Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » VPN Client problem (Error 167: Unable to estabilish data tunnel)
  •  
dobisekm

Messages: 3
Karma: 0
Send a private message to this user
Hi All,

we have a VPN, which is working and is normally accessible by existing users. Now we created one new user, which is unable to connect. His VPN Client keeps showing the following error message after connect button is pressed:

"Error (167): Unable to estabilish data tunnel (UDP traffic is probably blocked)"

I tried to search the forums for the error code and parts of the message, but without any success.

He is able to ping the firewall machine and also the VPN Client log file shows, that the connection was initially estabilished. He is accessing from different geographic location than other clients, so there could be some network configuration involved, but I have no clue what to look for.

Does anyone have a hint, what could be the reason or what to do determine the reason?

Thanks,

Michal

The log shows the following:
[26/07/2005 15:07:43] VPN driver opened, MAC = 44:45:53:54:ae:e8
[26/07/2005 15:07:43] VPN routing table monitor started
[26/07/2005 15:08:43] Connecting to 213.29.16.84
[26/07/2005 15:08:43] D[VPN client] VPNClient[0001] - connecting to 213.29.16.84:4090, username palomor
[26/07/2005 15:08:47] D[VPN client] VPNClient[0001] - server name resolved - 213.29.16.84
[26/07/2005 15:08:47] D[VPN client] VPNClient[0001] - route to server added, gw = 192.168.1.1 (adapter 0x1000004)
[26/07/2005 15:08:47] D[VPN client] VPNClient[0001] - SSL connection successfully established
[26/07/2005 15:08:47] D[VPN client] VPNClient[0001] - sending VERSION message, version = 1
[26/07/2005 15:08:48] D[VPN client] VPNClient[0001] - received VERSION message, version = 1
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: generating blowfish parameters
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: allocated memory for blowfish cipher configuration.
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: blowfish parameters randomized
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: blowfish parameters generated
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: generating config message
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: generating config message
[26/07/2005 15:08:49] D[VPN client] VPNClient[0001] - received R_IPCONFIG message, IP = 192.168.11.8/255.255.255.0, CEP = 3600 s.
[26/07/2005 15:08:49] D[VPN client] VPNClient[0001] - connection added in driver.
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: generating config message
[26/07/2005 15:08:49] D[Cipher] BLF[0/0]: generating config message
[26/07/2005 15:08:49] D[VPN client] VPNClient[0001]: primary cipher added in driver
[26/07/2005 15:08:49] D[VPN client] VPNClient[0001] - driver started sending secret to 213.29.16.84:4090.
[26/07/2005 15:08:49] D[VPN client] VPNClient[0001] - waiting for SECRET_RECEIVED from 213.29.16.84:4090
[26/07/2005 15:09:00] D[VPN client] VPNClient[0001] - connection closed by remote peer
[26/07/2005 15:09:00] D[VPN client] VPNClient[0001] - SECRET_RECEIVED has not been received
[26/07/2005 15:09:00] Error (167): Unable to establish data tunnel (UDP traffic is probably blocked)

  •  
feite

Messages: 523
Karma: 0
Send a private message to this user
Does the client use a firewall that dis-allows the UDP traffic?
  •  
dobisekm

Messages: 3
Karma: 0
Send a private message to this user
Hi,

thanks for the suggestion. The problem was actually caused by the firewall.

I did not expected it, because the log showed, that osme communication was estabilished, but it's probably more complex.

Best,

Michal
Previous Topic: Two kerio servers
Next Topic: User can share their Login account
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Nov 18 04:08:47 CET 2017

Total time taken to generate the page: 0.00343 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.