Business Community > Routers > ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
< Routers

ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile

ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile

ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-01-28 00:38:29 - last edited 2023-11-17 03:23:31
Tags: #VPN #VLAN & Multi-Networks
Model: ER7206 (TL-ER7206)  
Hardware Version: V1
Firmware Version: 1.2.3

Setup

Router:

ER7206 v1.0, FW: 1.2.3 Build 20221104 Rel.41500
 
Controller:
OC200 2.0, FW: 2.7.7 Build 20221206 Rel.58608
 

Main LAN switch:

Cisco SG200-26, FW: 1.4.11.5

 

PoE Switch for access points:

TL-SG105PE
 
Access points:
2 x EAP610(EU) v3.0, FW: 1.1.0 Build 20220729 Rel. 73179

1 x EAP235-Wall(EU) v1.0, FW: 3.1.0 Build 20210721 Rel. 46004

 

Miscellaneous:

The usual, servers, some networked speakers, UPS, NAS etc etc.

 

Network

A basic setup with one router, a main switch patched out to the house, a PoE switch that supplies three access points.

Main switch port "WAN/LAN2" of router

PoE switch port "LAN1" of router

Controller port "LAN2" of router

Divided into two three segments, LAN (1), PrivateWifi (20) and AnnexetLan (30), shown below with Cisco symbols mostly...

 

 

VPN:

Client-to-Site VPN, VPN Client - OpenVPN Certificate+Account

Local network: PrivateWifi

Wan: WAN

 

Problem:

When disabling the VPN connection either from the overview table or from unchecking the "Status: Enabled"-checkbox inside "Edit VPN policy", the router crashes and restarts. All networks goes down, and when coming back up again the controller warns that the WAN of the router is down and " The configurations of device RTR-Techroom-ER7206 are different from the configurations from the controller. "

 

After adopting it again everything kicks back online.

 

This does not consistently happen, but in about 80% of the cases.

The VPN in itself works just fine when connected, and enabling it never causes a crash. Just disabling it.

 

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

 

Is there any more specific logs I can get out of the devices to see what causes these crashes?

 

Can TP-Link help me out, should I return the router for another one, or is it a firmware bug?

  0      
 
  0      
 
#1
Options
1 Accepted Solution
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile-Solution
2023-11-14 19:12:34 - last edited 2023-11-17 03:23:31

  @junado and @briankwest I had some success with a custom beta firmware based on 1.3.0 that disabled Qualcomm Shortcut Forwarding Engine that kept crashing when disabling a Open VPN profile.

Beta Firmware

With that disabled there has not been a single crash for me.

 

Use that firmware fully at your own risk, I have no idea if TPLink has done some other custom magic for my individual router.

 

Recommended Solution
  0  
  0  
#7
Options
7 Reply
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-01-30 10:03:38

  @larsalmen 

 

I looks like a bug. I just did a test on my ER605 V2 and no issue happens(no WAN down on Log and no error message shows up) when I enable/disable the OpenVPN server.

 

But I'm using Software controller V5.8.4

 

 

  1  
  1  
#2
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-01-30 12:12:54

  @Somnus 

Just to clarify, it is a OpenVPN client profile, not a vpn server on the router in my case.

  0  
  0  
#3
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-02-20 20:49:22

Just an update:

Had a remote session with a TP-Link tech today, where we were succesfull in triggering the issue while monitoring the traffic between the router and controller.

We monitored data on a mirrored port on the router and were able to captur the traffic with wireshark as the router crashed when disabling an active VPN client connection.

 

Together with logs and a configuration dump, the traffic captured were sent to TP-Link for further analysis.

I'll keep this post updated as I recieve response from TP-Link.

  0  
  0  
#4
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-03-27 16:02:47

  @larsalmen I have the same issue, just received the device yesterday, and having all kinds of weird crashes with it, changing any wan config causes the same problem.

  0  
  0  
#5
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-05-31 16:31:47

  @larsalmen did you ever get a reply or find a way to disable the VPN ? I'm stuck in a reset loop and would at least like to remove the VPN while waiting for a fix.

  0  
  0  
#6
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile-Solution
2023-11-14 19:12:34 - last edited 2023-11-17 03:23:31

  @junado and @briankwest I had some success with a custom beta firmware based on 1.3.0 that disabled Qualcomm Shortcut Forwarding Engine that kept crashing when disabling a Open VPN profile.

Beta Firmware

With that disabled there has not been a single crash for me.

 

Use that firmware fully at your own risk, I have no idea if TPLink has done some other custom magic for my individual router.

 

Recommended Solution
  0  
  0  
#7
Options
Re:ER7206 v1.0 crashes when disabling an active OpenVPN VPN profile
2023-11-15 03:33:01

Hi @larsalmen 

Thanks for posting in our business forum.

larsalmen wrote

  @junado and @briankwest I had some success with a custom beta firmware based on 1.3.0 that disabled Qualcomm Shortcut Forwarding Engine that kept crashing when disabling a Open VPN profile.

Beta Firmware

With that disabled there has not been a single crash for me.

 

Use that firmware fully at your own risk, I have no idea if TPLink has done some other custom magic for my individual router.

 

Have you tried the firmware later on? Early Access ER7206 V1_1.4.0_Build 20230828 Beta Firmware for Omada Controller v5.12 (Released on Sep 5th, 2023)

 

Your firmware posted(hyperlink) seems to be the old one. The official release should contain the fix you mentioned in the 1.3.0 beta.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Beta firmware got some NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)
  0  
  0  
#8
Options

Information

Helpful: 0

Views: 614

Replies: 7

Tags

VPN VLAN & Multi-Networks
Related Articles
It takes 10mins to configure ER7206 when I change settings
694 0
ER7206 Trunk Vlan with TL-SG108E
627 0
ER7206 OpenVPN
419 0
ER7206 - Option 138 doesn't work?
406 0
ER7206 IPSEC Site-to-Site - no incoming traffic
190 0
ER7206 dns setup for ms win network discovery & multi vlan
396 0
About Us
Press
Copyright © TP-LINK CORPORATION PTE. LTD. All rights reserved.