LINUX.ORG.RU

Strongswan. establishing IKE_SA failed, peer not responding

 , ,


0

1

Всем привет. Поднял VPN на Lightsail То клиент подключается и обрывает связь.

Security Associations (0 up, 1 connecting):
       nat-t[1]: CONNECTING, server ip vpn[%any]...server ip vpn[%any]
       nat-t[1]: IKEv2 SPIs: ebcfe5da3eaa9544_i* 0000000000000000_r
       nat-t[1]: Tasks active: IKE_VENDOR IKE_INIT IKE_NATD IKE_CERT_PRE IKE_AUTH IKE_CERT_POST IKE_CONFIG CHILD_CREATE IKE_AUTH_LIFETIME IKE_MOBIKE
Connections:
       nat-t:  %any...server ip  IKEv2
       nat-t:   local:  [192.168.1.1] uses pre-shared key authentication
       nat-t:   remote: [server ip] uses pre-shared key authentication
       nat-t:   child:  dynamic === 10.10.10.0/24 TUNNEL

В логе клиента через некоторое время ошибка. Пакеты вроде гуляют.

Aug 21 16:15:44 syslog: 06[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Aug 21 16:15:44 syslog: 06[NET] sending packet: from home inet[500] to server ip[500] (758 bytes)
Aug 21 16:15:48 syslog: 08[IKE] retransmit 1 of request with message ID 0
Aug 21 16:15:48 syslog: 08[NET] sending packet: from home inet[500] to server ip[500] (758 bytes)
Aug 21 16:15:55 syslog: 09[IKE] retransmit 2 of request with message ID 0
Aug 21 16:15:55 syslog: 09[NET] sending packet: from home inet[500] to server ip[500] (758 bytes)
Aug 21 16:16:08 syslog: 10[IKE] retransmit 3 of request with message ID 0
Aug 21 16:16:08 syslog: 10[NET] sending packet: from home inet[500] to server ip[500] (758 bytes)
Aug 21 16:16:31 syslog: 12[IKE] retransmit 4 of request with message ID 0
Aug 21 16:16:31 syslog: 12[NET] sending packet: from home inet[500] to server ip[500] (758 bytes)
Aug 21 16:17:13 syslog: 13[IKE] retransmit 5 of request with message ID 0
Aug 21 16:17:13 syslog: 13[NET] sending packet: from home inet[500] to server ip[500] (758 bytes)
Aug 21 16:18:29 syslog: 14[IKE] giving up after 5 retransmits
Aug 21 16:18:29 syslog: 14[IKE] establishing IKE_SA failed, peer not responding

nat-t: local: [192.168.1.1] uses pre-shared key authentication

nat-t: remote: [server ip] uses pre-shared key authentication

server ip ожидает vpn соединение от 192.168.1.1? Или может от какого-то внешнего ip?

yumko ★★ ()