RUT240 Modem update and strange behaviour

[Dennis_Ernst]

Hello,

today I noticed a partial outage on one of my customers systems. I looked at the logs and found this:

Fri Jul 28 09:28:44 2023 daemon.info dfota[5561]: Searching for WAN...
Fri Jul 28 09:28:44 2023 daemon.info dfota[5561]: WAN found on interface: mob1s1a1_4
Fri Jul 28 09:28:44 2023 daemon.info dfota[5561]: Preparing for gsm.modem0 update!
Fri Jul 28 09:28:44 2023 daemon.info dfota[5561]: Searching for updates...
Fri Jul 28 09:28:45 2023 daemon.info dfota[5561]: Update found! Update size: 6044618
Fri Jul 28 09:28:48 2023 cron.err crond[6420]: crond (busybox 1.34.1) started, log level 5
Fri Jul 28 09:28:52 2023 cron.err crond[6608]: crond (busybox 1.34.1) started, log level 5
Fri Jul 28 09:28:52 2023 daemon.info dfota[5561]: Update script done!

This seems to me that the modem firmware was automatically updated, which resulted in a restart of all interfaces. Is that right?

Furthermore these errors occur periodically after this update:

Fri Jul 28 09:29:21 2023 daemon.err openvpn(rms_XXXX)[5107]: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Jul 28 09:29:21 2023 daemon.err openvpn(rms_XXXX)[5107]: TLS Error: TLS handshake failed
Fri Jul 28 09:29:21 2023 daemon.notice openvpn(rms_XXXX)[5107]: SIGUSR1[soft,tls-error] received, process restarting
Fri Jul 28 09:29:26 2023 daemon.warn openvpn(rms_XXXX)[5107]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Fri Jul 28 09:29:26 2023 daemon.notice openvpn(rms_XXXX)[5107]: TCP/UDP: Preserving recently used remote address: [AF_INET]X.XX.XXX.XXX:YYYYY
Fri Jul 28 09:29:26 2023 daemon.notice openvpn(rms_XXXX)[5107]: UDP link local: (not bound)
Fri Jul 28 09:29:26 2023 daemon.notice openvpn(rms_XXXX)[5107]: UDP link remote: [AF_INET]X.XX.XXX.XXX:YYYYY

Can you give me some pointers if this is normal?

EDIT:
I masked IP addresses and rms hashes, so please dont wonder about the X’s.
Router firmware version is: RUT2_R_00.07.04.2,
Modem is: Quectel EC25-EC,
Modem firmware:EC25ECGAR06A08M1G 01.001.01.001

Kind regards
Dennis

CTO // Co-Founder
citynode GmbH

[AndzejJ]

Hello,

The first logs only check for the updates, they do not actually update the modem. This is completely normal, and you should see these in the logs.

From the other logs, it seems that there is an issue with RMS VPN connection. Specifically, the TLS error.

Did you change anything on the device? Maybe you updated something?

Please, try synchronizing time on the device in Services → NTP.

Also, on the RMS VPN Hub page, navigate to clients tab and press a button for the device that renews its configurations and certificates.

Kind Regards,