🚀 go-pugleaf

Pojawił mi się kolejny problem. Mianowicie jak "obciąże" tunel to zrywa
mi ppp xl2tp.
Gdy nie robię nic "wielkiego", zwykłe pingowanie, ssh, przeglądanie
stron to tunel jest trzymany. wystarczy że wejdę na zasób smb i zacznę
ściągać jakiś większy plik. zaciągnie kilka mega i połączeni ppp zaczyna
wisieć. to mówi log:

#v+
marcin@pat:~$ sudo tail -f /var/log/daemon.log | egrep "xl2tp|ppp"




Apr 19 10:47:03 pat xl2tpd[31371]: xl2tpd version xl2tpd-1.2.0 started
on vpn.domain.pl PID:31371

Apr 19 10:47:03 pat xl2tpd[31371]: Written by Mark Spencer, Copyright
(C) 1998, Adtran, Inc.

Apr 19 10:47:03 pat xl2tpd[31371]: Forked by Scott Balmos and David
Stipp, (C) 2001

Apr 19 10:47:03 pat xl2tpd[31371]: Inherited by Jeff McAdams, (C) 2002


Apr 19 10:47:03 pat xl2tpd[31371]: Forked again by Xelerance
(www.xelerance.com) (C) 2006

Apr 19 10:47:03 pat xl2tpd[31371]: Listening on IP address 1.1.1.1, port
1701

Apr 19 10:47:29 pat xl2tpd[31371]: control_finish: Peer requested tunnel
8 twice, ignoring second one.

Apr 19 10:47:29 pat xl2tpd[31371]: Connection established to
32.11.234.22, 1701.  Local: 10091, Remote: 8 (ref=0/0).  LNS session is
'default'
Apr 19 10:47:29 pat xl2tpd[31371]: start_pppd: I'm running:


Apr 19 10:47:29 pat xl2tpd[31371]: "/usr/sbin/pppd"


Apr 19 10:47:29 pat xl2tpd[31371]: "passive"


Apr 19 10:47:29 pat xl2tpd[31371]: "-detach"


Apr 19 10:47:29 pat xl2tpd[31371]: "172.21.7.1:172.21.7.230"


Apr 19 10:47:29 pat xl2tpd[31371]: "auth"
Apr 19 10:47:29 pat xl2tpd[31371]: "require-chap"
Apr 19 10:47:29 pat xl2tpd[31371]: "name"
Apr 19 10:47:29 pat xl2tpd[31371]: "ipsec"
Apr 19 10:47:29 pat xl2tpd[31371]: "debug"
Apr 19 10:47:29 pat xl2tpd[31371]: "file"
Apr 19 10:47:29 pat xl2tpd[31371]: "/etc/ppp/options.l2tpd"
Apr 19 10:47:29 pat xl2tpd[31371]: "/dev/pts/1"
Apr 19 10:47:29 pat xl2tpd[31371]: Call established with 32.11.234.22,
Local: 11598, Remote: 1, Serial: 0
Apr 19 10:49:34 pat xl2tpd[31371]: Maximum retries exceeded for tunnel
10091.  Closing.
Apr 19 10:49:34 pat xl2tpd[31371]: Trustingly terminating pppd: sending
TERM signal to pid 31653
Apr 19 10:49:34 pat xl2tpd[31371]: pppd 31653 successfully terminated
Apr 19 10:49:34 pat xl2tpd[31371]: Connection 8 closed to 32.11.234.22,
port 1701 (Timeout)
Apr 19 10:49:35 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:35 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:36 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:36 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:37 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:37 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:37 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:38 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:38 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:38 pat xl2tpd[31371]: get_call: can't find call 11598 in
tunnel 10091#012 (ref=0/0)
Apr 19 10:49:39 pat xl2tpd[31371]: Unable to deliver closing message for
tunnel 10091. Destroying anyway.
Apr 19 10:49:39 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:39 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet.  call = 11598, tunnel = 10091 Dumping.
Apr 19 10:49:39 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:39 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet.  call = 11598, tunnel = 10091 Dumping.
Apr 19 10:49:40 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:40 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet.  call = 11598, tunnel = 10091 Dumping.
Apr 19 10:49:40 pat xl2tpd[31371]: Can not find tunnel 10091 (refhim=0)
Apr 19 10:49:40 pat xl2tpd[31371]: network_thread: unable to find call
or tunnel to handle packet.  call = 11598, tunnel = 10091 Dumping.
#v-

host 1.1.1.1 to host na którym jest serwer vpn. Jak widać, gdzy zacząłem
kopiować tunel przestał działać Maximum retries exceeded for tunnel
10091.  Closing.. Ktoś wie dlaczego?

oto teraźniejsza konfiguracja ipsec i xl2tpd

#v+
marcin@pat:~$ cat /etc/xl2tpd/xl2tpd.conf
 [global]

 port = 1701
 listen-addr = 1.1.1.1







 [lns default]
 ip range = 172.21.7.230-172.21.7.240
 local ip = 172.21.7.1
 require chap = yes
 require authentication = yes
 name = ipsec
 ppp debug = yes
 pppoptfile = /etc/ppp/options.l2tpd


marcin@pat:~$ cat /etc/ppp/options.l2tpd
ipcp-accept-local
ipcp-accept-remote
require-mschap-v2
auth
proxyarp
idle 1800
mtu 1400
mru 1400
ms-dns 8.8.8.8

marcin@pat:~$ cat /etc/ipsec.conf

version 2.0     # conforms to second version of ipsec.conf specification

config setup
        nat_traversal=yes

virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!172.21.7.0/24
        nhelpers=0
        protostack=netkey
#       plutodebug=all

# Add connections here


conn PUBLIC-PSK-PRIVATE-NAT
    rightsubnet=vhost:%priv
    also=L2TP-PSK-CLIENTS


conn L2TP-PSK-CLIENTS
        authby=secret
        pfs=no
        auto=add
        keyingtries=3
        rekey=no
#       type=transport
        type=tunnel
        left=1.1.1.1
        leftprotoport=17/1701
        right=%any
        rightprotoport=17/%any
        dpddelay=40
        dpdtimeout=130
        dpdaction=clear

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
#v-

proszę o podpowiedzi. z góry dzięki.




-- 
MaRc
Nie kłóć się z idiotą. Będziesz musiał zniżyć się do jego poziomu a
wówczas pobije cię swoimi argumentami.