Jump to content
Как правильно добавить self-test и прочую отладку в тему
Где взять тестовые сборки
  • 0

Помогите настроить L2TP\IPsec клиент в виде доп подключения

DennoN

Asked by DennoN,

 Share

Question

DennoN Content Generator

DennoN

Posted
Posted (edited)

ВОПРОС СНЯТ! ЗАРАБОТАЛО

Здравствуйте! Являюсь обладателем роутера Giga новой серии. Прошивка 2.12.B.1.0-3 бета

Домашний инет по PPPOE, пытаюсь подключить впн от нордвпна по протоколу L2TP\IPsec. Соединение пытается усnановится, но получаю ошибку в логе. Что она может означать?

 

Скрытый текст
IpSec::Manager: IPsec reconfiguration transaction was created.
Июн 21 22:44:21
ndm
IpSec::Configurator: start applying IPsec configuration.
Июн 21 22:44:21
ndm
IpSec::Configurator: IPsec configuration applying is done.
Июн 21 22:44:21
ndm
IpSec::Configurator: start reloading IKE keys task.
Июн 21 22:44:21
ipsec
09[CFG] rereading secrets
Июн 21 22:44:21
ipsec
09[CFG] loading secrets
Июн 21 22:44:21
ipsec
09[CFG] loaded IKE secret for cmap:L2TP0
Июн 21 22:44:21
ipsec
09[CFG] rereading ca certificates from '/tmp/ipsec/ipsec.d/cacerts'
Июн 21 22:44:21
ipsec
09[CFG] rereading aa certificates from '/tmp/ipsec/ipsec.d/aacerts'
Июн 21 22:44:21
ipsec
09[CFG] rereading ocsp signer certificates from '/tmp/ipsec/ipsec.d/ocspcerts'
Июн 21 22:44:21
ipsec
09[CFG] rereading attribute certificates from '/tmp/ipsec/ipsec.d/acerts'
Июн 21 22:44:21
ipsec
09[CFG] rereading crls from '/tmp/ipsec/ipsec.d/crls'
Июн 21 22:44:21
ndm
IpSec::Configurator: reloading IKE keys task done.
Июн 21 22:44:21
ndm
IpSec::Configurator: start reloading IPsec config task.
Июн 21 22:44:21
ipsec
14[CFG] received stroke: delete connection 'L2TP0'
Июн 21 22:44:21
ipsec
14[CFG] deleted connection 'L2TP0'
Июн 21 22:44:21
ipsec
00[DMN] signal of type SIGHUP received. Reloading configuration
Июн 21 22:44:21
ipsec
07[CFG] received stroke: add connection 'L2TP0'
Июн 21 22:44:21
ipsec
00[CFG] loaded 0 entries for attr plugin configuration
Июн 21 22:44:21
ipsec
07[CFG] added configuration 'L2TP0'
Июн 21 22:44:21
ndm
IpSec::IpSecNetfilter: start reloading netfilter configuration...
Июн 21 22:44:21
ndm
IpSec::IpSecNetfilter: netfilter configuration reloading is done.
Июн 21 22:44:21
ndm
IpSec::Configurator: reloading IPsec config task done.
Июн 21 22:44:23
ndm
IpSec::Configurator: "L2TP0": crypto map shutdown started.
Июн 21 22:44:23
ipsec
05[CFG] received stroke: unroute 'L2TP0'
Июн 21 22:44:23
ipsec
06[CFG] received stroke: terminate 'L2TP0{*}'
Июн 21 22:44:23
ipsec
06[CFG] no CHILD_SA named 'L2TP0' found
Июн 21 22:44:23
ipsec
08[CFG] received stroke: terminate 'L2TP0[*]'
Июн 21 22:44:23
ipsec
08[CFG] no IKE_SA named 'L2TP0' found
Июн 21 22:44:23
ndm
IpSec::Configurator: "L2TP0": crypto map shutdown complete.
Июн 21 22:44:24
ipsec
15[CFG] received stroke: initiate 'L2TP0'
Июн 21 22:44:24
ipsec
09[IKE] sending DPD vendor ID
Июн 21 22:44:24
ipsec
09[IKE] sending FRAGMENTATION vendor ID
Июн 21 22:44:24
ipsec
09[IKE] sending NAT-T (RFC 3947) vendor ID
Июн 21 22:44:24
ipsec
09[IKE] sending draft-ietf-ipsec-nat-t-ike-02\n vendor ID
Июн 21 22:44:24
ipsec
09[IKE] initiating Main Mode IKE_SA L2TP0[3] to 185.117.118.224
Июн 21 22:44:24
ndm
IpSec::Configurator: "L2TP0": crypto map initialized.
Июн 21 22:44:32
ipsec
07[IKE] sending retransmit 1 of request message ID 0, seq 1
Июн 21 22:44:40
ipsec
05[IKE] sending retransmit 2 of request message ID 0, seq 1
Июн 21 22:44:50
ipsec
13[IKE] sending retransmit 3 of request message ID 0, seq 1
Июн 21 22:45:01
ipsec
05[IKE] sending retransmit 4 of request message ID 0, seq 1
Июн 21 22:45:12
ipsec
13[IKE] sending retransmit 5 of request message ID 0, seq 1
Июн 21 22:45:25
ipsec
11[IKE] sending retransmit 6 of request message ID 0, seq 1
Июн 21 22:45:40
ipsec
10[IKE] sending retransmit 7 of request message ID 0, seq 1
Июн 21 22:45:55
ipsec
09[IKE] sending retransmit 8 of request message ID 0, seq 1
Июн 21 22:46:12
ipsec
07[IKE] giving up after 8 retransmits
Июн 21 22:46:12
ndm
IpSec::Configurator: remote peer of crypto map "L2TP0" is down.
Июн 21 22:46:12
ndm
IpSec::Configurator: "L2TP0": crypto map active IKE SA: 0, active CHILD SA: 0.
Июн 21 22:46:12
ndm
IpSec::Configurator: fallback peer is not defined for crypto map "L2TP0", retry.
Июн 21 22:46:12
ndm
Network::Interface::L2tp: "L2TP0": IPsec layer is down, shutdown L2TP layer.
Июн 21 22:46:12
ndm
IpSec::Configurator: "L2TP0": schedule reconnect for crypto map.
Июн 21 22:46:12
ndm
Network::Interface::Ppp: "L2TP0": disabled connection.
Июн 21 22:46:12
ipsec
07[IKE] establishing IKE_SA failed, peer not responding
Июн 21 22:46:12
ndm
Network::Interface::PppTunnel: "L2TP0": try to resolve remote endpoint via 212.1.224.6.
Июн 21 22:46:13
ndm
Network::Interface::PppTunnel: "L2TP0": remote endpoint is resolved to "185.117.118.224".
Июн 21 22:46:13
ndm
Network::Interface::PppTunnel: "L2TP0": connecting via ISP (GigabitEthernet1).
Июн 21 22:46:13
ndm
Network::Interface::PppTunnel: "L2TP0": local endpoint is resolved to "176.193.4.225".
Июн 21 22:46:13
ndm
Network::Interface::PppTunnel: "L2TP0": added host route to 185.117.118.224 via 176.193.0.1 (GigabitEthernet1).
Июн 21 22:46:13
ndm
Network::Interface::L2tp: "L2TP0": using port 41200 as local.
Июн 21 22:46:13
ndm
Network::Interface::L2tp: "L2TP0": updating IP secure configuration.
Июн 21 22:46:13
ndm
IpSec::Manager: "L2TP0": IP secure connection and keys was deleted.
Июн 21 22:46:13
ndm
IpSec::Manager: "L2TP0": IP secure connection was added.
Edited by Dennon
Link to comment
Share on other sites

3 answers to this question

Recommended Posts

  • 0
Le ecureuil Honored Flooder

Le ecureuil

Posted
Posted
6 минут назад, Dennon сказал:

Здравствуйте! Являюсь обладателем роутера Giga новой серии. Прошивка 2.12.B.1.0-3 бета

Домашний инет по PPPOE, пытаюсь подключить впн от нордвпна по протоколу L2TP. Соединение пытается утсановится, но получаю ошибку в логе. Что она может означать?

 

  Показать содержимое

У вас в логе ничего про IPsec нет.

Вы настроили L2TP или L2TP/IPsec?

Для NordVPN нужно второе (оно появляется при установке компонента IPsec).

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to question listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...