Ошибка Failed to start Internet Key Exchange (IKE) Protocol Daemon for IPsec, как ее утранить?

Question

[KIRNESS]

Ошибка Failed to start Internet Key Exchange (IKE) Protocol Daemon for IPsec, как ее утранить ?

● ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec
   Loaded: loaded (/usr/lib/systemd/system/ipsec.service; enabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Wed 2020-12-23 11:33:14 MSK; 1h 7min ago
     Docs: man:ipsec(8)
           man:pluto(8)
           man:ipsec.conf(5)

Dec 23 11:33:14 appliance systemd[1]: ipsec.service: Service RestartSec=100ms expired, scheduling restart.
Dec 23 11:33:14 appliance systemd[1]: ipsec.service: Scheduled restart job, restart counter is at 5.
Dec 23 11:33:14 appliance systemd[1]: Stopped Internet Key Exchange (IKE) Protocol Daemon for IPsec.
Dec 23 11:33:14 appliance systemd[1]: ipsec.service: Start request repeated too quickly.
Dec 23 11:33:14 appliance systemd[1]: ipsec.service: Failed with result 'exit-code'.
Dec 23 11:33:14 appliance systemd[1]: Failed to start Internet Key Exchange (IKE) Protocol Daemon for IPsec.
Dec 23 11:33:18 appliance systemd[1]: ipsec.service: Start request repeated too quickly.
Dec 23 11:33:18 appliance systemd[1]: ipsec.service: Failed with result 'exit-code'.
Dec 23 11:33:18 appliance systemd[1]: Failed to start Internet Key Exchange (IKE) Protocol Daemon for IPsec.

ПОЖАЛУЙСТА ПОМОГИТЕ !

Answer 1

[CityCat4]

Лог от systemd совершенно бесполезен (как и сам systemd), нужен лог самого ike демона - что там у Вас стоит - strongswan?

Comments

[KIRNESS]

Да, все верно.Что сделать что бы убрать ошибку

[CityCat4]

KIRNESS, Ну лог швана покажи. Или он не ведется? Если не ведется, то в /etc/strongswan/strongswan.d/charon-logging.conf добавь следующее:

# Section to define file loggers, see LOGGER CONFIGURATION in
    # strongswan.conf(5).
    filelog {

        # <filename> is the full path to the log file.
        /var/log/ipsec {

            # Loglevel for a specific subsystem.
            # <subsystem> = <default>

            # If this option is enabled log entries are appended to the existing
            # file.
            append = yes

            # Default loglevel.
            default = 2
            
            
            # job management do not need to logging usually
            job = 0
            
            # For debugging purpose
            asn = 1
            enc = 1
            ike = 4
            net = 4
            cfg = 3
            # Enabling this option disables block buffering and enables line
            # buffering.
            flush_line = yes

            # Prefix each log entry with the connection name and a unique
            # numerical identifier for each IKE_SA.
            ike_name = no

            # Prefix each log entry with a timestamp. The option accepts a
            # format string as passed to strftime(3).
            time_format =  %b %e %T

        }

    }

Лог пойдет в /var/log/ipsec (потом вырубить не забудь, валит прилично)