Hello everybody!
http/https mgmt-access to USG6625E suddenly stopped -
ERR_CONNECTION_ABORTED
Wiresshark shows that USG sends to host TCP-RST:
14:35:23.300279 10.10.37.7 10.11.1.2 TCP 40095 > pcsync-https [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
14:35:23.302157 10.11.1.2 10.10.37.7 TCP pcsync-https > 40095 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
14:35:23.302481 10.10.37.7 10.11.1.2 TCP 40095 > pcsync-https [ACK] Seq=1 Ack=1 Win=64240 Len=0
14:35:23.303007 10.10.37.7 10.11.1.2 TCP 40095 > pcsync-https [PSH, ACK] Seq=1 Ack=1 Win=64240 Len=517
14:35:23.303786 10.11.1.2 10.10.37.7 TCP pcsync-https > 40095 [RST] Seq=1 Win=65535 Len=0
14:35:23.304631 10.11.1.2 10.10.37.7 TCP pcsync-https > 40095 [RST] Seq=1 Win=65535 Len=0
14:35:23.505839 10.10.37.7 10.11.1.2 TCP 40096 > pcsync-https [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
14:35:23.507334 10.11.1.2 10.10.37.7 TCP pcsync-https > 40096 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
14:35:23.507520 10.10.37.7 10.11.1.2 TCP 40096 > pcsync-https [ACK] Seq=1 Ack=1 Win=64240 Len=0
14:35:23.507807 10.10.37.7 10.11.1.2 TCP 40096 > pcsync-https [PSH, ACK] Seq=1 Ack=1 Win=64240 Len=517
14:35:23.510206 10.11.1.2 10.10.37.7 TCP pcsync-https > 40096 [RST] Seq=1 Win=65535 Len=0
14:35:23.510207 10.11.1.2 10.10.37.7 TCP pcsync-https > 40096 [RST] Seq=1 Win=65535 Len=0
14:35:24.674832 10.11.1.2 10.10.37.7 TCP ssh > 38866 [ACK] Seq=1 Ack=1 Win=40960 Len=0
14:35:24.674905 10.10.37.7 10.11.1.2 TCP [TCP ACKed lost segment] 38866 > ssh [ACK] Seq=1 Ack=2 Win=63956 Len=0
14:35:28.531381 10.10.37.7 10.11.1.2 TCP 40101 > pcsync-https [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1
14:35:28.535857 10.11.1.2 10.10.37.7 TCP pcsync-https > 40101 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
14:35:28.536247 10.10.37.7 10.11.1.2 TCP 40101 > pcsync-https [ACK] Seq=1 Ack=1 Win=64240 Len=0
14:35:28.536845 10.10.37.7 10.11.1.2 TCP 40101 > pcsync-https [PSH, ACK] Seq=1 Ack=1 Win=64240 Len=517
14:35:28.537536 10.11.1.2 10.10.37.7 TCP pcsync-https > 40101 [RST] Seq=1 Win=65535 Len=0
14:35:28.539249 10.11.1.2 10.10.37.7 TCP pcsync-https > 40101 [RST] Seq=1 Win=65535 Len=0
It's possible that's of because sticky web session:
HRP_S<p-hwei-gw02>disp web-manager users
2020-08-04 01:33.329 +03:00
Username CurOnline
-------------------------------------------------------
admin 1
-------------------------------------------------------
Total online web users: 1
Total SockNum: 6, SessionNum: 1
-------------------------------------------------------
----------detail users info----------------------------
UserName Level UserIp LoginTime
---------------------------------------------------------
admin 15 10.10.37.7 2020/07/29 15:05:42
---------End------------------------------------------
MGMT interface config:
interface MEth0/0/0
description --- MGMT ---
undo shutdown
ip binding vpn-instance default
ip address 10.11.1.2 255.255.255.0
service-manage http permit
service-manage https permit
service-manage ping permit
service-manage ssh permit
service-manage snmp permit
How could we solve this issue?
Perhaps the matter comes down to how to terminate sticked web user's session?
