Forum Discussion

bofh_32498's avatar
bofh_32498
Icon for Nimbostratus rankNimbostratus
Nov 17, 2008

linux client hangs up (ubuntu 8.10)

I have the strangest problems connecting my Ubuntu 8.10 with firefox 3 successfully.

 

 

1st Problem is the connection device:

 

- Internal connection (using eth0 over the intranet allthough this makes no sense at all) is working fine.

 

- eth0 or wlan0: using an external connection I get a connection succeeded and a hang up within 2-10.5 minutes depending on the connection (dsl or direct internet).

 

- using my 3g card gives me 10.5 minutes exactely before it hangs up.

 

 

This is what I've checked so far:

 

- reinstalling the client did not solve, problem seems to be more on the pppd side.

 

- sslvpn.err shows: SSLVpn::svpn: error 18 ( I cannot find any information on that )

 

- pppd.dbg shows (ip addresses deleted):

 

 

 

using channel 3

 

Using interface ppp0

 

Connect: ppp0 <--> /dev/pts/1

 

sent [LCP ConfReq id=0x1 ]

 

rcvd [LCP ConfReq id=0x1 ]

 

sent [LCP ConfAck id=0x1 ]

 

rcvd [LCP ConfAck id=0x1 ]

 

sent [LCP EchoReq id=0x0 magic=0xf89ac497]

 

sent [CCP ConfReq id=0x1 ]

 

sent [IPCP ConfReq id=0x1 ]

 

rcvd [LCP EchoReq id=0x0 magic=0x7235a788]

 

sent [LCP EchoRep id=0x0 magic=0xf89ac497]

 

rcvd [IPCP ConfReq id=0x1 ]

 

sent [IPCP ConfRej id=0x1 ]

 

rcvd [CCP ConfReq id=0x1 ]

 

sent [CCP ConfRej id=0x1 ]

 

rcvd [LCP EchoRep id=0x0 magic=0x7235a788]

 

rcvd [CCP ConfRej id=0x1 ]

 

sent [CCP ConfReq id=0x2]

 

rcvd [IPCP ConfAck id=0x1 ]

 

rcvd [IPCP ConfReq id=0x2 ]

 

sent [IPCP ConfAck id=0x2 ]

 

Cannot determine ethernet address for proxy ARP

 

local IP address xxx.xxx.xxx.xxx

 

remote IP address xxx.xxx.xxx.xxx

 

Script /etc/ppp/ip-up started (pid 8760)

 

rcvd [CCP ConfReq id=0x2]

 

sent [CCP ConfAck id=0x2]

 

Script /etc/ppp/ip-up finished (pid 8760), status = 0x0

 

rcvd [CCP ConfAck id=0x2]

 

No response to 2 echo-requests

 

Serial link appears to be disconnected.

 

Connect time 2.0 minutes.

 

Sent 7314 bytes, received 13330 bytes.

 

Script /etc/ppp/ip-down started (pid 8871)

 

sent [LCP TermReq id=0x2 "Peer not responding"]

 

Script /etc/ppp/ip-down finished (pid 8871), status = 0x0

 

sent [LCP TermReq id=0x3 "Peer not responding"]

 

Connection terminated.

 

Modem hangup

 

 

 

- tcpdump shows the server just stops responding after a while

 

- Windows clients work no problem.

 

 

I am completely clueless here and am searching for a workaraound... pls help
BIG-IP Access Policy Manager (APM)
remote access
security

1 Reply

Sort By
  • mal_57091's avatar
    mal_57091
    Icon for Nimbostratus rankNimbostratus
    Nov 21, 2008
    Hi There,

     

     

    It looks like you hit a DPD timer (Dead Peer Detection). FirePass uses SSL encrypted PPP connections. PDP is doing using LCP-echo packets over the PPP connection between the client and the FirePass. FirePass will send one LCP-echo every 30 seconds and upon four un-acknowledge LCP-echo's (2 minutes) will consider the peer dead and reap the connection.

     

     

    The best way to troubleshoot this (in my experience) is run a TCPDump on the actual PPP interface (e.g.: tcpdump -s0 -i pppX) created by FirePass and look for the LCP-echo and responses. Hopefully from here you should be able to figure this one out.

     

     

    Cheers,

     

    Mal