wir haben einem kleinen Standort einen 1781A (FW vom 13.04.21) an einem CompanyConnect der Telekom im Einsatz.
1x am Tag bricht die WAN Verbindung plötzlich zusammen, Online, ETH1 und ETH4 leuchten ROT und der Router lässt sich derzeit nur mit einem Neustart zur Arbeit zwingen.
Da wir nicht an diesem Standort sitzen, ist zu diesem Zeitpunkt auch kein Remotezugriff möglich.
Unser Lancom-Spezi ist derzeit im Urlaub sodass die verbleibenden Admins sich etwas schwer mit der Analyse tun.
Ich hoffe, dass jemand einen Tipp für uns hat!
Im Syslog der WebGui finde ich folgende Informationen:
26.05 - 16:00
Cold Boot des Routers
Code: Alles auswählen
7630 2021-05-26 16:05:32 AUTHPRIV Hinweis Login from 172.19.24.118 via SSH
7631 2021-05-26 16:05:31 KERN Hinweis SSH: ECDSA key read from file system
7632 2021-05-26 16:05:31 KERN Hinweis SSH: DSA key read from file system
7633 2021-05-26 16:05:31 KERN Hinweis SSH: RSA key read from file system
7634 2021-05-26 16:04:29 LOCAL3 Alarm Dst: 2222.222.222.222:123 {Gateway-Zweigstelle}, Src: 205.185.120.177:57717 (UDP): connection refused
7635 2021-05-26 15:58:53 LOCAL3 Alarm Dst: 222.222.222.222:5060 {Gateway-Zweigstelle}, Src: 193.46.255.133:5098 (UDP): connection refused
7636 2021-05-26 15:57:02 AUTH Hinweis Successfully connected to peer TUN-HQ
7637 2021-05-26 15:57:02 KERN Hinweis Local time set to 2021-05-26 13:57:02(UTC) received by 192.53.103.108
7638 2021-05-26 15:57:02 AUTH Hinweis Successfully connected to peer TELEKOM-10MBIT
7639 2021-05-26 15:56:59 KERN Hinweis [ETH-1] link up: 1000 Mbps, full duplex
7640 2021-05-26 15:56:58 KERN Hinweis xDSL: [1] Booting modem: Modem shutdown
7641 2021-05-26 15:56:57 KERN Hinweis [ETH-4] link up: 100 Mbps, full duplex
7642 2021-05-26 15:56:57 LOCAL2 Hinweis Interface INTRANET added, with IP address 0.0.0.0 and netmask 255.255.255.0 on VLAN 0, interface tag is 0
7643 2021-05-26 15:56:57 LOCAL2 Hinweis Interface DMZ added, with IP address 0.0.0.0 and netmask 255.255.255.0 on VLAN 0, interface tag is 0
7644 2021-05-26 15:56:57 LOCAL2 Hinweis Interface 192.168.117.1 added, with IP address 192.168.117.1 and netmask 255.255.255.0 on VLAN 0, interface tag is 0
7645 2021-05-26 15:56:57 KERN Warnung [WePaper] AccessPoint - Loaded ESL FW 3.1.2 (4029) from Flash
7646 2021-05-26 15:56:57 KERN Hinweis xDSL: [1] Booting modem: System boot
7647 2021-05-26 15:56:57 LOCAL2 Hinweis IP router enabled
7648 2021-05-26 15:56:57 KERN Info [Automatic-Firmware-Updater] Changing mode to "manual".
7649 2021-05-26 15:56:56 KERN Hinweis SSL/TLS: RSA key read from file system
7650 2021-05-26 15:56:56 KERN Hinweis Running firmware version is 10.42.0473RU3 / 13.04.2021
7651 2021-05-26 15:56:56 KERN Hinweis Cold start
7652 2021-05-26 15:56:56 KERN Hinweis System boot after power on
Code: Alles auswählen
7496 2021-05-27 01:57:22 AUTH Info Disconnected from peer Tun-HQ: 017 002
7497 2021-05-27 01:57:22 LOCAL0 Fehler VPN: Error for peer Tun-HQ: IFC-I-No-channel-available
7498 2021-05-27 01:57:18 AUTH Info Disconnected from peer Tun-HQ: 017 002
7499 2021-05-27 01:57:18 LOCAL0 Fehler VPN: Error for peer Tun-HQ: IFC-I-No-channel-available
7500 2021-05-27 01:57:12 AUTH Info Disconnected from peer Tun-HQ: 017 002
7501 2021-05-27 01:57:12 LOCAL0 Fehler VPN: Error for peer Tun-HQ: IFC-I-No-channel-available
7502 2021-05-27 01:57:06 AUTH Info Disconnected from peer Tun-HQ: 017 002
7503 2021-05-27 01:57:06 LOCAL0 Fehler VPN: Error for peer Tun-HQ: IFC-I-No-channel-available
7504 2021-05-27 01:57:02 LOCAL0 Fehler error for peer TELEKOM-10MBIT: Conn. time locked
7505 2021-05-27 01:57:00 AUTH Info Disconnected from peer TELEKOM-10MBIT: Conn. time locked
7506 2021-05-27 01:57:00 AUTHPRIV Hinweis User from 172.19.24.118 via SSH logged out
7507 2021-05-27 01:57:00 AUTH Info Disconnected from peer Tun-HQ
7508 2021-05-27 01:57:00 LOCAL0 Fehler VPN: Disconnect info for peer Tun-HQ: physical-disconnected
7509 2021-05-27 01:57:00 LOCAL0 Fehler VPN: Disconnect info for peer Tun-HQ: physical-disconnected
7510 2021-05-27 01:57:00 LOCAL0 Fehler error for peer TELEKOM-10MBIT: Conn. time locked
7511 2021-05-27 01:56:10 LOCAL3 Alarm Dst: 222.222.222.222:8083 {Gateway-Zweigstelle}, Src: 192.34.59.75:12881 (UDP): connection refused
7512 2021-05-27 01:51:25 LOCAL3 Alarm Dst: 222.222.222.222:5060 {Gateway-Zweigstelle}, Src: 51.159.80.34:14479 (UDP): connection refused
7513 2021-05-27 01:47:30 LOCAL3 Alarm Dst: 222.222.222.222:5060 {Gateway-Zweigstelle}, Src: 193.107.216.163:5062 (UDP): connection refused
.
.
. Hier geht es immer weiter....
. Die Einträge wiederholen sich.
.
.
.
.
7618 2021-05-26 16:52:18 LOCAL3 Alarm Dst: 222.222.222.222:5060 {Gateway-Zweigstelle}, Src: 45.134.144.106:5156 (UDP): connection refused
7619 2021-05-26 16:49:45 LOCAL3 Alarm Dst: 222.222.222.222:443 {Gateway-Zweigstelle}, Src: 183.136.225.42:35659 (UDP): connection refused
7620 2021-05-26 16:48:03 LOCAL3 Alarm Dst: 222.222.222.222:3702 {Gateway-Zweigstelle}, Src: 146.88.240.4:58389 (UDP): connection refused
7621 2021-05-26 16:45:15 LOCAL3 Alarm Dst: 222.222.222.222:27017 {Gateway-Zweigstelle}, Src: 139.162.87.45:42984 (UDP): connection refused
7622 2021-05-26 16:40:34 LOCAL3 Alarm Dst: 222.222.222.222:389 {Gateway-Zweigstelle}, Src: 103.145.13.79:58403 (UDP): connection refused
7623 2021-05-26 16:38:36 LOCAL3 Alarm Dst: 222.222.222.222:2491 {Gateway-Zweigstelle}, Src: 106.75.165.127:58914 (UDP): connection refused
7624 2021-05-26 16:35:41 LOCAL3 Alarm Dst: 222.222.222.222:5060 {Gateway-Zweigstelle}, Src: 193.107.216.194:5061 (UDP): connection refused
7625 2021-05-26 16:34:05 LOCAL3 Alarm Dst: 222.222.222.222:1900 {Gateway-Zweigstelle}, Src: 163.172.221.207:59176 (UDP): connection refused
7626 2021-05-26 16:31:45 LOCAL3 Alarm Dst: 222.222.222.222:5060 {Gateway-Zweigstelle}, Src: 91.132.58.46:5084 (UDP): connection refused
7627 2021-05-26 16:25:10 LOCAL3 Alarm Dst: 222.222.222.222:5060 {Gateway-Zweigstelle}, Src: 193.107.216.163:5081 (UDP): connection refused
7628 2021-05-26 16:23:42 LOCAL3 Alarm Dst: 222.222.222.222:1900 {Gateway-Zweigstelle}, Src: 184.105.139.121:56059 (UDP): connection refused
7629 2021-05-26 16:16:57 LOCAL3 Alarm Dst: 222.222.222.222:389 {Gateway-Zweigstelle}, Src: 172.107.242.130:34428 (UDP): connection refused
Hat jemand eine Idee, was das sein kann?
Das EHT1+4 ROT leuchten wundert mich sehr.
Vielen Dank für jeden Hinweis!
Gruß
Daniel