トップ «前の日記(2017-04-15(Sat)) 最新 次の日記(2017-04-19(Wed))» 編集

屑俺日記

僕の備忘録(PC、UN*X、ネットワーク関連が中心)なんです。
自分の書いたところは適当(な時とか)に書き換えますので御了承を。


2017-04-17(Mon) 今日傘は役に立つか

とあるL2tp/IPSec

10:33:59 $SERVER pluto[4608]: packet from $CLIENT_IP:500: received Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]
10:33:59 $SERVER pluto[4608]: packet from $CLIENT_IP:500: received Vendor ID payload [RFC 3947]
10:33:59 $SERVER pluto[4608]: packet from $CLIENT_IP:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
10:33:59 $SERVER pluto[4608]: packet from $CLIENT_IP:500: ignoring Vendor ID payload [FRAGMENTATION]
10:33:59 $SERVER pluto[4608]: packet from $CLIENT_IP:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable]
10:33:59 $SERVER pluto[4608]: packet from $CLIENT_IP:500: ignoring Vendor ID payload [Vid-Initial-Contact]
10:33:59 $SERVER pluto[4608]: packet from $CLIENT_IP:500: ignoring Vendor ID payload [IKE CGA version 1]
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[577] $CLIENT_IP #890: responding to Main Mode from unknown peer $CLIENT_IP
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[577] $CLIENT_IP #890: Oakley Transform [AES_CBC (256), HMAC_SHA1, ECP_384] refused due to strict flag
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[577] $CLIENT_IP #890: Oakley Transform [AES_CBC (128), HMAC_SHA1, ECP_256] refused due to strict flag
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[577] $CLIENT_IP #890: Oakley Transform [AES_CBC (256), HMAC_SHA1, MODP_2048] refused due to strict flag
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[577] $CLIENT_IP #890: Oakley Transform [3DES_CBC (192), HMAC_SHA1, MODP_2048] refused due to strict flag
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[577] $CLIENT_IP #890: NAT-Traversal: Result using RFC 3947: peer is NATed
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[577] $CLIENT_IP #890: Peer ID is ID_IPV4_ADDR: '192.168.8.226'
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[578] $CLIENT_IP #890: deleting connection "remote-access-mac-zzz" instance with peer $CLIENT_IP {isakmp=#0/ipsec=#0}
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[578] $CLIENT_IP:4500 #890: sent MR3, ISAKMP SA established
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[578] $CLIENT_IP:4500 #891: NAT-Traversal: received 2 NAT-OA. using first, ignoring others
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[578] $CLIENT_IP:4500 #891: IPSec Transform [AES_CBC (128), HMAC_SHA1] refused due to strict flag
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[578] $CLIENT_IP:4500 #891: responding to Quick Mode
10:33:59 $SERVER pluto[4608]: "remote-access-mac-zzz"[578] $CLIENT_IP:4500 #891: IPsec SA established {ESP=>0x90669186 <0xc712b695 NATOA=192.168.8.226}
10:34:02 $SERVER xl2tpd[9841]: Connection established to $CLIENT_IP, 1701.  Local: 34839, Remote: 1 (ref=0/0).  LNS session is 'default'
10:34:02 $SERVER xl2tpd[9841]: Call established with $CLIENT_IP, Local: 52413, Remote: 1, Serial: 0
10:34:02 $SERVER pppd[3666]: pppd 2.4.4 started by root, uid 0
10:34:02 $SERVER zebra[1650]: interface ppp0 index 32  added.
10:34:02 $SERVER pppd[3666]: Connect: ppp0 <--> /dev/pts/0
10:34:05 $SERVER pppd[3666]: Unsupported protocol 'IPv6 Control Protovol' (0x8057) received
10:34:05 $SERVER pppd[3666]: Unsupported protocol 'Compression Control Protocol' (0x80fd) received
10:34:05 $SERVER zebra[1650]: warning: PtP interface ppp0 with addr 10.255.255.0/32 needs a peer address
10:34:05 $SERVER zebra[1650]: interface index 32 was renamed from ppp0 to l2tp0
10:34:05 $SERVER ripd[1660]: interface delete ppp0 index 32 flags 0x1090 metric 1 mtu 1280
10:34:05 $SERVER ripngd[1668]: interface delete ppp0 index 32 flags 0x1090 metric 1 mtu 1280
10:34:05 $SERVER pppd[3666]: local  IP address $PPTP_IP
10:34:05 $SERVER pppd[3666]: remote IP address $VPN_IP

リンクはご自由にどうぞ。でもURLや内容が変った場合はあしからず。

index.htmlは ここから。