I-log yokulungisa iphutha ye-L2TP ingenalutho? Iphutha cishe lise-journal

Uqala isisizi se-L2TP ngokulungisa amaphutha, ubheka itheminali, bese sima ngaphandle kwanoma yini ewusizo esikrinini. Lokhu akulona ifulegi lokulungisa amaphutha eliphukile. Uxhumano lwe-NetworkManager L2TP luyizinqubo ezine ezisebenzisanayo, futhi ezinye zazo kuphela ezibhala kutheminali oyibukayo. Obunye ubufakazi buse-journal, ebangeni lesihlungi esisodwa.

Izinqubo ezine, izindawo ezimbili zelog

Uxhumano luqala nge-IPsec, okungu-libreswan noma i-strongSwan kuye ngokufakwa. Bese kuba yi-L2TP daemon, ngokwesiko i-xl2tpd futhi kwezinye izakhiwo i-kl2tpd, eqhuba ithuneli. Ekugcineni i-pppd ibhekana nokuqinisekisa kanye namakheli ngaphakathi kwayo.

Isevisi yesisizi ixhumanisa lezo zingxenye futhi iphrinta inqubekelaphambili yayo. I-IPsec daemon ne-pppd ngokuvamile zibika nge-journal yesistimu, yingakho itheminali ibonisa uxhumano oluhlulekayo kuyilapho isizathu sisemfayeleni ongakavuli.

Lokho kwehlukana kuphinde kuchaze ukuthi kungani iphutha le-PSK nephutha lephasiwedi kubukeka kufana kusukela kudeskithophu: womabili adala ukunqanyulwa okujwayelekile, futhi isigaba esihlulekile sibonakala kuphela ekukhipheni kwenqubo ngayinye. Yiso sonke isizathu sokuthi i-journal ibalulekile lapha. Umlayezo owodwa ojwayelekile kudeskithophu, ababhali abane abangaba khona ngemuva kwawo.

Qoqa umzamo owodwa, bese ufunda ukulandelana

Phinda kanye, ngephrofayela eyaziwayo nesikhathi esaziwayo, bese ufunda iwindi elincane esikhundleni sokuqalisa konke. Ukuphinda imizamo ngenkathi ushintsha izilungiselelo kwenza ilog ibe yingxubevange engachazeki.

Le mikhombandlela ikhetha izinqubo ezibamba iqhaza ekuqaliseni kwamanje, futhi indlela ye-plugin ifanele iqinisekiswe ekusatshalalisweni kwakho:

journalctl -b --no-hostname _COMM=nm-l2tp-service _COMM=pluto _COMM=charon _COMM=xl2tpd _COMM=pppd
rpm -ql NetworkManager-l2tp 2>/dev/null | grep nm-l2tp-service

Izinkambu eziphindwayo ekubizeni okukodwa zikhetha inhlangano yalezo zinqubo, okugcina ukulandelana ngokulandelana kwesikhathi. Kuhlelo olusekelwe ku-Debian umbuzo olinganayo ngu-dpkg -L; iphuzu ukuthola ukuthi isisizi sihlala kuphi ngempela ngaphambi kokuzama ukusisebenzisa ngesandla.

Izimo ezintathu zinquma isinyathelo esilandelayo

Funda isigaba sokuqala esihlulekile, bese ukhetha ngokufanele. Uma i-IPsec ibika ukwehluleka kwesiphakamiso noma kokuqinisekiswa komlingani, ithuneli alizange lakheke, futhi ukushintsha iphasiwedi ye-PPP ngeke kusize.

Uma ithuneli lakheka futhi i-pppd yanqaba ukungena, imfihlo eyabiwe yayivele ilungile futhi inkinga yezitifiketi isevingeni elilodwa phezulu. Uma i-pppd yaxoxa ngekheli futhi ukwehluleka kwavela kamuva, zombili ziyasebenza futhi inkinga esele ukuhlelwa kwendlela, i-DNS noma inqubomgomo yesiphakamiso uqobo.

Lawa magatsha amathathu ahlanganisa cishe konke ukunqanyulwa okujwayelekile, futhi anqunywa ukuthi iyiphi inqubo erekhoda iphutha lokugcina, hhayi ukuthi uwuphi umlayezo wephutha obukeka usabisa kakhulu.

Kufanele futhi kuqinisekiswe ukuthi iyiphi i-IPsec backend efakiwe ngaphambi kokuthinta isilungiselelo sokulungisa amaphutha. Inketho yokuloga ebhalelwe i-strongSwan ayenzi lutho uma i-libreswan isebenza, futhi uxhumano luzoqhubeka luhluleka endaweni efanayo ngenkathi uhlela imfayela okungekho muntu oyifundayo.

Imodi yokulungisa amaphutha ishiya amafayela

Umkhondo wokusebenza wangempela wokulungisa amaphutha usebenzisa isevisi ngesandla ngefulegi lokulungisa amaphutha, futhi leyo modi ingashiya amafayela wokucushwa kwesikhathi sokusebenza akhiwe endaweni yawo lapho uxhumano luphela.

Lawo mafayela aqukethe impahla yokuqinisekisa: ukhiye owabiwe kusengaphambili, izitifiketi noma kokubili. Ukucushwa okwakhiwe okukopishwe efasiteleni lengxoxo ukwembula kwezitifiketi, hhayi isiqeshana selog. Susa imigqa eyimfihlo ngaphambi kokwabelana nganoma yini, futhi susa imfolda lapho uphenyo luphela. Zibheke njengezimfihlo, khipha imigqa ethile oyidingayo embikweni, bese uzisusa ngemuva kwalokho esikhundleni sokunamathisela imfolda kuthikithi.

Isibonelo esisetshenziswa ngesandla kufanele futhi sididiyelwe nesijwayelekile. Ukuqalisa ikhophi yokulungisa amaphutha ngenkathi isevisi isivele iphethe i-plugin kukhiqiza abanikazi ababili nelog exuba kokubili, okuyinto embi kakhulu kunokungabikho kokukhipha okulungisa amaphutha.

Ngemuva kwalokho buyisela isisizi esijwayelekile

Lapho uphenyo luphela, misa isibonelo esisetshenziswa ngesandla, susa amafayela esikhathi sokusebenza agciniwe futhi uxhume kabusha ngendlela ejwayelekile ukuze umuntu olandelayo abone ukucushwa okuhambisana neqiniso.

Bese uqinisekisa umphumela kusendlalelo esihlulekile, hhayi kusithonjana sedeskithophu:

journalctl -b -u NetworkManager --since -10min | tail -30
ip -4 addr show ppp0
ip -4 route get 10.20.4.10

Iseshini eqinisekisayo, ethola ikheli futhi ehambisa indlela eya endaweni ehlosiwe iwumphumela owawulungisa amaphutha kuwo. Itheminali ethule ngesikhathi somzamo ohlulekile ikutshela kuphela lapho okukhiphayo akubhalwanga khona.