L2TP over IPSec VPN with OpenSwan 和 XL2TPD 无法连接，Centos 6 超时

Question

我正在我的 Centos 6.3 全新安装上通过 IPSec 设置 LT2p。

我有 iptables 刷新，允许所有。

每当我尝试连接时，我都会收到“vpn 没有回复”的消息，并且没有

这是我的 ipsec.conf 文件（服务器是 1.2.3.4）：

config setup
    nat_traversal=yes
    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
    oe=off
    protostack=netkey

conn L2TP-PSK-NAT
    rightsubnet=vhost:%priv
    also=L2TP-PSK-noNAT

conn L2TP-PSK-noNAT
    authby=secret
    pfs=no
    auto=add
    keyingtries=3
    rekey=no
    ikelifetime=8h
    keylife=1h
    type=transport
    left=1.2.3.4
    leftprotoport=17/1701
    right=%any
    rightprotoport=17/%any

我的 /etc/ipsec.secrets

1.2.3.4 %any: PSK "password"

我的 sysctl.conf（附加行）

net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 0
net.ipv4.conf.all.send_redirects = 0
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.all.log_martians = 0
net.ipv4.conf.default.log_martians = 0
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.icmp_ignore_bogus_error_responses = 1

以下是“ipsec 验证”给出的内容：

# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                                 [OK]
Linux Openswan U2.6.32/K2.6.32-279.19.1.el6.x86_64 (netkey)
Checking for IPsec support in kernel                            [OK]
 SAref kernel support                                           [N/A]
 NETKEY:  Testing for disabled ICMP send_redirects              [OK]
NETKEY detected, testing for disabled ICMP accept_redirects     [OK]
Checking that pluto is running                                  [OK]
 Pluto listening for IKE on udp 500                             [OK]
 Pluto listening for NAT-T on udp 4500                          [OK]
Checking for 'ip' command                                       [OK]
Checking /bin/sh is not /bin/dash                               [WARNING]
Checking for 'iptables' command                                 [OK]
Opportunistic Encryption Support                                [DISABLED]

我看到 xl2tpd 正在监听 1701/udp ：

udp        0      0 1.2.3.4:1701     0.0.0.0:*     2096/xl2tpd 

Answer 1

检查您的网络是否正常工作，发送和接收数据包的数据速率是否也响应，有时由于连接丢失或其他一些问题而导致此问题。