SAGAK Posted September 8 Share Posted September 8 Добрый день! Подскажите, пожалуйста, создал VPN подключение, L2TP/IPSec, но оно не подключается (хотя если создать аналогичное в винде - всё нормально подключается и работает): Сен 8 09:33:04 ndm IpSec::Netfilter: netfilter configuration reloading is done. Сен 8 09:33:06 ipsec Starting strongSwan 5.9.7 IPsec [starter]... Сен 8 09:33:06 ipsec 00[DMN] Starting IKE charon daemon (strongSwan 5.9.7, Linux 4.9-ndm-5, mips) Сен 8 09:33:06 ipsec 00[LIB] providers loaded by OpenSSL: legacy default Сен 8 09:33:06 ipsec 00[CFG] loading secrets Сен 8 09:33:06 ipsec 00[CFG] loaded 1 RADIUS server configuration Сен 8 09:33:06 ipsec 00[CFG] enabling systime-fix, threshold: Tue Jan 1 00:00:00 2030 Сен 8 09:33:06 ipsec 00[CFG] Сен 8 09:33:06 ipsec 00[CFG] starting system time check, interval: 10s Сен 8 09:33:06 ipsec 00[LIB] loaded plugins: charon random save-keys nonce x509 pubkey pkcs7 pem openssl pkcs8 xcbc cmac hmac ctr attr kernel-netlink resolve socket-default stroke vici updown eap-identity eap-md5 eap-mschapv2 eap-dynamic eap-radius eap-peap xauth-generic xauth-eap error-notify systime-fix unity counters Сен 8 09:33:06 ipsec 00[LIB] dropped capabilities, running as uid 65534, gid 65534 Сен 8 09:33:06 ndm Io::UnixStreamSocket: connected after 1 retries. Сен 8 09:33:06 ipsec 05[CFG] loaded IKE shared key with id 'L2TP2-PSK' for: 'cmap:L2TP2' Сен 8 09:33:06 ipsec 13[CFG] loaded 0 entries for attr plugin configuration Сен 8 09:33:06 ipsec 13[CFG] loaded 1 RADIUS server configuration Сен 8 09:33:06 ipsec 07[CFG] added vici connection: L2TP2 Сен 8 09:33:06 ipsec 07[CFG] initiating 'L2TP2' Сен 8 09:33:06 ipsec 07[IKE] sending DPD vendor ID Сен 8 09:33:06 ipsec 07[IKE] sending FRAGMENTATION vendor ID Сен 8 09:33:06 ipsec 07[IKE] sending NAT-T (RFC 3947) vendor ID Сен 8 09:33:06 ipsec 07[IKE] sending draft-ietf-ipsec-nat-t-ike-02\n vendor ID Сен 8 09:33:06 ipsec 07[IKE] initiating Main Mode IKE_SA L2TP2[1] to 146.0.79.21 Сен 8 09:33:06 ipsec 09[IKE] received FRAGMENTATION vendor ID Сен 8 09:33:06 ipsec 09[IKE] received DPD vendor ID Сен 8 09:33:06 ipsec 09[IKE] received NAT-T (RFC 3947) vendor ID Сен 8 09:33:06 ipsec 09[CFG] received proposals: IKE:AES_CBC=256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048 Сен 8 09:33:06 ipsec 09[CFG] configured proposals: IKE:AES_CBC=256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1536, IKE:AES_CBC=256/HMAC_SHA1_96/PRF_HMAC_SHA1/ECP_384, IKE:AES_CBC=256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, IKE:AES_CBC=256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC=128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1536, IKE:AES_CBC=128/HMAC_SHA1_96/PRF_HMAC_SHA1/ECP_256, IKE:AES_CBC=128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1536, IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC=256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC=128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:3DES_CBC/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024 Сен 8 09:33:06 ipsec 09[CFG] selected proposal: IKE:AES_CBC=256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048 Сен 8 09:33:06 ipsec 14[IKE] found linked key for crypto map 'L2TP2' Сен 8 09:33:07 ipsec 14[IKE] local host is behind NAT, sending keep alives Сен 8 09:33:07 ipsec 14[IKE] remote host is behind NAT Сен 8 09:33:07 ipsec 11[IKE] IKE_SA L2TP2[1] established between 192.168.0.14[192.168.0.14]...146.0.79.21[146.0.79.21] Сен 8 09:33:07 ipsec 11[IKE] scheduling rekeying in 28765s Сен 8 09:33:07 ipsec 11[IKE] maximum IKE_SA lifetime 28785s Сен 8 09:33:07 ipsec 13[CFG] received proposals: ESP:AES_CBC=128/HMAC_SHA1_96/NO_EXT_SEQ Сен 8 09:33:07 ipsec 13[CFG] configured proposals: ESP:AES_CBC=128/HMAC_SHA1_96/NO_EXT_SEQ, ESP:AES_CBC=256/HMAC_SHA1_96/NO_EXT_SEQ, ESP:3DES_CBC/HMAC_SHA1_96/NO_EXT_SEQ, ESP:AES_CBC=128/HMAC_SHA2_256_128/NO_EXT_SEQ, ESP:AES_CBC=256/HMAC_SHA2_256_128/NO_EXT_SEQ, ESP:3DES_CBC/HMAC_SHA2_256_128/NO_EXT_SEQ, ESP:CHACHA20_POLY1305/NO_EXT_SEQ Сен 8 09:33:07 ipsec 13[CFG] selected proposal: ESP:AES_CBC=128/HMAC_SHA1_96/NO_EXT_SEQ Сен 8 09:33:07 ipsec 13[IKE] CHILD_SA L2TP2{1} established with SPIs cd0a534b_i 2227ea66_o and TS 192.168.0.14/32[udp/42754] === 146.0.79.21/32[udp/l2tp] Сен 8 09:33:07 ndm IpSec::Configurator: "L2TP2": crypto map is up. И все, на этом больше никаких признаков жизни, в статусе соединения "Идёт подключение". В какую сторону копать? Проблема как в 4.1.7 версии, так и в 4.2 Beta 3. Quote Link to comment Share on other sites More sharing options...
SAGAK Posted September 8 Author Share Posted September 8 По факту различных действий помог сброс до заводских настроек. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.