• Home
  • Categories
  • WIKI
  • LANGUAGE: en
    • Deepin VPN采用Strongswan方式链接未知错误？
    Experiences and Insight 2177 views · 7 replies ·
    Tofloor
    poster avatar
    liujunhongz
    deepin
    2018-02-11 23:50
    Author
    1. 2月 11 15:47:54 deepin NetworkManager[412]:   [1518335274.3186] keyfile: update /etc/NetworkManager/system-connections/ipsec (59a04b33-2e33-4e47-86ea-07b369e3da65,"ipsec")
    2. 2月 11 15:47:54 deepin NetworkManager[412]:   [1518335274.3192] audit: op="connection-update" uuid="59a04b33-2e33-4e47-86ea-07b369e3da65" name="ipsec" args="vpn.secrets" pid=1077 uid=1000 result="success"
    3. 2月 11 15:47:54 deepin NetworkManager[412]:   [1518335274.3364] audit: op="connection-activate" uuid="59a04b33-2e33-4e47-86ea-07b369e3da65" name="ipsec" pid=1077 uid=1000 result="success"
    4. 2月 11 15:47:54 deepin NetworkManager[412]:   [1518335274.3420] vpn-connection[0x56027cf1a2b0,59a04b33-2e33-4e47-86ea-07b369e3da65,"ipsec",0]: Saw the service appear; activating connection
    5. 2月 11 15:47:54 deepin charon-nm[1771]: 04[CFG] received initiate for NetworkManager connection ipsec
    6. 2月 11 15:47:54 deepin charon-nm[1771]: 04[CFG] using CA certificate, gateway identity '[server addr]'
    7. 2月 11 15:47:54 deepin charon-nm[1771]: 04[IKE] initiating IKE_SA ipsec[18] to [server addr]
    8. 2月 11 15:47:54 deepin charon-nm[1771]: 04[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
    9. 2月 11 15:47:54 deepin charon-nm[1771]: 04[NET] sending packet: from 192.168.0.102[47099] to [server addr][500] (728 bytes)
    10. 2月 11 15:47:54 deepin NetworkManager[412]:   [1518335274.3938] vpn-connection[0x56027cf1a2b0,59a04b33-2e33-4e47-86ea-07b369e3da65,"ipsec",0]: VPN plugin: state changed: starting (3)
    11. 2月 11 15:47:54 deepin charon-nm[1771]: 06[NET] received packet: from [server addr][500] to 192.168.0.102[47099] (38 bytes)
    12. 2月 11 15:47:54 deepin charon-nm[1771]: 06[ENC] parsed IKE_SA_INIT response 0 [ N(INVAL_KE) ]
    13. 2月 11 15:47:54 deepin charon-nm[1771]: 06[IKE] peer didn't accept DH group MODP_3072, it requested MODP_2048
    14. 2月 11 15:47:54 deepin charon-nm[1771]: 06[IKE] initiating IKE_SA ipsec[18] to server addr
    15. 2月 11 15:47:54 deepin charon-nm[1771]: 06[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
    16. 2月 11 15:47:54 deepin charon-nm[1771]: 06[NET] sending packet: from 192.168.0.102[47099] to [server addr][500] (600 bytes)
    17. 2月 11 15:47:54 deepin charon-nm[1771]: 07[NET] received packet: from [server addr][500] to 192.168.0.102[47099] (481 bytes)
    Copy the Code

    认证方式采用的是：EAP
    Reply Favorite View the author
    All Replies
    avatar
    187******12
    deepin
    2018-02-12 05:07
    #1
    vpn問題一直無法解決
    Reply View the author
    avatar
    zqx1102023883
    deepin
    2018-02-12 10:25
    #2
    cyberhero 发表于 2018-2-11 21:07
    vpn問題一直無法解決

    为什么无法解决？
    Reply View the author
    avatar
    187******12
    deepin
    2018-02-12 17:35
    #3
    https://bbs.deepin.org/post/153172
    为什么无法解决？

    可能黨政軍這方面需求不大
    Reply View the author
    avatar
    187******12
    deepin
    2018-02-12 17:53
    #4
    ipsec/l2tp vpn跨系統兼容性不好，很多vpn server用的是商業防火牆，動輒幾萬塊，深度不可能買來研究適配
    Reply View the author
    avatar
    iminto
    deepin
    2018-02-13 00:18
    #5
    要用VPN就用Windows吧
    Reply View the author
    avatar
    liujunhongz
    deepin
    2018-02-18 00:33
    #6
    https://bbs.deepin.org/post/153172
    要用VPN就用Windows吧

    windows有，但是环境没有linux好用
    Reply View the author
    avatar
    wxz_1992
    deepin
    2018-10-07 07:54
    #7
    兄弟，你这个问题解决了吗，我用IKev2，EAP，提示未知错误。而且不知道这个的日志在哪里
    Reply View the author