kbuf errors with iphone / l2tp setup

[HartmutB]

Hello,
I hope my problem fits to the VPN forum:

R70.1 running on SPLAT. Gateway + Management on a single Dell 2850 with 2 CPU, 4GB RAM. Low traffic, CPU load 0..5%


I set up a VPN test connection to an iphone 3GS with firmware 3.1.2. For this, I created a $FWDIR/conf/l2tp.conf file and had to adjust a number of settings according encryption.
I created a test user with password and sucessfully managed to access internal resources, including Exchange server mail connection.

No, I'm getting a lot of entries in /var/log/messages that seem to be related to the iphone-VPN adjustments:

Feb 16 23:54:12 gatekeeper kernel: Assertion 0 failed in kiss_handles.c:558
Feb 16 23:54:12 gatekeeper kernel: fwhandle_get: Invalid handle - poolfwkbuf_leak_log_action: Failed to log action remove from table (4e) on kbuf 6a920cc0
Feb 16 23:54:12 gatekeeper kernel: fwhandle_get(hashlong.c:1299): Table kbufs - Invalid handle 6a920cc0 (bad pool)
Feb 16 23:54:12 gatekeeper kernel: Assertion 0 failed in kiss_handles.c:558
Feb 16 23:54:12 gatekeeper kernel: fwhandle_get: Invalid handle - poolFW-1: fwkbuf_free_with_destr_(hashlong.c 1299): kbuf id is not found: 6a920cc0
Feb 16 23:54:12 gatekeeper kernel: hi_kbufs_free_all: Error freeing kbuf 6a920cc0 at index 2 in table userc_rules(78)
Feb 16 23:54:12 gatekeeper kernel: hi_kbufs_free_all: Table entry: <50bb64c1,0;0,5dfb8800,6a920cc0,0>  <900 : 0 78>

Feb 17 09:16:17 gatekeeper kernel: (fwbuf.c:1353): Table kbufs - Invalid handle 9cfc9f8 (bad pool)
Feb 17 09:16:17 gatekeeper kernel: Assertion 0 failed in kiss_handles.c:558
Feb 17 09:16:17 gatekeeper kernel: fwhandle_get: Invalid handle - poolfwkbuf_leak_log_action: Failed to log action remove from table (4e) on kbuf 9cfc9f8
Feb 17 09:16:17 gatekeeper kernel: fwhandle_get(hashlong.c:1299): Table kbufs - Invalid handle 9cfc9f8 (bad pool)
Feb 17 09:16:17 gatekeeper kernel: Assertion 0 failed in kiss_handles.c:558
Feb 17 09:16:17 gatekeeper kernel: fwhandle_get: Invalid handle - poolFW-1: fwkbuf_free_with_destr_(hashlong.c 1299): kbuf id is not found: 9cfc9f8
Feb 17 09:16:17 gatekeeper kernel: hi_kbufs_free_all: Error freeing kbuf 9cfc9f8 at index 2 in table userc_rules(78)
Feb 17 09:16:17 gatekeeper kernel: hi_kbufs_free_all: Table entry: <5b23850e,0;0,24fbf000,9cfc9f8,0>  <900 : 0 78>

Feb 17 09:22:54 gatekeeper kernel: fwhandle_get(fwbuf.c:1353): Table kbufs - Invalid handle 6a922a70 (bad pool)
Feb 17 09:22:54 gatekeeper kernel: Assertion 0 failed in kiss_handles.c:558
Feb 17 09:22:54 gatekeeper kernel: fwhandle_get: Invalid handle - poolfwkbuf_leak_log_action: Failed to log action remove from table (4e) on kbuf 6a922a70
Feb 17 09:22:54 gatekeeper kernel: fwhandle_get(hashlong.c:1299): Table kbufs - Invalid handle 6a922a70 (bad pool)
Feb 17 09:22:54 gatekeeper kernel: Assertion 0 failed in kiss_handles.c:558
Feb 17 09:22:54 gatekeeper kernel: fwhandle_get: Invalid handle - poolFW-1: fwkbuf_free_with_destr_(hashlong.c 1299): kbuf id is not found: 6a922a70
Feb 17 09:22:54 gatekeeper kernel: hi_kbufs_free_all: Error freeing kbuf 6a922a70 at index 2 in table userc_rules(78)
Feb 17 09:22:54 gatekeeper kernel: hi_kbufs_free_all: Table entry: <50bb6301,0;0,24be9000,6a922a70,0>  <900 : 0 78>

Any ideas, what to check ?
Any connection parameter to increase ?

I'll revert to the settings "before iphone", to recheck it it's really related to it, but wanted to ask first ...


Thanks,
Hartmut

[HartmutB]

Just to add:

The problem is clearly related to establishing a VPN connection to an iPhone. It is persistent even after upgrading to R70.20.


Could someone with a similar configuration (SPLAT R70.x <-> l2tp-VPN to iPhone) please check, if he/she gets similar messages in /var/log/messages ?

I still don't know if it's a local or a common issue as communication to the iPhone seems OK ...


Thanks,
Hartmut