You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Hi Guys,
I'm having some issues with Strongswan. The VPN connectivity just stopped working without any changes. see logs below:
Connections:
vpn-c: 194.83.1....194.83.2 IKEv2, dpddelay=30s
vpn-c: local: [194.83.1..] uses pre-shared key authentication
vpn-c: remote: [10.17.66.18] uses pre-shared key authentication
vpn-c: child: 0.0.0.0/0 === 10.17.128.0/18 TUNNEL, dpdaction=restart
vpn-on: 194.83.1...81.130.2. IKEv1, dpddelay=30s
vpn-on: local: [194.83.1] uses pre-shared key authentication
vpn-on: remote: [81.130.2.] uses pre-shared key authentication
vpn-on: child: 10.0.0.0/8 === 10.17.2.0/24 TUNNEL, dpdaction=restart
vpn-l: 194.83.1...81.130.1. IKEv1, dpddelay=30s
vpn-l: local: [194.83.1.] uses pre-shared key authentication
vpn-l: remote: [81.130.1.] uses pre-shared key authentication
vpn-l: child: 0.0.0.0/0 === 10.17.1.0/24 TUNNEL, dpdaction=restart
vpn-m: 194.83.1...81.149.5. IKEv1, dpddelay=30s
vpn-m: local: [194.83.1] uses pre-shared key authentication
vpn-m: remote: [81.149.5.] uses pre-shared key authentication
vpn-m: child: 0.0.0.0/0 === 10.17.0.0/16 TUNNEL, dpdaction=restart
Security Associations (0 up, 4 connecting):
vpn-m[4]: CONNECTING, 194.83.1[%any]...81.149.5.[%any]
vpn-m[4]: IKEv1 SPIs: 8b1d5ef19c8fdac5_i* 0000000000000000_r
vpn-m[4]: Tasks queued: QUICK_MODE
vpn-m[4]: Tasks active: ISAKMP_VENDOR ISAKMP_CERT_PRE MAIN_MODE ISAKMP_CERT_POST ISAKMP_NATD
vpn-l[3]: CONNECTING, 194.83.1[%any]...81.130.1.[%any]
vpn-l[3]: IKEv1 SPIs: 250fd8513d59eb9b_i* 0000000000000000_r
vpn-l[3]: Tasks queued: QUICK_MODE
vpn-l[3]: Tasks active: ISAKMP_VENDOR ISAKMP_CERT_PRE MAIN_MODE ISAKMP_CERT_POST ISAKMP_NATD
vpn-on[2]: CONNECTING, 194.83.1[%any]...81.130.2.[%any]
vpn-on[2]: IKEv1 SPIs: 8c2907ecc59600ab_i* 0000000000000000_r
vpn-on[2]: Tasks queued: QUICK_MODE
vpn-on[2]: Tasks active: ISAKMP_VENDOR ISAKMP_CERT_PRE MAIN_MODE ISAKMP_CERT_POST ISAKMP_NATD
vpn-c[1]: CONNECTING, 194.83.1[%any]...194.83.2.[%any]
vpn-c[1]: IKEv2 SPIs: 1815ec8f849ae2dd_i* 0000000000000000_r
vpn-c[1]: Tasks active: IKE_VENDOR IKE_INIT IKE_NATD IKE_CERT_PRE IKE_AUTH IKE_CERT_POST IKE_CONFIG CHILD_CREATE IKE_AUTH_LIFETIME IKE_MOBIKE
And also checking the Journalctl log:
charon[725]: 15[IKE] sending DPD request
charon[725]: 15[ENC] generating INFORMATIONAL_V1 request 1508109817 [ HASH N(DPD) ]
charon[725]: 15[NET] sending packet: from 194.83.1.[500] to 81.130.1.[500] (108 bytes)
charon[725]: 13[KNL] 194.83.1. disappeared from eth0
charon[725]: 16[KNL] interface eth0 deactivated
charon[725]: 06[KNL] fe80::250:56ff:fe83:1cfa disappeared from eth0
charon[725]: 13[KNL] 127.0.0.1 disappeared from lo
charon[725]: 16[KNL] ::1 disappeared from lo
charon[725]: 06[KNL] interface lo deactivated
charon[725]: 06[KNL] interface lo activated
charon[725]: 07[KNL] 127.0.0.1 appeared on lo
charon[725]: 12[KNL] ::1 appeared on lo
charon[725]: 14[KNL] interface eth0 activated
charon[725]: 07[KNL] received netlink error: Network is unreachable (101)
charon[725]: 07[KNL] received netlink error: Network is unreachable (101)
charon[725]: 11[KNL] fe80::250:56ff:fe83:1cfa appeared on eth0
charon[725]: 16[KNL] received netlink error: Network is unreachable (101).
Please can anyone point me in the right direction to the solution?
Beta Was this translation helpful? Give feedback.
All reactions