What's new

Strange VPN issue

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

BubbleTrouble

Occasional Visitor
My router is a Billion 7800DX with the latest firmware. I have configured L2TP on it and am able to use my mobile phone running android to access my home network. My phone's provider is vodafone.

Although my phone connects up and i can access my PCs, after disconnecting my VPN tunnel on my phone, my router continues to report the following on its logs:

Dec 2 20:56:44 authpriv warn pluto[24481]: "PG-VPN"[2] 212.183.128.62 #237: max number of retransmissions (2) reached STATE_QUICK_I1. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Dec 2 20:56:44 authpriv warn pluto[24481]: "PG-VPN"[2] 212.183.128.62 #238: initiating Quick Mode PSK+ENCRYPT+IKEv2ALLOW+SAREFTRACK to replace #237 {using isakmp#58 msgid:f91253a7 proposal=defaults pfsgroup=no-pfs}
Dec 2 20:57:54 authpriv warn pluto[24481]: "PG-VPN"[2] 212.183.128.62 #238: max number of retransmissions (2) reached STATE_QUICK_I1. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Dec 2 20:57:54 authpriv warn pluto[24481]: "PG-VPN"[2] 212.183.128.62 #239: initiating Quick Mode PSK+ENCRYPT+IKEv2ALLOW+SAREFTRACK to replace #238 {using isakmp#58 msgid:c19b5516 proposal=defaults pfsgroup=no-pfs}


This carrys on even if I actually power off my phone. On doing a google search i noted that the 212.183.128.62 address shown above is that of Vodafone. It does not match the public IP address of my phone or even that of my actual internet provider.
I spoke to billion and they ran tests using another mobile data provider and once they collapsed the tunnel, did not have the same pervasive connection attempts I have.

The only way to stop these repeated attempts is to disable my VPN tunnel on my router. After which the following router logs state:

Dec 2 21:00:14 authpriv warn pluto[24481]: "PG-VPN"[2] 212.183.128.62 #240: max number of retransmissions (2) reached STATE_QUICK_I1. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Dec 2 21:00:14 authpriv warn pluto[24481]: "PG-VPN"[2] 212.183.128.62 #241: initiating Quick Mode PSK+ENCRYPT+IKEv2ALLOW+SAREFTRACK to replace #240 {using isakmp#58 msgid:4c98fbe6 proposal=defaults pfsgroup=no-pfs}
Dec 2 21:00:43 daemon crit xl2tpd[24930]: death_handler: Fatal signal 15 received
Dec 2 21:00:43 daemon crit xl2tpd[21465]: init_config: Unable to open config file /var/xl2tpd/xl2tpd.conf or /var/l2tp/l2tpd.conf
Dec 2 21:00:43 daemon crit xl2tpd[21465]: init: Unable to load config file
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN": deleting connection
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN"[5] 85.255.235.222: deleting connection "PG-VPN" instance with peer 85.255.235.222 {isakmp=#213/ipsec=#214}
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN" #211: deleting state (STATE_QUICK_R2)
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN" #210: deleting state (STATE_MAIN_R3)
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN" #214: deleting state (STATE_QUICK_R2)
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN" #213: deleting state (STATE_MAIN_R3)
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN" #209: deleting state (STATE_QUICK_R2)
Dec 2 21:00:44 authpriv warn pluto[24481]: "PG-VPN" #208: deleting state (STATE_MAIN_R3)
Dec 2 21:00:45 authpriv warn pluto[24481]: "PG-VPN"[2] 212.183.128.62: deleting connection "PG-VPN" instance with peer 212.183.128.62 {isakmp=#58/ipsec=#0}
Dec 2 21:00:45 authpriv warn pluto[24481]: "PG-VPN" #241: deleting state (STATE_QUICK_I1)
Dec 2 21:00:45 authpriv warn pluto[24481]: "PG-VPN" #58: deleting state (STATE_MAIN_R3)
Dec 2 21:00:45 daemon err ipsec_setup: Stopping Openswan IPsec...
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down
Dec 2 21:00:46 authpriv warn pluto[24481]: forgetting secrets
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down interface lo/lo ::1:500
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down interface lo/lo 127.0.0.1:4500
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down interface lo/lo 127.0.0.1:500
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down interface br0/br0 192.168.0.1:4500
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down interface br0/br0 192.168.0.1:500
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down interface pppoa0/pppoa0 78.143.204.226:4500
Dec 2 21:00:46 authpriv warn pluto[24481]: shutting down interface pppoa0/pppoa0 78.143.204.226:500
Dec 2 21:00:46 authpriv warn pluto[24486]: pluto_crypto_helper: helper (0) is normal exiting
Dec 2 21:00:47 daemon err ipsec_setup: ...Openswan IPsec stopped

After shutting down my tunnel on my router, I receive no more attempts by Vodafone to connect.
Anyone know why Vodafone are trying to connect up even though i'vee selected disconnect on my android phone and then powered it off for good measure?

what can be done to stop these incessant connection requests?
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top