# GX450 VPN 2nd subnet Route **URL:** \ **Category:** AirLink Routers\ **Created:** [July 7, 2020, 6:24am UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835 "2020-07-07T06:24:42Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![tommyboy20021984](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@tommyboy20021984](https://forum.sierrawireless.com/u/tommyboy20021984)\ **Post date:** [July 7, 2020, 6:24am UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/1 "2020-07-07T06:24:42Z")
I set up an IPSec vpn however for the second subnet I cannot see traffic coming from the GX450 through the tunnel. The primary remote subnet works fine. I’ve read through the config information however have not found a solution. I’m needing the modem and the devices connected to be able to access that primary and secondary subnet. ---
**Author:** ![Donald](https://avatars.discourse-cdn.com/v4/letter/d/ac8455/32.png) [@Donald](https://forum.sierrawireless.com/u/Donald)\ **Post date:** [July 7, 2020, 11:02am UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/3 "2020-07-07T11:02:59Z")
Hi @tommyboy20021984 Can you please share your IPsec VPN configuration and log file on GX450? ---
**Author:** ![tommyboy20021984](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@tommyboy20021984](https://forum.sierrawireless.com/u/tommyboy20021984)\ **Post date:** [July 9, 2020, 9:49pm UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/4 "2020-07-09T21:49:55Z")
General AT VPN 1 Type Tunnel DisabledIPsec TunnelGRE TunnelOpenVPN Tunnel AT VPN 1 Status Connected Set VPN Policy ---- AT VPN Gateway Address 207.122.50.14 AT Pre-shared Key 1 ^^&tomMy AT My Identity Type IP My Identity - IP 52.183.24.203 AT Peer Identity Type IP Peer Identity - IP 207.122.50.14 AT Negotiation Mode Main AT IKE Encryption Algorithm AES-128 AT IKE Authentication Algorithm SHA1 AT IKE Key Group DH2 AT IKE SA Life Time 28800 AT IKE DPD Disable AT Local Address Type Subnet Address AT Local Address 10.10.10.0 AT Local Address - Netmask 255.255.255.0 AT Remote Address Type Subnet Address AT Remote Address 192.168.13.128 AT Remote Address - Netmask 255.255.255.240 AT Perfect Forward Secrecy No AT IPSec Encryption Algorithm 3DES AT IPSec Authentication Algorithm SHA1 AT IPSec Key Group DH2 AT IPSec SA Life Time 28800 Additional Remote Subnets Remote Subnet 2 Address Type Subnet Address Remote Subnet 2 Address 10.10.20.0 Remote Subnet 2 Address - Netmask 255.255.255.0 Remote Subnet 3 Address Type Single Address Remote Subnet 3 Address 0.0.0.0 Remote Subnet 3 Address - Netmask 0.0.0.0 ---
**Author:** ![tommyboy20021984](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@tommyboy20021984](https://forum.sierrawireless.com/u/tommyboy20021984)\ **Post date:** [July 9, 2020, 9:50pm UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/5 "2020-07-09T21:50:26Z")
Jul 7 18:28:54 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:54 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:54 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:55 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:55 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:55 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:57 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:57 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:57 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:28:58 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:29:17 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:29:17 alert ALEOS\_SYSTEM\_Embedded\_Ace\_Reset: Reboot issued from UI… Jul 7 18:29:18 alert ALEOS\_SYSTEM: VIN at reboot: 12.66V Jul 7 18:29:18 alert ALEOS\_SYSTEM: Uptime: 18:29:18 up 28 min, 0 users, load average: 0.62, 0.41, 0.44 Jul 7 18:29:18 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:29:18 alert ALEOS\_SYSTEM: [aleosreboot] Rebooting… Jul 7 18:29:18 notice InitNG: System is going down. Jul 7 18:29:18 info dropbear[604]: Early exit: Terminated by signal Jul 7 18:29:18 info dnsmasq[8720]: exiting on receipt of SIGTERM Jul 7 18:29:18 info pppoe-server[10248]: Terminating on signal 15 – killing all PPPoE sessions Jul 7 18:29:19 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:29:19 notice ALEOS\_LAN: HPR: Disabling proxy ARP on all interfaces Jul 7 18:29:20 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:29:25 alert ALEOS\_SYSTEM: \*\*\* Start of last 50 lines in dmesg \*\*\* Jul 7 18:29:25 notice root: [0.962132] Freeing init memory: 124K Jul 7 18:29:25 notice root: [6.923633] yaffs: dev is 32505861 name is “mtdblock5” rw Jul 7 18:29:25 notice root: [6.923721] yaffs: passed flags “” Jul 7 18:29:25 notice root: [6.923737] yaffs: yaffs: Attempting MTD mount of 31.5,“mtdblock5” Jul 7 18:29:25 notice root: [7.844487] yaffs: yaffs\_read\_super: is\_checkpointed 0 Jul 7 18:29:25 notice root: [8.056785] ad7998 1-0021: ad7997 chip found. Jul 7 18:29:25 notice root: [8.056946] ad7998 1-0021: writing configuration register: 0x02 0x0f 0xf8 Jul 7 18:29:25 notice root: [8.079690] ad\_dpot 1-002c: ad5161 256-Position Digital Potentiometer registered Jul 7 18:29:25 notice root: [10.803640] usb 1-1: new high speed USB device number 2 using pxau2h-ehci Jul 7 18:29:25 notice root: [10.979541] usb 1-1: config 1 has an invalid interface number: 8 but max is 5 Jul 7 18:29:25 notice root: [10.979577] usb 1-1: config 1 has an invalid interface number: 10 but max is 5 Jul 7 18:29:25 notice root: [10.979601] usb 1-1: config 1 has an invalid interface number: 11 but max is 5 Jul 7 18:29:25 notice root: [10.979621] usb 1-1: config 1 has no interface number 1 Jul 7 18:29:25 notice root: [10.979640] usb 1-1: config 1 has no interface number 4 Jul 7 18:29:25 notice root: [10.979656] usb 1-1: config 1 has no interface number 5 Jul 7 18:29:25 notice root: [10.980325] usb 1-1: New USB device found, idVendor=1199, idProduct=68c0 Jul 7 18:29:25 notice root: [10.980376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Jul 7 18:29:25 notice root: [10.980398] usb 1-1: Product: MC7354 Jul 7 18:29:25 notice root: [10.980416] usb 1-1: Manufacturer: Sierra Wireless, Incorporated Jul 7 18:29:25 notice root: [11.004458] GobiSerial 1-1:1.0: GobiSerial converter detected Jul 7 18:29:25 notice root: [11.014607] usb 1-1: GobiSerial converter now attached to ttyUSB0 Jul 7 18:29:25 notice root: [11.027587] GobiSerial 1-1:1.2: GobiSerial converter detected Jul 7 18:29:25 notice root: [11.044042] usb 1-1: GobiSerial converter now attached to ttyUSB1 Jul 7 18:29:25 notice root: [11.053327] GobiSerial 1-1:1.3: GobiSerial converter detected Jul 7 18:29:25 notice root: [11.073557] usb 1-1: GobiSerial converter now attached to ttyUSB2 Jul 7 18:29:25 notice root: [11.090424] GobiNet 1-1:1.8: wwan0: register ‘GobiNet’ at usb-pxau2h-ehci-1, GobiNet Ethernet Device, ::::: Jul 7 18:29:25 notice root: [11.090803] RawIP mode Jul 7 18:29:25 notice root: [11.101372] USB Speed : USB 2.0 Jul 7 18:29:25 notice root: [11.112627] GobiNet 1-1:1.10: wwan1: register ‘GobiNet’ at usb-pxau2h-ehci-1, GobiNet Ethernet Device, ::::: Jul 7 18:29:25 notice root: [11.112986] RawIP mode Jul 7 18:29:25 notice root: [11.131050] USB Speed : USB 2.0 Jul 7 18:29:25 notice root: [13.184832] TE Disabled Jul 7 18:29:25 notice root: [13.237833] TE Disabled Jul 7 18:29:25 notice root: [13.256834] creating qcqmi0 Jul 7 18:29:25 notice root: [13.305834] creating qcqmi1 Jul 7 18:29:25 notice root: [19.521828] ADDRCONF(NETDEV\_UP): br0: link is not ready Jul 7 18:29:25 notice root: [28.743641] Sharks Ethernet PHY LEDs initialized Jul 7 18:29:25 notice root: [29.253261] ADDRCONF(NETDEV\_UP): eth0: link is not ready Jul 7 18:29:25 notice root: [31.466596] device eth0 entered promiscuous mode Jul 7 18:29:25 notice root: [41.303656] g\_ether gadget: using random self ethernet address Jul 7 18:29:25 notice root: [41.303801] g\_ether gadget: using random host ethernet address Jul 7 18:29:25 notice root: [41.304508] usb0: MAC ::::: Jul 7 18:29:25 notice root: [41.304859] usb0: HOST MAC ::::: Jul 7 18:29:25 notice root: [41.304877] g\_ether gadget: Ethernet Gadget, version: Memorial Day 2008/SWI\_2.1 Jul 7 18:29:25 notice root: [41.304928] g\_ether gadget: g\_ether ready Jul 7 18:29:25 notice root: [45.028504] ADDRCONF(NETDEV\_UP): usb0: link is not ready Jul 7 18:29:25 notice root: [48.724789] ISO 9660 Extensions: RRIP\_1991A Jul 7 18:29:25 notice root: [58.159531] apbc\_clk\_enable: enter…fnclksel=1 Jul 7 18:29:25 notice root: [75.144715] apbc\_clk\_enable: enter…fnclksel=1 Jul 7 18:29:25 notice root: [1738.443683] br0: port 1(eth0) entering disabled state Jul 7 18:29:25 alert ALEOS\_SYSTEM: \*\*\* End of last 50 lines in dmesg \*\*\* Jul 7 18:29:25 notice syslog-ng[193]: syslog-ng shutting down; version=‘3.8.1’ Jul 7 18:29:41 notice syslog-ng[193]: syslog-ng starting up; version=‘3.8.1’ Jul 7 18:29:41 alert ALEOS\_SYSTEM: \_ \_ \_ \_ \_ Jul 7 18:29:41 alert ALEOS\_SYSTEM: / \ / \ / \ / \ / \ Jul 7 18:29:41 alert ALEOS\_SYSTEM: | A | L | E | O | S | Jul 7 18:29:41 alert ALEOS\_SYSTEM: \_/ \_/ \_/ \_/ \_/ Jul 7 18:29:41 alert ALEOS\_SYSTEM: Jul 7 18:29:41 alert ALEOS\_SYSTEM: Sierra Wireless Jul 7 18:29:42 alert ALEOS\_SYSTEM: Copyright 2009-2019 Jul 7 18:29:42 alert ALEOS\_SYSTEM: Version: 4.9.4.p09 Jul 7 18:29:42 alert ALEOS\_SYSTEM: Single Code-Set Jul 7 18:29:42 alert ALEOS\_SYSTEM: Jul 7 18:29:42 alert ALEOS\_SYSTEM: Serial no: \_\_\_\_\_\_\_\_\_\_ Jul 7 18:29:42 alert ALEOS\_SYSTEM\_startup: Starting AleosConfBuilder Jul 7 18:29:42 alert ALEOS\_SYSTEM\_startup: Ending AleosConfBuilder Properly Jul 7 18:29:42 alert ALEOS\_SYSTEM\_startup: START Jul 7 18:29:42 alert ALEOS\_SYSTEM\_startup: ALEOS time is set to Tue Jul 7 18:29:41 2020 Jul 7 18:29:42 alert ALEOS\_SYSTEM\_startup: END Jul 7 18:29:42 info ALEOS\_SYSTEM: Waiting for SM to be Ready… Jul 7 18:29:42 info ALEOS\_SYSTEM\_WDlog: Starting Monitor Process Jul 7 18:29:42 notice ALEOS\_SYSTEM\_WDlog: HW Watchdog enabled. Jul 7 18:29:42 notice ALEOS\_SYSTEM\_WDlog: New HW Watchdog timeout: 240 seconds. Jul 7 18:29:42 notice ALEOS\_SYSTEM: Starting Storage Manager… Jul 7 18:29:42 info ALEOS\_SYSTEM: Waiting for CSM to be Ready… Jul 7 18:29:42 notice ALEOS\_SYSTEM: Storage Manager is now ready - Continue Jul 7 18:29:42 notice ALEOS\_SYSTEM: Starting Configuration Manager… Jul 7 18:29:43 info ALEOS\_SYSTEM\_CSM: Hard-coded default configuration retrieved Jul 7 18:29:43 info ALEOS\_SYSTEM\_CSM: Requesting persisted user configuration… Jul 7 18:29:43 notice ALEOS\_SYSTEM\_SM: Retrieving records from ‘Config11.smc’ [request: ‘Config11.smc’]… Jul 7 18:29:44 notice ALEOS\_SYSTEM\_SM: Record counts: read ‘6144’ good records, ‘0’ bad records Jul 7 18:29:44 info ALEOS\_SYSTEM\_CSM: …data reading done Jul 7 18:29:44 info ALEOS\_SYSTEM\_CSM: Configuration OK Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: Device Family 1 Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: Product type 1 Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: Enabling MSCIIDs for LTE Radio Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: Enabling MSCIIDs Serial Port Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: Serial0 Reserve Status = 0 Jul 7 18:29:44 info ALEOS\_SYSTEM\_MSCIEn: GNSS Type 1 Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: Enabling MSCIIDs for GNSS Jul 7 18:29:44 err ALEOS\_SYSTEM\_MSCIEn: 9SharksHal get\_sim\_status: ID 1 is not valid. Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: QualcommDM Reserve Status = 0 Jul 7 18:29:44 notice ALEOS\_SYSTEM\_MSCIEn: No External Card Detected Jul 7 18:29:44 info ALEOS\_SYSTEM: Check Reset Configuration Jul 7 18:29:44 info ALEOS\_SYSTEM: No reset backup configuration Jul 7 18:29:47 info ALEOS\_SYSTEM\_csmMigrator: csmMigrator: Migration complete. Jul 7 18:29:48 notice ALEOS\_SYSTEM\_Migrator: Already up-to-date Jul 7 18:29:48 notice ALEOS\_FIRMWARE\_Security: SFU Certificates: Jul 7 18:29:48 notice ALEOS\_FIRMWARE\_Security: SWI-ESBU-Root-01.crt Jul 7 18:29:48 notice ALEOS\_FIRMWARE\_Security: SWI-ESBU-Root-02.crt Jul 7 18:29:48 notice ALEOS\_FIRMWARE\_Security: =\> Production-Signed firmware Jul 7 18:29:51 alert ALEOS\_SYSTEM: sub: 0, hda1: p/e 1 ret 0 Jul 7 18:29:54 notice ALEOS\_SERVICES\_pwmgr: Current Power State: ON. Jul 7 18:29:56 warning ALEOS\_SERVICES\_SMSPROC: File /mnt/hda1/smspwd not found Jul 7 18:29:57 notice ALEOS\_LAN: Ethernet port enabled [Auto] Jul 7 18:29:58 info dropbear[611]: Not backgrounding Jul 7 18:29:58 notice ALEOS\_SYSTEM\_STS: Starting STS Jul 7 18:29:59 notice ALEOS\_SYSTEM\_SM: Retrieving records from ‘SnF22.smc’ [request: ‘SnF21.smc’]… Jul 7 18:29:59 notice ALEOS\_SYSTEM\_SM: Record counts: read ‘2230’ good records, ‘0’ bad records Jul 7 18:30:00 notice ALEOS\_LINKMGMT\_linkstatd: eth0 is now up Jul 7 18:30:01 notice ALEOS\_LAN: Configuring eth0 for link setting 0 Jul 7 18:30:01 warning ALEOS\_EVENTS\_dpPulseCnt: 9SharksHal set\_gpio\_edge\_interrupt: Unsupported GPIO 3 Jul 7 18:30:01 notice ALEOS\_LAN: Configuring eth0 for autoneg on Jul 7 18:30:05 alert ALEOS\_SYSTEM: \* PRI ver name : ATT\_005.026\_000 Jul 7 18:30:06 alert ALEOS\_SYSTEM: \* PRI carrier name : 9902196 Jul 7 18:30:06 alert ALEOS\_SYSTEM: \* PRI carrier string : 9902196, ATT\_005.026\_000 Jul 7 18:30:07 notice ALEOS\_LINKMGMT\_linkstatd: eth0 is now down Jul 7 18:30:15 notice ALEOS\_LINKMGMT\_linkmon: -------------------LINKMON------------------- Jul 7 18:30:15 notice ALEOS\_LINKMGMT\_linkmon: dvtFlag=0 Jul 7 18:30:15 notice ALEOS\_LINKMGMT\_linkmon: New Link Status - Network Link Down Jul 7 18:30:15 notice ALEOS\_LINKMGMT\_servicemon: launching servicemon process Jul 7 18:30:15 notice ALEOS\_LINKMGMT\_servicemon: Ethernet WAN KeepAlive Monitor: Disabled Jul 7 18:30:15 notice ALEOS\_LINKMGMT\_servicemon: Cell WAN KeepAlive Monitor: Disabled Jul 7 18:30:16 notice ALEOS\_CONNECTMGMT: autoDHCP mode is now enabled Jul 7 18:30:16 err udhcpc[3595]: started, v1.27.2 Jul 7 18:30:16 notice ALEOS\_FIRMWARE\_rmswitchingcheck: getCsmValues Firmware Carrier: ATT Jul 7 18:30:17 debug SWI0 SDK Process: \>\>MM sn or usb [0] 1-1 Jul 7 18:30:17 debug SWI0 SDK Process: ttyUSB0 device found on USB Interface 0 Jul 7 18:30:17 debug SWI0 SDK Process: ttyUSB0 device found on USB Interface 0 Jul 7 18:30:17 debug SWI0 SDK Process: ttyUSB1 device found on USB Interface 2 Jul 7 18:30:17 debug SWI0 SDK Process: ttyUSB1 device found on USB Interface 2 Jul 7 18:30:17 debug SWI0 SDK Process: ttyUSB2 device found on USB Interface 3 Jul 7 18:30:17 debug SWI0 SDK Process: ttyUSB2 device found on USB Interface 3 Jul 7 18:30:17 debug SWI0 SDK Process: swi\_ossdkusbscan/1507: 3 tty interfaces successfully scanned Jul 7 18:30:17 debug SWI0 SDK Process: qcqmi0 device found on USB Interface 8 Jul 7 18:30:17 debug SWI0 SDK Process: qcqmi1 device found on USB Interface 10 Jul 7 18:30:17 debug SWI0 SDK Process: qcqmi0 device found on USB Interface 8 Jul 7 18:30:17 debug SWI0 SDK Process: qcqmi1 device found on USB Interface 10 Jul 7 18:30:17 debug SWI0 SDK Process: swi\_ossdkusbscan/1533: 2 qmi interfaces successfully scanned Jul 7 18:30:17 debug SWI0 SDK Process: swi\_ossdkusbscan/1545: 5/6 interfaces successfully scanned Jul 7 18:30:17 debug SWI0 SDK Process: swi\_ossdkusbscan: drivers ready! Jul 7 18:30:18 err udhcpc[3595]: sending discover Jul 7 18:30:19 notice ALEOS\_FIRMWARE\_rmswitchingcheck: (qmisdkhelper) Waiting for the Radio Module to be ready Jul 7 18:30:19 notice ALEOS\_FIRMWARE\_rmswitchingcheck: (qmisdkhelper) Radio module is ready Jul 7 18:30:20 debug ALEOS\_FIRMWARE\_rmswitchingcheck: SDK pid is 3661 Jul 7 18:30:20 info SWI0 SDK Process: Launching QMI DS shell: service 2(DMS) Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: Radio Module Version: \> 05.05.58.00\_ATT\_005.026\_000 Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: Radio Module firmware version matches entry in database Jul 7 18:30:20 debug SWI0 SDK Process: fmsExtractParameter: File Name: /tmp/rmswitchingcheck/1//9999999\_9902196\_SWI9X15C\_05.05.58.00\_00\_ATT\_005.026\_000-field.spk Jul 7 18:30:20 debug SWI0 SDK Process: swi\_ossdk\_readdir Jul 7 18:30:20 debug SWI0 SDK Process: fmsExtractParameter: File Name: /tmp/rmswitchingcheck/1//9999999\_9902196\_SWI9X15C\_05.05.58.00\_00\_ATT\_005.026\_000-field.spk Jul 7 18:30:20 debug SWI0 SDK Process: swi\_ossdk\_readdir Jul 7 18:30:20 debug SWI0 SDK Process: fmsExtractParameter: File Name: /tmp/rmswitchingcheck/1//9999999\_9902196\_SWI9X15C\_05.05.58.00\_00\_ATT\_005.026\_000-field.spk Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: #\> Running Radio Module Version: 05.05.58.00\_ATT\_005.026\_000 Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: #\> Stored Radio Module Version: 05.05.58.00\_ATT\_005.026\_000 Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: #----\> Running and Stored Radio Module Versions match Jul 7 18:30:20 info SWI0 SDK Process: Launching QMI DS shell: service 11(UIM) Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: PIN1 Status : 3 Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: PIN1 Verify Retries Left : 3 Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: PIN1 Unblock Retries Left : 10 Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* Jul 7 18:30:20 info SWI0 SDK Process: Launching QMI DS shell: service 3(NAS) Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: MCC-MNC: 313-10, 313-10 Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: MCC-MNC: 313-100, FirstNet Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: Found a matching carrier image: ATT Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: #\> Firmware Carrier: ATT Jul 7 18:30:20 notice ALEOS\_FIRMWARE\_rmswitchingcheck: DONE Jul 7 18:30:21 err udhcpc[3595]: sending discover Jul 7 18:30:22 alert ALEOS\_FIRMWARE\_SWUpdate: No Radio Module Firmware Update pending Jul 7 18:30:23 warning ALEOS\_EVENTS\_dpRptSend: ADMIN password is longer than 8 characters, and will be truncated. Jul 7 18:30:23 notice ALEOS\_SYSTEM\_SM: Retrieving records from ‘SnF12.smc’ [request: ‘SnF11.smc’]… Jul 7 18:30:23 notice ALEOS\_SYSTEM\_SM: Record counts: read ‘133’ good records, ‘0’ bad records Jul 7 18:30:24 err udhcpc[3595]: sending discover Jul 7 18:30:28 err udhcpc[3595]: no lease, failing Jul 7 18:30:30 notice ALEOS\_SECURITY: Inserting xfrm policy Jul 7 18:30:33 notice ALEOS\_CONNECTMGMT: No DHCP requests answered. Disabling autoDHCP mode Jul 7 18:30:36 alert ALEOS\_EVENTS\_dpRptGen: Exiting because GNSS is no longer suspended. Jul 7 18:30:37 notice ALEOS\_SECURITY\_firewallManager: Firewall completed restart after 37658 ms Jul 7 18:30:39 debug SWI0 SDK Process: \>\>MM sn or usb [0] 1-1 Jul 7 18:30:39 debug SWI0 SDK Process: ttyUSB0 device found on USB Interface 0 Jul 7 18:30:39 debug SWI0 SDK Process: ttyUSB0 device found on USB Interface 0 Jul 7 18:30:39 debug SWI0 SDK Process: ttyUSB1 device found on USB Interface 2 Jul 7 18:30:39 debug SWI0 SDK Process: ttyUSB1 device found on USB Interface 2 Jul 7 18:30:39 debug SWI0 SDK Process: ttyUSB2 device found on USB Interface 3 Jul 7 18:30:39 debug SWI0 SDK Process: ttyUSB2 device found on USB Interface 3 Jul 7 18:30:39 debug SWI0 SDK Process: swi\_ossdkusbscan/1507: 3 tty interfaces successfully scanned Jul 7 18:30:39 debug SWI0 SDK Process: qcqmi0 device found on USB Interface 8 Jul 7 18:30:39 debug SWI0 SDK Process: qcqmi1 device found on USB Interface 10 Jul 7 18:30:39 debug SWI0 SDK Process: qcqmi0 device found on USB Interface 8 Jul 7 18:30:39 debug SWI0 SDK Process: qcqmi1 device found on USB Interface 10 Jul 7 18:30:39 debug SWI0 SDK Process: swi\_ossdkusbscan/1533: 2 qmi interfaces successfully scanned Jul 7 18:30:39 debug SWI0 SDK Process: swi\_ossdkusbscan/1545: 5/6 interfaces successfully scanned Jul 7 18:30:39 debug SWI0 SDK Process: swi\_ossdkusbscan: drivers ready! Jul 7 18:30:39 alert ALEOS\_CONNECTMGMT: IPV4 Disconnect Handled Jul 7 18:30:42 info SWI0 SDK Process: Launching QMI DS shell: service 2(DMS) Jul 7 18:30:42 info SWI0 SDK Process: Launching QMI DS shell: service 3(NAS) Jul 7 18:30:42 info SWI0 SDK Process: Launching QMI DS shell: service 1(WDS) Jul 7 18:30:42 info SWI0 SDK Process: Launching QMI DS shell: service 11(UIM) Jul 7 18:30:42 info SWI0 SDK Process: Launching QMI DS shell: service 5(WMS) Jul 7 18:30:42 info SWI0 SDK Process: Launching QMI DS shell: service 240(SWIOMA) Jul 7 18:30:42 debug SWI0 SDK Process: psrwds\_setipfamily: instance: 0 IP family: V4 Active WDS Client: V4 Jul 7 18:30:42 debug SWI0 SDK Process: psrwds\_setipfamily: instance: 0 IP family: V6 Active WDS Client: V6 Jul 7 18:30:42 info SWI0 SDK Process: Launching QMI DS shell: service 1(WDS) Jul 7 18:30:43 debug SWI0 SDK Process: psrwds\_setipfamily: instance: 0 IP family: V4 Active WDS Client: V4 Jul 7 18:30:43 debug SWI0 SDK Process: psrwds\_starnet: Jul 7 18:30:43 debug SWI0 SDK Process: psrwds\_setipfamily: instance: 0 IP family: V4 Active WDS Client: V4 Jul 7 18:30:43 debug SWI0 SDK Process: psrwds\_getsettings: Jul 7 18:30:43 notice ALEOS\_LINKMGMT\_linkstatd: wwan0 is now up Jul 7 18:30:43 err udhcpc[6417]: started, v1.27.2 Jul 7 18:30:44 err udhcpc[6417]: sending discover Jul 7 18:30:44 err udhcpc[6417]: sending select for 52.183.24.203 Jul 7 18:30:44 err udhcpc[6417]: lease of 52.183.24.203 obtained, lease time 7200 Jul 7 18:30:45 notice ALEOS\_LINKMGMT\_linkmon: Radio Connection State - Connected Jul 7 18:30:47 notice InitNG: System is starting up. Jul 7 18:30:47 notice InitNG: System is up and running! Jul 7 18:30:52 alert ALEOS\_LAN: MTU Source Auto - Set DHCP option 26 MTU: 1430 Jul 7 18:30:52 alert ALEOS\_LAN: MTU Source Auto - Ignore Opt 26 MTU size 1500 Jul 7 18:30:53 info dnsmasq[5380]: started, version 2.78-security-prerelease cachesize 150 Jul 7 18:30:53 info dnsmasq[5380]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset auth no-DNSSEC loop-detect inotify Jul 7 18:30:53 info dnsmasq-dhcp[5380]: DHCP, IP range 192.168.14.100 – 192.168.14.100, lease time 1d Jul 7 18:30:53 info dnsmasq-dhcp[5380]: DHCP, IP range 192.168.13.129 – 192.168.13.141, lease time 1d Jul 7 18:30:53 warning dnsmasq[5380]: no servers found in /etc/resolv.conf, will retry Jul 7 18:30:53 info dnsmasq[5380]: read /etc/hosts - 1 addresses Jul 7 18:30:58 notice ALEOS\_SECURITY\_firewallManager: Firewall completed restart after 13061 ms Jul 7 18:31:00 notice ALEOS\_CONNECTMGMT: \*\*\* Network Connection successful. WAN IP [Cellular] : 107.89.137.232 Jul 7 18:31:00 notice ALEOS\_CONNECTMGMT: \*\*\* IP UP 52.183.24.203 : wwan0 Jul 7 18:31:00 notice ALEOS\_CONNECTMGMT: Setting WWAN MTU size to 1430 Jul 7 18:31:01 info dnsmasq[5380]: exiting on receipt of SIGTERM Jul 7 18:31:10 err ALEOS\_VPN: ipsec\_wrapper: VPNFO is disabled due to wrong ID of primary or secondary VPN ID Jul 7 18:31:11 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:12 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:13 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:13 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:13 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:15 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:15 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:15 err ALEOS\_WEB\_ACEmanager: SSL\_accept failed - Error: (336151574) sslv3 alert certificate unknown Jul 7 18:31:19 err ALEOS\_VPN: ipsec\_wrapper: VPNFO is disabled due to wrong ID of primary or secondary VPN ID Jul 7 18:31:20 alert ALEOS\_LAN: MTU Source Auto - Set DHCP option 26 MTU: 1430 Jul 7 18:31:21 alert ALEOS\_LAN: MTU Source Auto - Ignore Opt 26 MTU size 1500 Jul 7 18:31:22 info dnsmasq[8723]: started, version 2.78-security-prerelease cachesize 150 Jul 7 18:31:22 info dnsmasq[8723]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset auth no-DNSSEC loop-detect inotify Jul 7 18:31:22 info dnsmasq-dhcp[8723]: DHCP, IP range 192.168.14.100 – 192.168.14.100, lease time 1d Jul 7 18:31:22 info dnsmasq-dhcp[8723]: DHCP, IP range 192.168.13.129 – 192.168.13.141, lease time 1d Jul 7 18:31:22 info dnsmasq[8723]: reading /etc/resolv.conf Jul 7 18:31:22 warning dnsmasq[8723]: ignoring nameserver 127.0.0.1 - local interface Jul 7 18:31:22 info dnsmasq[8723]: using nameserver 52.183.24.203#53 Jul 7 18:31:22 info dnsmasq[8723]: read /etc/hosts - 1 addresses Jul 7 18:31:24 notice ALEOS\_LINKMGMT\_linkmon: New Link Status - Network Ready ---
**Author:** ![tommyboy20021984](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@tommyboy20021984](https://forum.sierrawireless.com/u/tommyboy20021984)\ **Post date:** [July 9, 2020, 9:56pm UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/6 "2020-07-09T21:56:24Z")
Of course the Ip addresses and key are different but this is how the vpn on the device is setup… using this I can get the primary subnet of the remote network but not the second network… I can see packets coming from the modem for the primary subnet however when I try to ping the second one nothing comes across from the modem. The attached computer to the modem however can get to the second subnet intermittently. I am not very familiar with these… do I need to add a route for the second subnet or would it have done that already when i created the ipsec tunnel? ---
**Author:** ![Donald](https://avatars.discourse-cdn.com/v4/letter/d/ac8455/32.png) [@Donald](https://forum.sierrawireless.com/u/Donald)\ **Post date:** [July 10, 2020, 12:03pm UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/7 "2020-07-10T12:03:19Z")
Hi tommyboy20021984 Please check that the Remote Subnet 2 Address parameter on the gateway is matched with IPSec VPN server. > [@tommyboy20021984](#): > > AT Remote Address Type Subnet Address > AT Remote Address 192.168.13.128 > AT Remote Address - Netmask 255.255.255.240 You select Remote Address Type Subnet Address, So the Remote Address must be 192.168.13.0. Please make sure the device network with second subnet is working. > [@tommyboy20021984](#): > > do I need to add a route for the second subnet or would it have done that already when i created the ipsec tunnel? It have done that already when you created the ipsec tunnel. I have set up IPsec VPN with primary and secondary remote subnet on GX450 ALEOS firmware 4.9.4 p09 at my side. Both primary and secondary remote subnets work fine. I can see packets when I ping primary and secondary remote subnets. I have attached the screenshots for your reference. Please help to mark “Solution” if your question is answered. ![Split tunnel](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/1/1063d2ac9bac307e1e0fa310153320da4960d1ae.png) ![VPN](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/7/7b49cbb24a88ad718cbff4bda1acbe38c4cbd6bd.png) ![Primary remote subnet](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/d/d46badcc01288ad88ad37229dbd99d126f90b21e.png) ![Secondary remote subnet](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/2/22b3839b21fc37f78b13c361eee2cd6f9f8350e6.png) ---
**Author:** ![tommyboy20021984](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@tommyboy20021984](https://forum.sierrawireless.com/u/tommyboy20021984)\ **Post date:** [July 10, 2020, 9:07pm UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/8 "2020-07-10T21:07:52Z")
I appreciate your answer however im not sure I understand why this would not work. I have multiple tunnels and i want to keep them on the 192.168.13.0 network… so subnetting the network only seemed correct. 192.168.13.128 is the network id for the 255.255.255.240 … can the device not do this… i will try this solution though… thank you ---
**Author:** ![tommyboy20021984](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@tommyboy20021984](https://forum.sierrawireless.com/u/tommyboy20021984)\ **Post date:** [July 10, 2020, 9:27pm UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/9 "2020-07-10T21:27:44Z")
I also didnt mention the GX’s IP address and range for the attached devices are both set in the 128 subnet… Subnet Calculator Subnet Calculator Network Class A B C First Octet Range 192 - 223 IP Address 192.168.0.128 Hex IP Address C0.A8.00.80 Subnet Mask 255.255.255.240 Wildcard Mask 0.0.0.15 Subnet Bits 4 Mask Bits 28 Maximum Subnets 16 Hosts per Subnet 14 Host Address Range 192.168.0.129 - 192.168.0.142 Subnet ID 192.168.0.128 Broadcast Address 192.168.0.143 Subnet Bitmap 110nnnnn.nnnnnnnn.nnnnnnnn.sssshhhh ---
**Author:** ![Donald](https://avatars.discourse-cdn.com/v4/letter/d/ac8455/32.png) [@Donald](https://forum.sierrawireless.com/u/Donald)\ **Post date:** [July 15, 2020, 9:27am UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/10 "2020-07-15T09:27:34Z")
Hi @tommyboy20021984 > [@tommyboy20021984](#): > > i will try this solution though… thank you What results did you try? Does it work? I have set up IPsec VPN with the same configuration and subnet. Both primary and secondary remote subnets work fine. I can see packets when I ping primary and secondary remote subnets. Please make sure the device network with second subnet is working and consider opening firewall properly. ![VPN](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/c/c069d0b17e0c2742c02ddad9b9abb9657c27c495.png) ![Subnet1](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/5/5693cab390d121dc4ed5477d525fe3de317e5615.png) ![Subnet2](https://us1.discourse-cdn.com/flex025/uploads/sierrawireless/original/2X/2/2d030434e6ddaa70dd8fbfd7b2d61143dd02d1ba.png) ---
**Author:** ![tommyboy20021984](https://avatars.discourse-cdn.com/v4/letter/t/53a042/32.png) [@tommyboy20021984](https://forum.sierrawireless.com/u/tommyboy20021984)\ **Post date:** [July 16, 2020, 6:56pm UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/11 "2020-07-16T18:56:26Z")
What version of ALEOS are you on? ---
**Author:** ![Donald](https://avatars.discourse-cdn.com/v4/letter/d/ac8455/32.png) [@Donald](https://forum.sierrawireless.com/u/Donald)\ **Post date:** [July 17, 2020, 2:24am UTC](https://forum.sierrawireless.com/t/gx450-vpn-2nd-subnet-route/20835/12 "2020-07-17T02:24:52Z")
Hi @tommyboy20021984 I have mentioned it before. > [@Donald](#): > > GX450 ALEOS firmware 4.9.4 p09