I have one of my router connected to Teltonika system derive information. All work well, but recently the router try to reconnect to the system by the log on Tetonika site says:
The device is redirected to the authentication system. 0 2025-11-18 16:39:37 The device is redirected to the authentication system. 0 2025-11-18 16:20:05 The device is redirected to the authentication system. 0 2025-11-18 15:49:17
This router runs a vpn client that every-time is online try to reconnect to the server, however on the server site i see some interaction between server and the router. here how it looks on server log: 2025-11-18 16:50:50 1.1.1.1:5764 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 2025-11-18 16:50:50 1.1.1.1:5764 TLS Error: TLS handshake failed 2025-11-18 16:50:50 1.1.1.1:5764 Fatal TLS error (check_tls_errors_co), restarting 2025-11-18 16:50:50 1.1.1.1:5764 SIGTERM[soft,tls-error] received, client-instance exiting
The vpn connection worked without any problem for days. Always reconnect properly. Usually put down the vpn server restore the connection to the Teltonika RMS system, but not this time. What can be the problem.
That how it looks last 72h.
What I gave discovered that the vpn server <=> client connection works fine
Here is my investigation.
The router has super slow internet access. But what catch my attention is the internal data flowing around.
root@Teltonika-RUT955:~# iptables -Z
root@Teltonika-RUT955:~# date
Wed Nov 19 16:04:11 UTC 2025
root@Teltonika-RUT955:~# iptables -v -L
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
24 1824 ACCEPT all -- lo any anywhere anywhere /* !fw3 */
581K 191M input_rule all -- any any anywhere anywhere /* !fw3: user chain for input */
288 29864 ACCEPT all -- any any anywhere anywhere ctstate RELATED,ESTABLISHED /* !fw3 */
0 0 DROP all -- any any anywhere anywhere ctstate INVALID /* !fw3 */
581K 190M zone_lan_input all -- br-lan any anywhere anywhere /* !fw3 */
....
....
root@Teltonika-RUT955:~# date
Wed Nov 19 16:06:16 UTC 2025
As you can see in about two minutes the local traffic hits around 200M of data. Table mangle and raw is quiet.
The “br-lan” traffic is massive, however wwan0, and tun_c_a very little data flowing around:
