Доброе утро всем (или другое время суток))
Такая ситуация, около полугода назад на рабочий ноутбук был установлен Альт Рабочая станция 10.1.
Тогда же было настроено vpn-соединение для удаленного рабочего стола с офисным компом. Настроено штатными средствами GUI: в Сетевых соединениях создано новое в папке VPN, заданы Аутентификация пользователя с паролем, и в настройках IPsec Pre-shared key (PSK), в настройках PPP выбрано PAP и проставлены флажки кроме шифрования.
Всё это делалось под руководством специалиста, в смысл действий я не вдавался.
Полгода всё успешно работало, а сегодня перестало. Нажимаешь на значок соединения в трее, выбираешь там свое соединение ,как обычно там что-то крутится, потом перестает крутиться, но замочек не появляется, соединение VPN не устанавливается, при этом никаких сообщений об ошибке не всплывает.
Админы божатся, что ничего на их стороне не менялось, но в Линуксе не шарят. А специалист, который всё настраивал, у нас больше не работает )
Хотелось бы совета, как провести диагностику соединения VPN, понять хотя бы почему не происходит собственно соединение, что нужно ввести в командной строке, или в каком логе что искать. Честно гуглил целый час и ничего не нашел похожего по этой теме, в приложении к моим реалиям, только какие-то древности и с совсем другими проблемами )
UPD: нашёл логи через journalctl, но осмыслить их не в состоянии )
Спойлер
ноя 10 10:56:30 hpbluenote NetworkManager[3151]: <info> [1668066990.6433] audit: op="connection-activate" uuid="b8966895-6468-48bb-8fa0-2c07415867ad" name="MyVPN" pid=3787 uid=500 result="success"
ноя 10 10:56:30 hpbluenote NetworkManager[3151]: <info> [1668066990.6518] vpn-connection[0x55fc69d6e4f0,b8966895-6468-48bb-8fa0-2c07415867ad,"Pinegina4",0]: Started the VPN service, PID 7671
ноя 10 10:56:30 hpbluenote NetworkManager[3151]: <info> [1668066990.6665] vpn-connection[0x55fc69d6e4f0,b8966895-6468-48bb-8fa0-2c07415867ad,"Pinegina4",0]: Saw the service appear; activating connection
ноя 10 10:56:35 hpbluenote polkit-agent-helper-1[7674]: pam_tcb(polkit-1:auth): Authentication passed for ae from ae(uid=500)
ноя 10 10:56:36 hpbluenote polkitd[3066]: Operator of unix-session:3 successfully authenticated as unix-user:ae to gain TEMPORARY authorization for action org.freedesktop.NetworkManager.settings.modify.system for unix-process:3787:6152 [>
ноя 10 10:56:36 hpbluenote NetworkManager[3151]: <info> [1668066996.5595] vpn-connection[0x55fc69d6e4f0,b8966895-6468-48bb-8fa0-2c07415867ad,"MyVPN",0]: VPN connection: (ConnectInteractive) reply received
ноя 10 10:56:36 hpbluenote nm-l2tp-service[7671]: Check port 1701
ноя 10 10:56:36 hpbluenote NetworkManager[7693]: Stopping strongSwan IPsec failed: starter is not running
ноя 10 10:56:38 hpbluenote NetworkManager[7690]: Starting strongSwan 5.9.6 IPsec [starter]...
ноя 10 10:56:38 hpbluenote NetworkManager[7690]: Loading config setup
ноя 10 10:56:38 hpbluenote NetworkManager[7690]: Loading conn 'b8966895-6468-48bb-8fa0-2c07415867ad'
ноя 10 10:56:38 hpbluenote ipsec_starter[7690]: Starting strongSwan 5.9.6 IPsec [starter]...
ноя 10 10:56:38 hpbluenote ipsec_starter[7690]: Loading config setup
ноя 10 10:56:38 hpbluenote ipsec_starter[7690]: Loading conn 'b8966895-6468-48bb-8fa0-2c07415867ad'
ноя 10 10:56:38 hpbluenote ipsec_starter[7701]: Attempting to start charon...
ноя 10 10:56:38 hpbluenote charon[7702]: 00[DMN] Starting IKE charon daemon (strongSwan 5.9.6, Linux 5.10.82-std-def-alt1, x86_64)
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] PKCS11 module '<name>' lacks library path
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loading ca certificates from '/etc/strongswan/ipsec.d/cacerts'
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loading aa certificates from '/etc/strongswan/ipsec.d/aacerts'
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loading ocsp signer certificates from '/etc/strongswan/ipsec.d/ocspcerts'
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loading attribute certificates from '/etc/strongswan/ipsec.d/acerts'
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loading crls from '/etc/strongswan/ipsec.d/crls'
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loading secrets from '/etc/strongswan/ipsec.secrets'
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loading secrets from '/etc/strongswan/ipsec.d/ipsec.nm-l2tp.secrets'
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loaded IKE secret for %any
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] loaded 0 RADIUS server configurations
ноя 10 10:56:38 hpbluenote charon[7702]: 00[CFG] HA config misses local/remote address
ноя 10 10:56:38 hpbluenote charon[7702]: 00[LIB] loaded plugins: charon ldap pkcs11 aes des rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs12 pgp dnskey sshkey pem openssl pkcs8 fips-prf gmp curve2>
ноя 10 10:56:38 hpbluenote charon[7702]: 00[LIB] dropped capabilities, running as uid 0, gid 0
ноя 10 10:56:38 hpbluenote charon[7702]: 00[JOB] spawning 16 worker threads
ноя 10 10:56:38 hpbluenote ipsec_starter[7701]: charon (7702) started after 60 ms
ноя 10 10:56:38 hpbluenote charon[7702]: 06[CFG] received stroke: add connection 'b8966895-6468-48bb-8fa0-2c07415867ad'
ноя 10 10:56:38 hpbluenote charon[7702]: 06[CFG] added configuration 'b8966895-6468-48bb-8fa0-2c07415867ad'
ноя 10 10:56:39 hpbluenote charon[7702]: 09[CFG] rereading secrets
ноя 10 10:56:39 hpbluenote charon[7702]: 09[CFG] loading secrets from '/etc/strongswan/ipsec.secrets'
ноя 10 10:56:39 hpbluenote charon[7702]: 09[CFG] loading secrets from '/etc/strongswan/ipsec.d/ipsec.nm-l2tp.secrets'
ноя 10 10:56:39 hpbluenote charon[7702]: 09[CFG] loaded IKE secret for %any
ноя 10 10:56:39 hpbluenote charon[7702]: 11[CFG] received stroke: initiate 'b8966895-6468-48bb-8fa0-2c07415867ad'
ноя 10 10:56:39 hpbluenote charon[7702]: 13[IKE] initiating Main Mode IKE_SA b8966895-6468-48bb-8fa0-2c07415867ad[1] to 78.37.74.35
ноя 10 10:56:39 hpbluenote charon[7702]: 13[IKE] initiating Main Mode IKE_SA b8966895-6468-48bb-8fa0-2c07415867ad[1] to 78.37.74.35
ноя 10 10:56:39 hpbluenote charon[7702]: 13[ENC] generating ID_PROT request 0 [ SA V V V V V ]
ноя 10 10:56:39 hpbluenote charon[7702]: 13[NET] sending packet: from 192.168.236.55[500] to 78.37.74.35[500] (532 bytes)
ноя 10 10:56:39 hpbluenote charon[7702]: 14[NET] received packet: from 78.37.74.35[500] to 192.168.236.55[500] (256 bytes)
ноя 10 10:56:39 hpbluenote charon[7702]: 14[ENC] parsed ID_PROT response 0 [ SA V V V V V V V V V ]
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received NAT-T (RFC 3947) vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received draft-ietf-ipsec-nat-t-ike-02 vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received draft-ietf-ipsec-nat-t-ike-00 vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received FRAGMENTATION vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received DPD vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[IKE] received XAuth vendor ID
ноя 10 10:56:39 hpbluenote charon[7702]: 14[ENC] received unknown vendor ID: 03:10:17:e0:7f:7a:82:e3:aa:69:50:c9:99:99:01:01
ноя 10 10:56:39 hpbluenote charon[7702]: 14[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
ноя 10 10:56:39 hpbluenote charon[7702]: 14[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
ноя 10 10:56:39 hpbluenote charon[7702]: 14[NET] sending packet: from 192.168.236.55[500] to 78.37.74.35[500] (372 bytes)
ноя 10 10:56:39 hpbluenote charon[7702]: 15[NET] received packet: from 78.37.74.35[500] to 192.168.236.55[500] (372 bytes)
ноя 10 10:56:39 hpbluenote charon[7702]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
ноя 10 10:56:39 hpbluenote charon[7702]: 15[IKE] local host is behind NAT, sending keep alives
ноя 10 10:56:39 hpbluenote charon[7702]: 15[IKE] remote host is behind NAT
ноя 10 10:56:39 hpbluenote charon[7702]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
ноя 10 10:56:39 hpbluenote charon[7702]: 15[NET] sending packet: from 192.168.236.55[4500] to 78.37.74.35[4500] (76 bytes)
ноя 10 10:56:43 hpbluenote charon[7702]: 06[IKE] sending retransmit 1 of request message ID 0, seq 3
ноя 10 10:56:43 hpbluenote charon[7702]: 06[NET] sending packet: from 192.168.236.55[4500] to 78.37.74.35[4500] (76 bytes)
ноя 10 10:56:49 hpbluenote NetworkManager[7742]: Stopping strongSwan IPsec...
ноя 10 10:56:49 hpbluenote charon[7702]: 00[DMN] SIGINT received, shutting down
ноя 10 10:56:49 hpbluenote charon[7702]: 00[IKE] destroying IKE_SA in state CONNECTING without notification
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: initiating Main Mode IKE_SA b8966895-6468-48bb-8fa0-2c07415867ad[1] to 78.37.74.35
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: generating ID_PROT request 0 [ SA V V V V V ]
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: sending packet: from 192.168.8.55[500] to 78.37.74.35[500] (532 bytes)
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received packet: from 78.37.74.35[500] to 192.168.236.55[500] (256 bytes)
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: parsed ID_PROT response 0 [ SA V V V V V V V V V ]
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received NAT-T (RFC 3947) vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received draft-ietf-ipsec-nat-t-ike-03 vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received draft-ietf-ipsec-nat-t-ike-02 vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received draft-ietf-ipsec-nat-t-ike-00 vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received FRAGMENTATION vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received DPD vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received XAuth vendor ID
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received unknown vendor ID: 03:10:17:e0:7f:7a:82:e3:aa:69:50:c9:99:99:01:01
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: sending packet: from 192.168.236.55[500] to 78.37.74.35[500] (372 bytes)
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: received packet: from 78.37.74.35[500] to 192.168.236.55[500] (372 bytes)
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: local host is behind NAT, sending keep alives
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: remote host is behind NAT
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: generating ID_PROT request 0 [ ID HASH ]
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: sending packet: from 192.168.236.55[4500] to 78.37.74.35[4500] (76 bytes)
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: sending retransmit 1 of request message ID 0, seq 3
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: sending packet: from 192.168.236.55[4500] to 78.37.74.35[4500] (76 bytes)
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: destroying IKE_SA in state CONNECTING without notification
ноя 10 10:56:49 hpbluenote NetworkManager[7741]: establishing connection 'b8966895-6468-48bb-8fa0-2c07415867ad' failed
ноя 10 10:56:49 hpbluenote ipsec_starter[7701]: child 7702 (charon) has quit (exit code 0)
ноя 10 10:56:49 hpbluenote ipsec_starter[7701]:
ноя 10 10:56:49 hpbluenote ipsec_starter[7701]: charon stopped after 200 ms
ноя 10 10:56:49 hpbluenote ipsec_starter[7701]: ipsec starter stopped
ноя 10 10:56:49 hpbluenote nm-l2tp-service[7671]: g_dbus_method_invocation_take_error: assertion 'error != NULL' failed
ноя 10 10:56:49 hpbluenote NetworkManager[3151]: <info> [1668067009.8776] vpn-connection[0x55fc69d6e4f0,b8966895-6468-48bb-8fa0-2c07415867ad,"MyVPN",0]: VPN plugin: state changed: stopped (6)
ноя 10 10:56:49 hpbluenote NetworkManager[3151]: <info> [1668067009.8799] vpn-connection[0x55fc69d6e4f0,b8966895-6468-48bb-8fa0-2c07415867ad,"MyVPN",0]: VPN service disappeared
ноя 10 10:56:49 hpbluenote NetworkManager[3151]: <warn> [1668067009.8801] vpn-connection[0x55fc69d6e4f0,b8966895-6468-48bb-8fa0-2c07415867ad,"MyVPN",0]: VPN connection: failed to connect: 'Message recipient disconnected from message>
UPD2: вопрос решился сменой IP, похоже мой утренний IP оказалася в каком-то черном списке...
