☰

NetExtender：无法重新连接

tag-icon • tag-icon linux vpn sonicwall
NetExtender：无法重新连接

我在基于 Linux 的服务器上运行 NetExtender 以连接到另一家公司的专用网络。连接工作正常，但每月一次，如果连接断开，它不会自动重新连接。该程序配置为在连接终止时自动重新连接，它尝试重新连接但没有成功。

如果我手动登录到服务器并关闭 netexender 然后重新启动，它可以正常工作，但我需要始终启动并运行该程序。

以下是断开连接时的日志

08/20/2014 08:46:59.538 [connect error   20617] SSL_read ZERO RETURN
08/20/2014 08:46:59.538 [general notice  20617] SSL VPN logging out...
08/20/2014 08:46:59.552 [connect info    24510] NetExtender interface down
08/20/2014 08:46:59.554 [dns     notice  24510] Restoring DNS settings
08/20/2014 08:46:59.604 [general notice  20617] SSL VPN connection is terminated.
08/20/2014 08:46:59.605 [config  info    20617] Loading saved profiles...
08/20/2014 08:46:59.605 [config  info    20617] Loaded profile: sslvpn.companyname.co.uk
08/20/2014 08:46:59.605 [config  info    20617] Done.
08/20/2014 08:46:59.609 [gui     info    20617] NetExtender disconnected
08/20/2014 08:46:59.611 [connect info    20617] User:   "userID"
08/20/2014 08:46:59.611 [connect info    20617] Domain: "SSLVPN"
08/20/2014 08:46:59.611 [connect info    20617] Server: "sslvpn.companyname.co.uk:443"
08/20/2014 08:46:59.615 [general info    20617] Saving profiles/preferences...
08/20/2014 08:46:59.615 [general info    20617] Done saving profiles/preferences
08/20/2014 08:46:59.649 [general notice  20617] Connecting to sslvpn.companyname.co.uk:443...
08/20/2014 08:46:59.686 [connect warn    20617] SSL_get_peer_certificate: X509_V_ERR_INVALID_CA
08/20/2014 08:46:59.744 [general notice  20617] Connected.
08/20/2014 08:46:59.744 [general notice  20617] Logging in...
08/20/2014 08:47:00.170 [general info     6267] nxMonitor received shutdown command; nxMonitor exiting
08/20/2014 08:47:06.876 [general notice  20617] Login successful.
08/20/2014 08:47:06.958 [general error   20617] failed to retrieve epc agent version
08/20/2014 08:47:06.959 [epc     info    20617] Server don't support EPC check. Just pass EPC check
08/20/2014 08:47:07.020 [general error   20617] unexpected response while retriving session ID
08/20/2014 08:47:07.020 [general notice  20617] No routes found.  Checking for legacy route format...
08/20/2014 08:47:07.104 [general error   20617] unexpected response while retriving server route
08/20/2014 08:47:07.104 [general error   20617] Connection failure
08/20/2014 08:47:07.104 [general notice  20617] SSL VPN logging out...
08/20/2014 08:47:07.167 [general notice  20617] SSL VPN connection is terminated.
08/20/2014 08:47:07.168 [config  info    20617] Loading saved profiles...
08/20/2014 08:47:07.168 [config  info    20617] Loaded profile: sslvpn.companyname.co.uk
08/20/2014 08:47:07.168 [config  info    20617] Done.
08/20/2014 08:47:07.172 [gui     info    20617] Failed to connect

这是我的服务器的问题还是他们的服务器出了问题导致我断线？有人能帮我解决这个问题吗？

谢谢

答案1

有时会断开连接，但客户端每次都应该能够重新连接。我认为这是 NetExtender 客户端的问题。我们之前在 Linux 上遇到过这个问题，唯一的解决办法是等待 Sonicwall 发布更新的客户端！

既然手动重启有效，那么也许一个解决方法是使用监控服务（如 Monit）来检查连接？例如，Monit 可以每分钟 ping 隧道另一端的某个东西。如果没有响应，Monit 可以终止并重新启动连接。http://mmonit.com/monit/

monit 配置示例如下

check host myserver with address 192.168.1.1
  if failed icmp type echo count 2 with timeout 10 seconds then restart
  start program = "/bin/bash /home/me/netextender-startup-script.sh"
  stop program =  "/bin/bash /home/me/netextender-stop-script.sh"

您必须根据您的 Linux 发行版定义启动和停止脚本...

相关内容