☰

无法在内核中安装入站和出站 IPsec SA (SAD)

tag-icon • tag-icon vpn xl2tpd ikev2
无法在内核中安装入站和出站 IPsec SA (SAD)

我正在尝试使用 strognswan 和 xl2tp 守护程序安装 IPsec 上的 L2TP。

这是我的配置：

 conn L2TP-PSK-NAT
        also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
        authby=secret
        auto=add
        keyingtries=3
        rekey=no
        type=transport
        left=someIP
        leftprotoport=17/1701
        right=%any
        rightprotoport=17/%any


conn twister_L2TP
        type=transport
        authby=secret
        rekey=no
        keyingtries=1
        left=%any
        leftprotoport=udp/l2tp
        leftid=@*.somedomain.com
        right=%any
        rightprotoport=udp/%any
        auto=add

这是我得到的错误：

IPsec SA: unsupported mode
May 24 06:40:52 ikev2 charon: 13[ESP] failed to create SAD entry
May 24 06:40:52 ikev2 charon: 13[ESP]   IPsec SA: unsupported mode
May 24 06:40:52 ikev2 charon: 13[ESP] failed to create SAD entry
May 24 06:40:52 ikev2 charon: 13[IKE] unable to install inbound and outbound IPsec SA (SAD) in kernel
May 24 06:40:52 ikev2 charon: 13[IKE] sending DELETE for ESP CHILD_SA with SPI 0e64dbdf

相关内容