☰

IPsec 冲突新裸分流错误

tag-icon • tag-icon ipsec
IPsec 冲突新裸分流错误

在 RHEL-8 上使用 Libreswan 版本 4.3 时，IPsec 阻止了所有流量，我收到了以下日志。

我该如何解决现有连接实例和冲突的现有裸分流器的错误？任何帮助都非常感谢。

ignoring found existing connection instance\"private#100.120.0.0/16\"[36] ...100.120.0.120 that covers kernel acquire with IKE state #0 and IPsec state #0 - due to duplicate acquire?
\"private#111.111.0.0/16\"[36] ... 111.111.111.111 #66: STATE_PARENT_I1: retransmission: will wait 10 seconds for response
\"private#111.111.0.0/16\"[36] ... 111.111.111.111 #65: deleting state (STATE_PARENT_I1) aged 55.55s and NOT sending notification
\"private#111.111.0.0/16\"[36] ... 111.111.111.111 #66: STATE_PARENT_I1: 60 second timeout exceeded after 7 transmits. No response (or no acceptable response) to our first IKEv2 message
Conflicting new bare shunt 0x7564849abc123 111.111.111.111/32:0 --0-->111.111.111.111/32:0 => %hold 0    oe-negotiating
CONFLICTING existing bare shunt 0x7564849abc123 111.111.111.111/32:0 --0-->111.111.111.111/32:0 =>%drop 0    oe-falling"

相关内容