You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by GitBox <gi...@apache.org> on 2018/12/01 03:55:14 UTC
[GitHub] msinhore opened a new issue #3071: strongswan - error during user
VPN connection
msinhore opened a new issue #3071: strongswan - error during user VPN connection
URL: https://github.com/apache/cloudstack/issues/3071
##### ISSUE TYPE
* Bug Report
##### COMPONENT NAME
~~~
IPsec VPN Client
~~~
##### CLOUDSTACK VERSION
~~~
4.11.2.0
~~~
##### CONFIGURATION
* Official ACS 4.11.2.0 systemvm template
* Official packages
##### OS / ENVIRONMENT
* CentOS 7
##### SUMMARY
The mgmt servers has been upgraded from 4.9.3 to 4.11.2.0 following the steps at: http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.11/upgrade/upgrade-4.11.html. The user VPN has been configured in VPC inside a project.
Tested with:
* Native MacOS VPN L2TP over IPSEC with pre-shared key.
* Windows 10 VPN client.
##### STEPS TO REPRODUCE
<!--
For bugs, show exactly how to reproduce the problem, using a minimal test-case. Use Screenshots if accurate.
For new features, show how the feature would be used.
-->
##### EXPECTED RESULTS
~~~
Connection established between client and server.
~~~
##### ACTUAL RESULTS
<!-- What actually happened? -->
<!-- Paste verbatim command output between quotes below -->
~~~
* VR /var/log/daemon.log file.
Dec 1 02:38:07 systemvm charon: 08[IKE] received draft-ietf-ipsec-nat-t-ike-06 vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] received draft-ietf-ipsec-nat-t-ike-05 vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] received draft-ietf-ipsec-nat-t-ike-04 vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] received draft-ietf-ipsec-nat-t-ike-02 vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] received FRAGMENTATION vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] received DPD vendor ID
Dec 1 02:38:07 systemvm charon: 08[IKE] 177.148.141.98 is initiating a Main Mode IKE_SA
Dec 1 02:38:07 systemvm charon: 08[ENC] generating ID_PROT response 0 [ SA V V V V ]
Dec 1 02:38:07 systemvm charon: 08[NET] sending packet: from 186.250.95.140[500] to 177.148.141.98[500] (160 bytes)
Dec 1 02:38:07 systemvm charon: 09[NET] received packet: from 177.148.141.98[500] to 186.250.95.140[500] (380 bytes)
Dec 1 02:38:07 systemvm charon: 09[ENC] parsed ID_PROT request 0 [ KE No NAT-D NAT-D ]
Dec 1 02:38:07 systemvm charon: 09[IKE] remote host is behind NAT
Dec 1 02:38:07 systemvm charon: 09[ENC] generating ID_PROT response 0 [ KE No NAT-D NAT-D ]
Dec 1 02:38:07 systemvm charon: 09[NET] sending packet: from 186.250.95.140[500] to 177.148.141.98[500] (396 bytes)
Dec 1 02:38:07 systemvm charon: 10[NET] received packet: from 177.148.141.98[4500] to 186.250.95.140[4500] (108 bytes)
Dec 1 02:38:07 systemvm charon: 10[ENC] invalid ID_V1 payload length, decryption failed?
Dec 1 02:38:07 systemvm charon: 10[ENC] could not decrypt payloads
Dec 1 02:38:07 systemvm charon: 10[IKE] message parsing failed
Dec 1 02:38:07 systemvm charon: 10[ENC] generating INFORMATIONAL_V1 request 2722112150 [ HASH N(PLD_MAL) ]
Dec 1 02:38:07 systemvm charon: 10[NET] sending packet: from 186.250.95.140[500] to 177.148.141.98[500] (92 bytes)
Dec 1 02:38:07 systemvm charon: 10[IKE] ID_PROT request with message ID 0 processing failed
~~~
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services