forum.lissyara.su

Раз не осталось живых, значит мертвые — Встать!
https://forum.lissyara.su/

MPD5 L2TP-клиент: рвется через минуту после соединения

https://forum.lissyara.su/viewtopic.php?f=4&t=45344

Страница 1 из 1

MPD5 L2TP-клиент: рвется через минуту после соединения

Добавлено: 2018-12-03 17:39:37
yurybx
Добра вашей лисьей норе!
Пытаюсь настроить L2TP-клиента для подключению к чужому VPN-серверу. Соединение устанавливается, интерфейс получает IP-адрес, и через минуту сыпет в логах "no reply to n echo request(s)", после чего отваливается. И даже в эту минуту пакеты по VPN-туннелю не проходят (HTTPS-сессия не открывается). Сразу скажу, что с интернетом и VPN-сервером всё в порядке, т. к. из Windows соединение устанавливается нормально и по нему ходит трафик.
Как FreeBSD, так и Windows находятся за роутером. По-этому, в настройках racoon включен NAT-traversal.
В логи VPN-сервера нету возможности заглянуть, т. к. сервер не мой.
Фаервол на моей FreeBSD отключен.
Моя конфигурация (1.2.3.4 - IP-адрес VPN-сервера, 10.1.1.99 - моей FreeBSD):

О/С FreeBSD 10.4 amd64, порты mpd5-5.8 и ipsec-tools-0.8.2_5.

Код: Выделить всё

#mpd.conf
startup:
log +ALL +EVENTS -FRAME -ECHO
default:
      load L2TP_client
L2TP_client:
        create bundle static B1
        create link static L1 l2tp
        set link action bundle B1
        set auth authname "mylogin"
        set auth password "mypassword"
        set link max-redial 0
        set link mtu 1460
        set link keep-alive 20 75
        set l2tp peer 1.2.3.4
        open

Код: Выделить всё

#racoon.conf
path include "/usr/local/etc/racoon";
path pre_shared_key "/usr/local/etc/racoon/psk.txt";
log info;
padding
{
        maximum_length 20;     
        randomize off;         
        strict_check off;       
        exclusive_tail off;    
}
listen {
        isakmp                  10.1.1.99 [7001];
        isakmp                  10.1.1.99 [500];
        isakmp_natt             10.1.1.99 [4500];
}
timer {
        counter 5;
        interval 20 sec;
        persend 1;
        phase1 30 sec;
        phase2 15 sec;
}
remote 1.2.3.4 {
        exchange_mode main,aggressive;
        lifetime time 24 hour;
        my_identifier address;
        peers_identifier address;
        passive off;
        generate_policy off;
        nat_traversal on;
        proposal {
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method pre_shared_key;
                dh_group 2;
        }
}
sainfo anonymous {
        encryption_algorithm 3des;
        authentication_algorithm hmac_md5, hmac_sha1;
        lifetime time 1 hour ;
        compression_algorithm deflate;
}
А вот так выглядит лог MPD5:

Код: Выделить всё

Dec  3 15:17:11 TEST mpd: [B1] Bundle: Interface ng0 created
Dec  3 15:17:11 TEST mpd: [L1] Link: OPEN event
Dec  3 15:17:11 TEST mpd: [L1] LCP: Open event
Dec  3 15:17:11 TEST mpd: [L1] LCP: state change Initial --> Starting
Dec  3 15:17:11 TEST mpd: [L1] LCP: LayerStart
Dec  3 15:17:11 TEST mpd: L2TP: Initiating control connection 0x803073610 0.0.0.0 0 <-> 1.2.3.4 1701
Dec  3 15:17:14 TEST mpd: L2TP: Control connection 0x803073610 10.1.1.99 51504 <-> 1.2.3.4 1701 connected
Dec  3 15:17:14 TEST mpd: [L1] L2TP: Incoming call #5490000 via control connection 0x803073610 initiated
Dec  3 15:17:14 TEST mpd: [L1] L2TP: Call #5490000 connected
Dec  3 15:17:14 TEST mpd: [L1] Link: UP event
Dec  3 15:17:14 TEST mpd: [L1] LCP: Up event
Dec  3 15:17:14 TEST mpd: [L1] LCP: state change Starting --> Req-Sent
Dec  3 15:17:14 TEST mpd: [L1] LCP: SendConfigReq #1
Dec  3 15:17:14 TEST mpd: [L1]   ACFCOMP
Dec  3 15:17:14 TEST mpd: [L1]   PROTOCOMP
Dec  3 15:17:14 TEST mpd: [L1]   MRU 1500
Dec  3 15:17:14 TEST mpd: [L1]   MAGICNUM 0x1a2d6093
Dec  3 15:17:14 TEST mpd: [L1] LCP: rec'd Configure Request #1 (Req-Sent)
Dec  3 15:17:14 TEST mpd: [L1]   AUTHPROTO CHAP MSOFTv2
Dec  3 15:17:14 TEST mpd: [L1]   MAGICNUM 0x295a3f26
Dec  3 15:17:14 TEST mpd: [L1] LCP: SendConfigAck #1
Dec  3 15:17:14 TEST mpd: [L1]   AUTHPROTO CHAP MSOFTv2
Dec  3 15:17:14 TEST mpd: [L1]   MAGICNUM 0x295a3f26
Dec  3 15:17:14 TEST mpd: [L1] LCP: state change Req-Sent --> Ack-Sent
Dec  3 15:17:14 TEST mpd: [L1] LCP: rec'd Configure Reject #1 (Ack-Sent)
Dec  3 15:17:14 TEST mpd: [L1]   ACFCOMP
Dec  3 15:17:14 TEST mpd: [L1]   PROTOCOMP
Dec  3 15:17:14 TEST mpd: [L1]   MRU 1500
Dec  3 15:17:14 TEST mpd: [L1] LCP: SendConfigReq #2
Dec  3 15:17:14 TEST mpd: [L1]   MAGICNUM 0x1a2d6093
Dec  3 15:17:14 TEST mpd: [L1] LCP: rec'd Configure Ack #2 (Ack-Sent)
Dec  3 15:17:14 TEST mpd: [L1]   MAGICNUM 0x1a2d6093
Dec  3 15:17:14 TEST mpd: [L1] LCP: state change Ack-Sent --> Opened
Dec  3 15:17:14 TEST mpd: [L1] LCP: auth: peer wants CHAP, I want nothing
Dec  3 15:17:14 TEST mpd: [L1] LCP: LayerUp
Dec  3 15:17:14 TEST mpd: [L1] CHAP: rec'd CHALLENGE #1 len: 21
Dec  3 15:17:14 TEST mpd: [L1]   Name: ""
Dec  3 15:17:14 TEST mpd: [L1] CHAP: Using authname "mylogin"
Dec  3 15:17:14 TEST mpd: [L1] CHAP: sending RESPONSE #1 len: 61
Dec  3 15:17:14 TEST mpd: [L1] CHAP: rec'd SUCCESS #1 len: 46
Dec  3 15:17:14 TEST mpd: [L1]   MESG: S=E2737AE71D811EA91B068E7A046622EF11C00F1D
Dec  3 15:17:14 TEST mpd: [L1] LCP: authorization successful
Dec  3 15:17:14 TEST mpd: [L1] Link: Matched action 'bundle "B1" ""'
Dec  3 15:17:14 TEST mpd: [L1] Link: Join bundle "B1"
Dec  3 15:17:14 TEST mpd: [B1] Bundle: Status update: up 1 link, total bandwidth 64000 bps
Dec  3 15:17:14 TEST mpd: [B1] IPCP: Open event
Dec  3 15:17:14 TEST mpd: [B1] IPCP: state change Initial --> Starting
Dec  3 15:17:14 TEST mpd: [B1] IPCP: LayerStart
Dec  3 15:17:14 TEST mpd: [B1] IPCP: Up event
Dec  3 15:17:14 TEST mpd: [B1] IPCP: state change Starting --> Req-Sent
Dec  3 15:17:14 TEST mpd: [B1] IPCP: SendConfigReq #1
Dec  3 15:17:14 TEST mpd: [B1]   IPADDR 10.1.1.99
Dec  3 15:17:14 TEST mpd: [B1]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Dec  3 15:17:14 TEST mpd: [B1] IPCP: rec'd Terminate Ack #1 (Req-Sent)
Dec  3 15:17:16 TEST mpd: [B1] IPCP: SendConfigReq #2
Dec  3 15:17:16 TEST mpd: [B1]   IPADDR 10.1.1.99
Dec  3 15:17:16 TEST mpd: [B1]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Dec  3 15:17:16 TEST mpd: [B1] IPCP: rec'd Configure Request #1 (Req-Sent)
Dec  3 15:17:16 TEST mpd: [B1]   IPADDR 1.2.3.4
Dec  3 15:17:16 TEST mpd: [B1]     1.2.3.4 is OK
Dec  3 15:17:16 TEST mpd: [B1] IPCP: SendConfigAck #1
Dec  3 15:17:16 TEST mpd: [B1]   IPADDR 1.2.3.4
Dec  3 15:17:16 TEST mpd: [B1] IPCP: state change Req-Sent --> Ack-Sent
Dec  3 15:17:16 TEST mpd: [B1] IPCP: rec'd Configure Reject #2 (Ack-Sent)
Dec  3 15:17:16 TEST mpd: [B1]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Dec  3 15:17:16 TEST mpd: [B1] IPCP: SendConfigReq #3
Dec  3 15:17:16 TEST mpd: [B1]   IPADDR 10.1.1.99
Dec  3 15:17:16 TEST mpd: [B1] IPCP: rec'd Configure Nak #3 (Ack-Sent)
Dec  3 15:17:16 TEST mpd: [B1]   IPADDR 10.10.181.222
Dec  3 15:17:16 TEST mpd: [B1]     10.10.181.222 is OK
Dec  3 15:17:16 TEST mpd: [B1] IPCP: SendConfigReq #4
Dec  3 15:17:16 TEST mpd: [B1]   IPADDR 10.10.181.222
Dec  3 15:17:16 TEST mpd: [B1] IPCP: rec'd Configure Ack #4 (Ack-Sent)
Dec  3 15:17:16 TEST mpd: [B1]   IPADDR 10.10.181.222
Dec  3 15:17:16 TEST mpd: [B1] IPCP: state change Ack-Sent --> Opened
Dec  3 15:17:16 TEST mpd: [B1] IPCP: LayerUp
Dec  3 15:17:16 TEST mpd: [B1]   10.10.181.222 -> 1.2.3.4
Dec  3 15:17:16 TEST mpd: [B1] IFACE: Up event
Dec  3 15:18:14 TEST mpd: [L1] LCP: no reply to 1 echo request(s)
Dec  3 15:18:34 TEST mpd: [L1] LCP: no reply to 2 echo request(s)
Dec  3 15:18:54 TEST mpd: [L1] LCP: no reply to 3 echo request(s)
Dec  3 15:18:54 TEST mpd: [L1] LCP: peer not responding to echo requests
Dec  3 15:18:54 TEST mpd: [L1] LCP: state change Opened --> Stopping
Часовой пояс: UTC+03:00
Страница 1 из 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/