Business Community > Routers > ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
< Routers

ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-01-28 00:38:29 - last edited 2023-11-17 03:23:31
Tags: #VPN #VLAN & Multi-Networks
Model: ER7206 (TL-ER7206)  
Hardware Version: V1
Firmware Version: 1.2.3

Setup

Router:

ER7206 v1.0, FW: 1.2.3 Build 20221104 Rel.41500
 
Controller:
OC200 2.0, FW: 2.7.7 Build 20221206 Rel.58608
 

Main LAN switch:

Cisco SG200-26, FW: 1.4.11.5

 

PoE Switch for access points:

TL-SG105PE
 
Access points:
2 x EAP610(EU) v3.0, FW: 1.1.0 Build 20220729 Rel. 73179

1 x EAP235-Wall(EU) v1.0, FW: 3.1.0 Build 20210721 Rel. 46004

 

Miscellaneous:

The usual, servers, some networked speakers, UPS, NAS etc etc.

 

Network

A basic setup with one router, a main switch patched out to the house, a PoE switch that supplies three access points.

Main switch port "WAN/LAN2" of router

PoE switch port "LAN1" of router

Controller port "LAN2" of router

Divided into two three segments, LAN (1), PrivateWifi (20) and AnnexetLan (30), shown below with Cisco symbols mostly...

 

 

VPN:

Client-to-Site VPN, VPN Client - OpenVPN Certificate+Account

Local network: PrivateWifi

Wan: WAN

 

Problem:

When disabling the VPN connection either from the overview table or from unchecking the "Status: Enabled"-checkbox inside "Edit VPN policy", the router crashes and restarts. All networks goes down, and when coming back up again the controller warns that the WAN of the router is down and " The configurations of device RTR-Techroom-ER7206 are different from the configurations from the controller. "

 

After adopting it again everything kicks back online.

 

This does not consistently happen, but in about 80% of the cases.

The VPN in itself works just fine when connected, and enabling it never causes a crash. Just disabling it.

 

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

 

Is there any more specific logs I can get out of the devices to see what causes these crashes?

 

Can TP-Link help me out, should I return the router for another one, or is it a firmware bug?

  0      
 
  0      
 
#1
Options
1 Accepted Solution
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile-Solution
2023-11-14 19:12:34 - last edited 2023-11-17 03:23:31

  @junado and @briankwest I had some success with a custom beta firmware based on 1.3.0 that disabled Qualcomm Shortcut Forwarding Engine that kept crashing when disabling a Open VPN profile.

Beta Firmware

With that disabled there has not been a single crash for me.

 

Use that firmware fully at your own risk, I have no idea if TPLink has done some other custom magic for my individual router.

 

Recommended Solution
  0  
  0  
#7
Options
7 Reply
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-01-30 10:03:38

  @larsalmen 

 

I looks like a bug. I just did a test on my ER605 V2 and no issue happens(no WAN down on Log and no error message shows up) when I enable/disable the OpenVPN server.

 

But I'm using Software controller V5.8.4

 

 

  1  
  1  
#2
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-01-30 12:12:54

  @Somnus 

Just to clarify, it is a OpenVPN client profile, not a vpn server on the router in my case.

  0  
  0  
#3
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-02-20 20:49:22

Just an update:

Had a remote session with a TP-Link tech today, where we were succesfull in triggering the issue while monitoring the traffic between the router and controller.

We monitored data on a mirrored port on the router and were able to captur the traffic with wireshark as the router crashed when disabling an active VPN client connection.

 

Together with logs and a configuration dump, the traffic captured were sent to TP-Link for further analysis.

I'll keep this post updated as I recieve response from TP-Link.

  0  
  0  
#4
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-03-27 16:02:47

  @larsalmen I have the same issue, just received the device yesterday, and having all kinds of weird crashes with it, changing any wan config causes the same problem.

  0  
  0  
#5
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-05-31 16:31:47

  @larsalmen did you ever get a reply or find a way to disable the VPN ? I'm stuck in a reset loop and would at least like to remove the VPN while waiting for a fix.

  0  
  0  
#6
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile-Solution
2023-11-14 19:12:34 - last edited 2023-11-17 03:23:31

  @junado and @briankwest I had some success with a custom beta firmware based on 1.3.0 that disabled Qualcomm Shortcut Forwarding Engine that kept crashing when disabling a Open VPN profile.

Beta Firmware

With that disabled there has not been a single crash for me.

 

Use that firmware fully at your own risk, I have no idea if TPLink has done some other custom magic for my individual router.

 

Recommended Solution
  0  
  0  
#7
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-11-15 03:33:01

Hi @larsalmen 

Thanks for posting in our business forum.

larsalmen wrote

  @junado and @briankwest I had some success with a custom beta firmware based on 1.3.0 that disabled Qualcomm Shortcut Forwarding Engine that kept crashing when disabling a Open VPN profile.

Beta Firmware

With that disabled there has not been a single crash for me.

 

Use that firmware fully at your own risk, I have no idea if TPLink has done some other custom magic for my individual router.

 

Have you tried the firmware later on? Early Access ER7206 V1_1.4.0_Build 20230828 Beta Firmware for Omada Controller v5.12 (Released on Sep 5th, 2023)

 

Your firmware posted(hyperlink) seems to be the old one. The official release should contain the fix you mentioned in the 1.3.0 beta.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#8
Options

Information

Helpful: 0

Views: 909

Replies: 7

Tags

VPN VLAN & Multi-Networks
Related Articles
can't upgrade to latest firmware ER7206 v1.0
1202 0
TL-ER7206 v1.0 - Slow Routing Performance
797 1
ER7206 OpenVPN
741 0
ER7206 Trunk Vlan with TL-SG108E
1608 0
 ER7206 V1.0 not updating ip on NOIP
285 0
ER7206 IPSEC Site-to-Site - no incoming traffic
400 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.