帐号:密码:下次自动登录{url:/nForum/slist.json?uid=guest&root=list-section}{url:/nForum/nlist.json?uid=guest&root=list-section}
贴数:3&分页:用生命为机动车过滤尾气的公路骑行者发信人: Jtr (追求: 随心所欲而不逾矩), 信区: Internetwork
标&&题: 求教xl2tpd故障一例
发信站: 水木社区 (Tue Sep 21 12:17:27 2010), 站内 && Hi all, && 我遇到的问题是ipsec vpn无法连接，客户端的log为： && ep 21 12:08:42 Rivendell pppd[5928]: pppd 2.4.2 (Apple version 412.3) started by qzhou, uid 501
Sep 21 12:08:42 Rivendell pppd[5928]: L2TP connecting to server 'blessedrealm.org' (173.230.149.46)...
Sep 21 12:08:42 Rivendell pppd[5928]: IPSec connection started
Sep 21 12:08:42 Rivendell racoon[5929]: Connecting.
Sep 21 12:08:42 Rivendell racoon[5929]: IKE Packet: transmit success. (Initiator, Main-Mode message 1).
Sep 21 12:08:42 Rivendell racoon[5929]: IKE Packet: receive success. (Initiator, Main-Mode message 2).
Sep 21 12:08:42 Rivendell racoon[5929]: IKE Packet: transmit success. (Initiator, Main-Mode message 3).
Sep 21 12:08:42 Rivendell racoon[5929]: IKE Packet: receive success. (Initiator, Main-Mode message 4).
Sep 21 12:08:42 Rivendell racoon[5929]: IKE Packet: transmit success. (Initiator, Main-Mode message 5).
Sep 21 12:08:43 Rivendell racoon[5929]: IKEv1 Phase1 AUTH: success. (Initiator, Main-Mode Message 6).
Sep 21 12:08:43 Rivendell racoon[5929]: IKE Packet: receive success. (Initiator, Main-Mode message 6).
Sep 21 12:08:43 Rivendell racoon[5929]: IKEv1 Phase1 Initiator: success. (Initiator, Main-Mode).
Sep 21 12:08:43 Rivendell racoon[5929]: IKE Packet: transmit success. (Information message).
Sep 21 12:08:43 Rivendell racoon[5929]: IKEv1 Information-Notice: transmit success. (ISAKMP-SA).
Sep 21 12:08:43 Rivendell racoon[5929]: IKE Packet: transmit success. (Initiator, Quick-Mode message 1).
Sep 21 12:08:43 Rivendell racoon[5929]: IKE Packet: receive success. (Initiator, Quick-Mode message 2).
Sep 21 12:08:43 Rivendell racoon[5929]: IKE Packet: transmit success. (Initiator, Quick-Mode message 3).
Sep 21 12:08:43 Rivendell racoon[5929]: IKEv1 Phase2 Initiator: success. (Initiator, Quick-Mode).
Sep 21 12:08:43 Rivendell racoon[5929]: Connected.
Sep 21 12:08:43 Rivendell pppd[5928]: IPSec connection established
Sep 21 12:09:03 Rivendell pppd[5928]: L2TP cannot connect to the server
Sep 21 12:09:03 Rivendell configd[13]: SCNCController: Disconnecting. (Connection tried to negotiate for, 21 seconds).
Sep 21 12:09:03 Rivendell racoon[5929]: IKE Packet: transmit success. (Information message).
Sep 21 12:09:03 Rivendell racoon[5929]: IKEv1 Information-Notice: transmit success. (Delete IPSEC-SA).
Sep 21 12:09:03 Rivendell racoon[5929]: IKE Packet: transmit success. (Information message).
Sep 21 12:09:03 Rivendell racoon[5929]: IKEv1 Information-Notice: transmit success. (Delete ISAKMP-SA).
Sep 21 12:09:04 Rivendell racoon[5929]: Disconnecting. (Connection was up for, 21.296526 seconds). && 服务端的log稍微简单些：
Sep 21 12:02:23 li159-46 xl2tpd[20404]: Forked by Scott Balmos and David Stipp, (C) 2001
Sep 21 12:02:23 li159-46 xl2tpd[20404]: Inherited by Jeff McAdams, (C) 2002
Sep 21 12:02:23 li159-46 xl2tpd[20404]: Forked again by Xelerance () (C) 2006
Sep 21 12:02:23 li159-46 xl2tpd[20404]: Listening on IP address 0.0.0.0, port 1701
Sep 21 12:02:31 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 17 twice, ignoring second one.
Sep 21 12:02:32 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 17 twice, ignoring second one.
Sep 21 12:02:36 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 17 twice, ignoring second one.
Sep 21 12:02:37 li159-46 xl2tpd[20404]: Maximum retries exceeded for tunnel 9292.&&Closing.
Sep 21 12:02:44 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 17 twice, ignoring second one.
Sep 21 12:02:44 li159-46 xl2tpd[20404]: Connection 17 closed to 218.7.32.121, port 55601 (Timeout)
Sep 21 12:02:49 li159-46 xl2tpd[20404]: Unable to deliver closing message for tunnel 9292. Destroying anyway.
Sep 21 12:04:35 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 18 twice, ignoring second one.
Sep 21 12:04:36 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 18 twice, ignoring second one.
Sep 21 12:04:40 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 18 twice, ignoring second one.
Sep 21 12:04:40 li159-46 xl2tpd[20404]: Maximum retries exceeded for tunnel 3087.&&Closing.
Sep 21 12:04:48 li159-46 xl2tpd[20404]: control_finish: Peer requested tunnel 18 twice, ignoring second one.
Sep 21 12:04:48 li159-46 xl2tpd[20404]: Connection 18 closed to 218.7.32.121, port 59978 (Timeout)
Sep 21 12:04:48 li159-46 xl2tpd[20404]: Connection 18 closed to 218.7.32.121, port 59978 (Timeout)
Sep 21 12:04:53 li159-46 xl2tpd[20404]: Unable to deliver closing message for tunnel 3087. Destroying anyway. && 服务段配置文件：
$ cat /etc/xl2tpd/xl2tpd.conf
[global]&&&&&&&&&&&&&&&&; Global parameters:
port = 1701&&&&&&&&&&&& ; * Bind to port 1701
auth file = /etc/xl2tpd/l2tp-secrets&&; * Where our challenge secrets are
access control = no&&&&&&&& ; * Refuse connections without IP match
rand source = dev&&&&&&&&&&&&&&&&&&&& ; Source for entropy for random && [lns default]&&&&&&&&&&&& ; Our fallthrough LNS definition
exclusive = no&&&&&&&&&&&&; * Only permit one tunnel per host
ip range = 192.168.10.100 - 192.168.10.254 ;ip range
local ip = 服务器公网IP ; ；以前设置内网IP也一样不能用，来回换
refuse authentication = yes&&&& ; * Refuse authentication altogether
refuse pap = yes&&&&&&&&&&&&; * Refuse PAP authentication
refuse chap = yes
ppp debug = no&&&&&&&&&&&&; * Turn on PPP debugging
pppoptfile = /etc/ppp/options.xl2 * ppp options file
$ cat /etc/ppp/options.xl2tpd
# Do not support BSD compression.
lock && # Allow all usernames to connect.
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 10
lcp-echo-interval 5
nodeflate && # Do not authenticate incoming connections. This is handled by IPsec.
refuse-chap
refuse-mschap
refuse-mschap-v2 && # Set the DNS servers the PPP clients will use.
ms-dns 8.8.8.8
ms-dns 8.8.4.4
ms-dns 4.3.2.1 && mtu 1400
mru 1400 &&&& 跪求高人指点！
&&&& ◢◣&& ▇▆▅▄▃▅▆&&&&▁▃▄▃▂◢\/ ◣&&&&&&&&◥\│ ╱ / | / ╱
田 &&&&&&&&&&&&&&&&&&&&&&▆▄▃▄ \╲\╱ && ◢◣&& \/╲/╱ 有你守望
&& ▂&&&&&&&&&&&&&&&&&&&&▂▃▄▅▆▅▃▂ \▎/▂▂ 田 ▁▁◥\╲/&&╱ 小屋
▋ ▆▅▄▂▄▆▇█◢█◢██████▎ ...&&▂ ≡≡▃▍\▊我才入住
▄▃▂▁▂▃▄▅▄▃▂▂▃▄▃▂▁▁▁▂▃▂&&&&&&&&&&&&&&&&▍ ▊&&&&&&&& &&&& ※ 来源:·水木社区 newsmth.net·[FROM: 218.7.32.*]
猫王发信人: stid (猫王), 信区: Internetwork
标&&题: Re: 求教xl2tpd故障一例
发信站: 水木社区 (Tue Sep 21 13:27:45 2010), 站内 && 你这是l2tp over ipsec吧，不太懂。感觉像l2tp的问题 && 【 在 Jtr (追求: 随心所欲而不逾矩) 的大作中提到: 】
: 我遇到的问题是ipsec vpn无法连接，客户端的log为：
: ep 21 12:08:42 Rivendell pppd[5928]: pppd 2.4.2 (Apple version 412.3) started by qzhou, uid 501
: ...................
&& -- && ※ 来源:·水木社区 newsmth.net·[FROM: 59.108.29.*]
用生命为机动车过滤尾气的公路骑行者发信人: Jtr (追求: 随心所欲而不逾矩), 信区: Internetwork
标&&题: 已解决Re: 求教xl2tpd故障一例
发信站: 水木社区 (Sun Sep 26 10:28:46 2010), 站内 && 服务端配置文件里没有写nexthop该去哪儿，
写到IPSec.conf里就好了： &&&&leftnexthop=%defaultroute &&&&rightnexthop=%defaultroute && 【 在 Jtr (追求: 随心所欲而不逾矩) 的大作中提到: 】
: 我遇到的问题是ipsec vpn无法连接，客户端的log为：
: ep 21 12:08:42 Rivendell pppd[5928]: pppd 2.4.2 (Apple version 412.3) started by qzhou, uid 501
: ...................
叉烧包!谁爱吃刚出笼的叉烧包,谁爱吃刚出笼的叉烧包,&&&&&&&&&&&&&&&&&&&&&&&&&&&&
还有那莲蓉包呀猪肉包呀鱼翅包呀豆沙包呀应有尽有广东包!假使你说你不爱吃广东包,
还有那各式各样上海包,让我来告诉你有生煎馒头大肉包呀小笼馒头菜肉包呀&&&&&&&&&&
好朋友!你到底爱吃那一样,你到底爱吃那一样啊那一样啊,广东包呀上海包呀广东包呀&&
上海包呀广东包!有的人他们爱吃广东包,有的人他们爱吃上海包,&&&&&&&&&&&&&&&&&&&&
朋友呀到底爱吃广东包呀上海包呀广东包呀上海包呀,我最爱吃是叉烧包....啊~~~~~~!! &&&& ※ 来源:·水木社区 newsmth.net·[FROM: 221.207.241.*]
文章数:3&分页: