L2TP log ɗin gyara kuskure mara komai? Kuskuren yana cikin journal

Kuna fara mai taimakon L2TP da gyara kuskure, kuna kallon terminal, sai ya tsaya ba tare da wani abu mai amfani a kan allo ba. Wannan ba karyayyen tutar gyara kuskure ba ne. Haɗin NetworkManager L2TP tsari ne guda huɗu masu haɗin gwiwa, kuma wasu ne kawai suke rubuta cikin terminal ɗin da kuke kallo. Sauran shaidun suna cikin journal, nisan tacewa ɗaya.

Tsari huɗu, wuraren log biyu

Haɗin yana farawa da IPsec, wanda shine libreswan ko strongSwan dangane da shigarwa. Sannan daemon L2TP, bisa al’ada xl2tpd kuma a wasu ginawa kl2tpd, yana tafiyar da ramin. A karshe pppd yana kula da tabbatarwa da adireshi a cikinsa.

Sabis ɗin taimako yana daidaita waɗannan sassa kuma yana buga nasa ci gaba. Daemon IPsec da pppd yawanci suna bayar da rahoto ta journal ɗin tsarin, wanda shine dalilin da terminal ɗin ke nuna haɗin da ke kasawa yayin da dalilin yake cikin fayil ɗin da ba ku buɗe ba.

Wannan rabuwa kuma yana bayanin dalilin da kuskuren PSK da kuskuren kalmar sirri suke kama da juna daga tebur: dukansu suna haifar da cire haɗi na gama gari, kuma matakin da ya kasa yana bayyana ne kawai a fitarwar kowane tsari. Wannan shine dukan dalilin da journal ɗin yake da muhimmanci a nan. Saƙo ɗaya na gama gari a tebur, mawallafa huɗu masu yiwuwa a bayansa.

Tattara gwaji ɗaya, sannan karanta tsari

Maimaita sau ɗaya, da sanannen bayanin martaba da sanannen lokaci, sannan karanta kunkun tagar maimakon dukan tashin. Maimaita gwaje-gwaje yayin canza saituna yana mai da log ɗin gauraya da ba za a iya fassarawa ba.

Waɗannan umarnin suna zaɓar tsare-tsaren da ke shiga don tashin yanzu, kuma ya dace a tabbatar da hanyar plugin a rarraba ku:

journalctl -b --no-hostname _COMM=nm-l2tp-service _COMM=pluto _COMM=charon _COMM=xl2tpd _COMM=pppd
rpm -ql NetworkManager-l2tp 2>/dev/null | grep nm-l2tp-service

Filayen da aka maimaita a kira ɗaya suna zaɓar haɗin waɗannan tsare-tsaren, wanda ke kiyaye jerin cikin tsarin lokaci. A tsarin da ya dogara da Debian tambaya daidai ita ce dpkg -L; batun shine a gano inda mai taimakon yake da gaske kafin kokarin tafiyar da shi da hannu.

Sharuɗɗa uku ne ke yanke shawarar mataki na gaba

Karanta matakin farko da ya kasa, sannan ka zaɓa bisa ga haka. Idan IPsec ya ba da rahoton gazawar shawara ko tabbatar da takwarorinsa, ramin bai taɓa samuwa ba, kuma canza kalmar sirri ta PPP ba zai iya taimakawa ba.

Idan ramin ya samu kuma pppd ya ƙi shiga, sirrin da aka raba ya riga ya yi daidai kuma matsalar takardun shaidar tana mataki ɗaya sama. Idan pppd ya yi shawarwari kan adireshi kuma gazawar ta bayyana daga baya, dukansu suna aiki kuma sauran matsalar ita ce hanyar sadarwa, DNS ko manufar uwar garken kanta.

Waɗannan rassa uku suna rufe kusan kowace cire haɗi ta gama gari, kuma tsarin da ya rubuta kuskure na ƙarshe ne ke yanke shawara, ba wanda saƙon kuskuren da ya fi tsoratarwa ba.

Hakanan ya dace a tabbatar da wane backend na IPsec aka shigar kafin taɓa saitin gyara kuskure. Zaɓin log ɗin da aka rubuta don strongSwan ba ya yin komai yayin da libreswan ke gudana, kuma haɗin zai ci gaba da kasawa a wuri ɗaya yayin da kuke gyara fayil ɗin da babu wanda ke karantawa.

Yanayin gyara kuskure yana barin fayiloli

Tsarin aikin gyara kuskuren na asali yana tafiyar da sabis ɗin da hannu tare da tutar gyara kuskure, kuma wannan yanayin na iya barin fayilolin saitin lokacin gudana da aka kirkira a wurinsu lokacin da haɗin ya ƙare.

Waɗannan fayilolin suna ɗauke da kayan tabbatarwa: maɓallin da aka raba tun da farko, takardun shaida ko duka biyu. Saitin da aka kirkira da aka kwafa cikin tagar hira shine bayyanar takardun shaida, ba guntun log ba. Cire layukan sirrin kafin raba wani abu, kuma share jagorar idan binciken ya ƙare. Ɗauke su a matsayin sirri, ciro takamaiman layukan da kuke buƙata don rahoto, sannan share su daga baya maimakon liƙa jagora cikin tikit.

Dole ne kuma a daidaita misalin hannu da na yau da kullum. Kaddamar da kwafin gyara kuskure yayin da sabis ɗin ya riga ya mallaki plugin yana haifar da masu shi biyu da log ɗin da ke haɗa duka biyu, wanda ya fi muni da babu fitarwar gyara kuskure kwata-kwata.

Bayan haka maido da mai taimako na yau da kullum

Idan binciken ya ƙare, dakatar da misalin hannu, cire fayilolin lokacin gudana da aka ajiye kuma sake haɗawa ta hanyar yau da kullum domin na gaba ya ga saitin da ya dace da gaskiyar.

Sannan tabbatar da sakamakon a layin da ya kasa, ba a gunkin tebur ba:

journalctl -b -u NetworkManager --since -10min | tail -30
ip -4 addr show ppp0
ip -4 route get 10.20.4.10

Zama da ke tabbatarwa, samun adireshi kuma yana bin hanyar zuwa inda aka nufa shine sakamakon da kuke gyara kuskure dominsa. Terminal shiru yayin gwajin da ya kasa yana gaya muku kawai inda ba a rubuta fitarwar ba.