我刚刚在 Debian 6.0 上安装了 OpenSwan,并根据本教程进行了配置:http://confoundedtech.blogspot.co.uk/2011/08/android-nexus-one-ipsec-psk-vpn-with.html 有许多类似的文档,尽管我更改了一些参数,但当我尝试使用 Iphone 作为 VPN 客户端使用 L2TP 进行连接时,总是会出现 xl2tpd 的以下错误:
Apr 22 16:31:25 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 32857, call = 10067 ref=0 refhim=0
Apr 22 16:31:25 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet. call = 10067, tunnel = 32857 Dumping.
Apr 22 16:37:52 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:37:52 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet. call = 50076, tunnel = 33015 Dumping.
Apr 22 16:37:54 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:37:54 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet. call = 50076, tunnel = 33015 Dumping.
Apr 22 16:37:57 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:37:57 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet. call = 50076, tunnel = 33015 Dumping.
Apr 22 16:38:00 debian xl2tpd[19713]: network_thread: recv packet from 212.183.140.62, size = 476, tunnel = 33015, call = 50076 ref=0 refhim=0
Apr 22 16:38:00 debian xl2tpd[19713]: network_thread: unable to find call or tunnel to handle packet. call = 50076, tunnel = 33015 Dumping.
这是我的 xl2tpd 配置:
[global]
listen-addr=192.168.0.148
port=1701
debug tunnel=yes
debug avp=yes
debug packet=yes
debug network=yes
debug state=yes
[lns default]
ip range = 192.168.0.220-192.168.0.230
local ip = 192.168.0.148
require chap = yes
require authentication = yes
refuse pap = yes
ppp debug = yes
length bit = yes
pppoptfile = /etc/xl2tpd/ppp-options.xl2tpd
这是我的 ppt-options.xl2tpd 文件:
ipcp-accept-local
ipcp-accept-remote
noccp
auth
#crtscts
idle 1800
mtu 1410
mru 1410
nodefaultroute
debug
lock
proxyarp
connect-delay 5000
ms-dns 192.168.0.1
#name l2tpd
#lcp-echo-interval 30
#lcp-echo-failure 4
logfile /var/log/ppp.log
这让我发疯了,我到底错过了什么?
答案1
listen-addr 不能与本地 ip 相同。
listen-addr - 是将其连接到 LAN/WAN 的主机的物理地址 本地 ip - 是与虚拟网络连接的隧道的主机的虚拟地址
将两者设置为相同可能是隧道问题的根源,