Reply
 
Thread Tools Display Modes
  #1  
Old June 24th, 2009, 11:02 PM
edv_vorder edv_vorder is offline
Junior Member
NETGEAR Newbie
 
Join Date: Jul 2008
Posts: 3
edv_vorder is on a distinguished road
Default FVS338 no VPN connection possible - clock skew detected -solved

Hi,

yesterday my 2 FVS338 router could not start any VPN connection. In the VPN-Log I found the following infos:

2009 Jun 24 16:38:27 [FVS338] [IKE] clock skew detected, restarting racoon _
2009 Jun 24 16:38:27 [FVS338] [IKE] remote configuration for identifier "*****.dyndns.org" found_
[FVS338] [IKE] an undead schedule has been deleted: 'isakmp_chkph1there'._

[FVS338] [IKE] an undead schedule has been deleted: 'pk_recvupdate'._

[FVS338] [IKE] an undead schedule has been deleted: 'isakmp_ph1resend'._

[FVS338] [IKE] Failed to get IPsec SA configuration for: 192.168.X.0/24<->192.168.Y.0/24_


I found a lot more "Failed"-actions

Problem:
In the VPN-Log the date and time was ok, in the firewall-log I found this:

1970 Jan 1 01:00:35 [FVS338] [root] [SYSTEM START-UP] System Started
1970 Jan 1 00:00:41 [FVS338] [wand] [FW] Firewall Restarted
- Last output repeated twice -
1970 Jan 1 01:00:51 [FVS338] [pppd] Starting connection
1970 Jan 1 01:00:52 [FVS338] [pppd] recv (receivePacket)
1970 Jan 1 01:01:01 [FVS338] [wand] [FW] Firewall Restarted
1970 Jan 1 01:01:06 [FVS338] [pppd] Starting connection
1970 Jan 1 01:01:12 [FVS338] [pppd] PAP authentication succeeded
1970 Jan 1 01:01:12 [FVS338] [pppd] local IP address 79.197.36.72
1970 Jan 1 01:01:12 [FVS338] [pppd] remote IP address 217.0.118.131
1970 Jan 1 01:01:12 [FVS338] [pppd] primary DNS address 217.237.150.205
1970 Jan 1 01:01:12 [FVS338] [pppd] secondary DNS address 217.237.149.142
1970 Jan 1 01:01:22 [FVS338] [wand] [FW] Firewall Restarted
1970 Jan 1 01:01:39 [FVS338] [wand] [IPSEC] IPSEC Restarted


Solution:
the standart Netgear-NTP-Server was not reachable, when I changend to 0.de.pool.ntp.org (my local NTP-Server-Pool) the Problem was solved. The Netgear got the correct time and worked fine.

Arno
Reply With Quote
  #2  
Old June 25th, 2009, 04:06 AM
jmizoguchi jmizoguchi is offline
Banned
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 0
jmizoguchi is an unknown quantity at this point
Default Re: FVS338 no VPN connection possible - clock skew detected -solved

Every Year NTP server issue arise. Try change back in few days and see
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -8. The time now is 10:29 AM.