Здравствуйте.
Подскажите пожалуйста. Настраиваю сервер на Ubuntu 20 для работы IKEv2.
Все делаю по статье
https://www.digitalocean.com/community/tutorials/h... один в один только подставляя свои значения IP и eth
Потом пытаюсь настроить Win11 подключение оно запрашивает логин и пароль и получаю вот такое
В логах сервера вижу вот такое, но не понимаю что не так:
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[NET] received packet: from 91.219.66.130[500] to 82.146.39.42[500] (1104 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 00[DMN] Starting IKE charon daemon (strongSwan 5.8.2, Linux 5.4.0-109-generic, x86_64)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 00[LIB] loaded plugins: charon aesni aes rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm drbg attr kernel-netlink resolve socket-default connmark stroke updown eap-mschapv2 xauth-generic counters
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 00[LIB] dropped capabilities, running as uid 0, gid 0
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 00[JOB] spawning 16 worker threads
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[NET] received packet: from 91.219.66.130[500] to 82.146.39.42[500] (1104 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) V V V V ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[IKE] received MS NT5 ISAKMPOAKLEY v9 vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[IKE] received MS-Negotiation Discovery Capable vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[IKE] received Vid-Initial-Contact vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[ENC] received unknown vendor ID: 01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[IKE] 91.219.66.130 is initiating an IKE_SA
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[IKE] remote host is behind NAT
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[IKE] received proposals unacceptable
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 07[NET] sending packet: from 82.146.39.42[500] to 91.219.66.130[500] (36 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 08[NET] received packet: from 192.241.213.114[33275] to 82.146.39.42[500] (336 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 08[ENC] parsed ID_PROT request 0 [ SA ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 08[IKE] no IKE config found for 82.146.39.42...192.241.213.114, sending NO_PROPOSAL_CHOSEN
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 08[ENC] generating INFORMATIONAL_V1 request 1520915041 [ N(NO_PROP) ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 08[NET] sending packet: from 82.146.39.42[500] to 192.241.213.114[33275] (40 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 09[NET] received packet: from 192.241.218.252[54838] to 82.146.39.42[500] (360 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 09[ENC] parsed AGGRESSIVE request 0 [ SA KE No ID ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 09[IKE] no IKE config found for 82.146.39.42...192.241.218.252, sending NO_PROPOSAL_CHOSEN
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 09[ENC] generating INFORMATIONAL_V1 request 1971780073 [ N(NO_PROP) ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 09[NET] sending packet: from 82.146.39.42[500] to 192.241.218.252[54838] (40 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 03[ENC] not enough input to parse rule 3 U_INT_4
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 03[ENC] header could not be parsed
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) V V V V ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 03[NET] received invalid IKE header from 14.1.112.177 - ignored
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 03[ENC] not enough input to parse rule 3 U_INT_4
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 03[ENC] header could not be parsed
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 03[NET] received invalid IKE header from 14.1.112.177 - ignored
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[NET] received packet: from 101.4.62.36[32280] to 82.146.39.42[500] (204 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[ENC] not enough input to parse rule 3 ATTRIBUTE_VALUE
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[ENC] parsing of a TRANSFORM_ATTRIBUTE_V1 substructure failed
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[ENC] parsing of a TRANSFORM_SUBSTRUCTURE_V1 substructure failed
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[ENC] parsing of a PROPOSAL_SUBSTRUCTURE_V1 substructure failed
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[ENC] payload type SECURITY_ASSOCIATION_V1 could not be parsed
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[IKE] message parsing failed
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[ENC] generating INFORMATIONAL_V1 request 4148803401 [ N(PLD_MAL) ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[NET] sending packet: from 82.146.39.42[500] to 101.4.62.36[32280] (40 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 10[IKE] ID_PROT request with message ID 0 processing failed
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 11[NET] received packet: from 222.205.127.251[56077] to 82.146.39.42[500] (204 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 11[ENC] parsed ID_PROT request 0 [ SA V V V V ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 11[IKE] no IKE config found for 82.146.39.42...222.205.127.251, sending NO_PROPOSAL_CHOSEN
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 11[ENC] generating INFORMATIONAL_V1 request 1105754666 [ N(NO_PROP) ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 11[NET] sending packet: from 82.146.39.42[500] to 222.205.127.251[56077] (40 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[NET] received packet: from 91.219.66.130[500] to 82.146.39.42[500] (1104 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) V V V V ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[IKE] received MS NT5 ISAKMPOAKLEY v9 vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[IKE] received MS-Negotiation Discovery Capable vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[IKE] received Vid-Initial-Contact vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[ENC] received unknown vendor ID: 01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[IKE] 91.219.66.130 is initiating an IKE_SA
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[IKE] remote host is behind NAT
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[IKE] received proposals unacceptable
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 12[NET] sending packet: from 82.146.39.42[500] to 91.219.66.130[500] (36 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram ipsec[61270]: 13[NET] received packet: from 91.219.66.130[500] to 82.146.39.42[500] (1104 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[IKE] received MS NT5 ISAKMPOAKLEY v9 vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[IKE] received MS-Negotiation Discovery Capable vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[IKE] received Vid-Initial-Contact vendor ID
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[ENC] received unknown vendor ID: 01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[IKE] 91.219.66.130 is initiating an IKE_SA
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[IKE] remote host is behind NAT
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[IKE] received proposals unacceptable
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]
Jun 2 06:20:20 ubuntu20-1cpu-2ram charon: 13[NET] sending packet: from 82.146.39.42[500] to 91.219.66.130[500] (36 bytes)
Jun 2 06:20:20 ubuntu20-1cpu-2ram kernel: [65339.410760] [UFW BLOCK] IN=ens4 OUT= MAC=02:34:89:d5:0f:0f:00:00:5e:00:01:00:08:00 SRC=91.219.66.130 DST=82.146.39.42 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=8404 DF PROTO=TCP SPT=53836 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
Jun 2 06:20:41 ubuntu20-1cpu-2ram kernel: [65360.471820] [UFW BLOCK] IN=ens4 OUT= MAC=02:34:89:d5:0f:0f:00:00:5e:00:01:00:08:00 SRC=91.219.66.130 DST=82.146.39.42 LEN=52 TOS=0x00 PREC=0x00 TTL=55 ID=8485 DF PROTO=TCP SPT=53837 DPT=1723 WINDOW=64240 RES=0x00 SYN URGP=0
Подскажите пожалуйста
Простой
