the settings:

  1. Access SSL VPN device backend.
  2. Execute “ cd /hislog/cti-support/TDComIpPolicy ”
  3. Execute " ./cti-support.sh -roll "