pfsense 连接不成功

anhilo commented 2 years ago

Checklist

[x] I read the README
[x] I read the Important notes
[x] I followed instructions to configure VPN clients
[x] I checked Troubleshooting and VPN status
[x] I searched existing Issues
[x] This bug is about the VPN setup scripts, and not IPsec VPN itself

Describe the issue A clear and concise description of what the bug is.

To Reproduce Steps to reproduce the behavior:

...
...

Expected behavior A clear and concise description of what you expected to happen.

Logs Check logs and VPN status, and add error logs to help explain the problem, if applicable.

Server (please complete the following information)

OS: [e.g. Debian 10]
Hosting provider (if applicable): [e.g. GCP, AWS]

Client (please complete the following information)

Device: [e.g. iPhone 8]
OS: [e.g. iOS 13.6]
VPN mode: [IPsec/L2TP, IPsec/XAuth ("Cisco IPsec") or IKEv2]

Additional context Add any other context about the problem here. 经过各种尝试，仍然连接不上docker环境下的ipsec ikev2 服务端，查看日志

Mar 15 20:39:05 | charon | 66922 | 06[ENC] parsed content of encrypted payload -- | -- | -- | -- Mar 15 20:39:05 | charon | 66922 | 06[ENC] insert decrypted payload of type NOTIFY at end of list Mar 15 20:39:05 | charon | 66922 | 06[ENC] verifying message structure Mar 15 20:39:05 | charon | 66922 | 06[ENC] found payload of type NOTIFY Mar 15 20:39:05 | charon | 66922 | 06[ENC] parsed IKE_AUTH response 1 [ N(AUTH_FAILED) ] Mar 15 20:39:05 | charon | 66922 | 06[IKE] received AUTHENTICATION_FAILED notify error Mar 15 20:39:05 | charon | 66922 | 06[CHD] CHILD_SA con100000{75} state change: CREATED => DESTROYING

qq1103491718 commented 2 years ago

你是今天连接不上的嘛？用的哪里的服务器阿里云的？

anhilo commented 2 years ago

不是今天，是今天测试使用。windows 机器使用p12的key能连。但是pfsense连接不上。不知道该如何配置。看了有routeros的配置方式，有点不一样，pfsense 导入一次证书，可以看到有ca和client的证书都包含。

qq1103491718 commented 2 years ago

不是今天，是今天测试使用。windows 机器使用p12的key能连。但是pfsense连接不上。不知道该如何配置。看了有routeros的配置方式，有点不一样，pfsense 导入一次证书，可以看到有ca和client的证书都包含。

你可以看一下日志，它总是尝试链接。你可以换一台服务器试一下，我换一台就好了不是设置的问题，估计看youtube流量太大被郭嘉墙检查到了，你觉得是设置的原因可以把脚本卸载了重装一下再去看一下日志。

anhilo commented 2 years ago

我用的是国内的机器。国内的网络连，应该不至于有墙的问题。pfsense你测试OK了么。能贴一下设置界面嘛。

anhilo commented 2 years ago

我又测试了一边，说下我的流程。 docker run \ --name ipsec-vpn-server \ --restart=always \ -v ikev2-vpn-data:/etc/ipsec.d \ -v /lib/modules:/lib/modules:ro \ -p 500:500/udp \ -p 4500:4500/udp \ -d --privileged \ hwdsl2/ipsec-vpn-server

在腾讯云机器上创建ipsec 服务，拿到vpnclient.p12 文件。上传到pfsense 证书管理界面 ipsec配置界面都是默认。在ipsec状态界面，还是无法连接 @qq1103491718

anhilo commented 2 years ago

https://github.com/hwdsl2/setup-ipsec-vpn/issues/930 根据这个解决了。

hwdsl2 / setup-ipsec-vpn

pfsense 连接不成功 #1131