Ukuphela kwesikhathi kwe-L2TP ku-Ubuntu 22.04: iphutha lomhubhe we-xl2tpd

I-IPsec iyaxhuma, i-PPP ayiqali neze, futhi i-xl2tpd iphinda umhubhe engakwazi ukuwufanisa. Hlola ukwakhiwa okufakiwe ngaphambi kokuthinta i-PSK noma iseva.

Ideskithophu ibonisa ukuxhumana okuqhubekayo, i-IPsec ibika impumelelo, futhi i-interface ye-PPP ayivelanga neze. Ku-syslog inombolo efanayo yomhubhe iyaphindwa kuze kube yilapho umzamo uphelelwa isikhathi ku-UDP 1701. Ngaphambi kokuhlela ukhiye owabiwe ngaphambili noma ukucushwa kweseva, bona lesi simo: ku-Ubuntu 22.04 lokhu ngokuvamile ukuhlehla kwephakethe ku-xl2tpd, futhi iseva ibilungile sonke isikhathi.

Isho ukuthini ipheya yelogi ephindayo

Iseshini ehlulekayo iphrinta imigqa emibili ngezikhathi ezilinganayo: i-daemon ayitholi mhubhe womlayezo wokulawula ongenayo, bese ikhipha izihlonzi zocingo nomhubhe eyazinikezwa. Kamuva isibali sokuphinda sifinyelela umkhawulo waso futhi ukuxhumana kuvalwa ngokuphela kwesikhathi eport 1701. Amakheli nezihlonzi zingamashwa nje; isimo yisona esibalulekile. I-IKE yaqeda, ithrafikhi yokulawula ye-L2TP yafika, futhi i-daemon yehluleka ukuyixhumanisa nomhubhe eyayivele yawudala.

Ngakho-ke iphutha liphakathi kokulawula kwe-L2TP ne-PPP. Akukho okwake kwahlolwa mayelana nenselelo, izinketho ze-PPP noma isubneti ekude.

Qinisekisa ukuthi i-IPsec iphumelele ngempela

Izinhlu ezimbili zihlukanisa lokhu nenkinga yezitifiketi zokungena, futhi zombili zikhona ngaphambi kwanoma yiluphi ushintsho lwephakethe.

ipsec status
journalctl -u strongswan --since "5 min ago" | grep -i "shared key"

Umphumela wesimo ubala ukuxhumana nesimo sakho, futhi umhubhe osunguliwe usho ukuthi isigaba sokuqala nesibili siqediwe. Umugqa welogi mayelana nokhiye owabiwe ongekho ukhomba insenelo kuphela, ngakho-ke yeka bese ulungisa lokho kuqala. Uma i-IPsec isunguliwe futhi ukuphela kwesikhathi kwe-L2TP kusabonakala, i-daemon iyona esolwayo esele. Gcina imigqa eqondile yomzamo owodwa esikhundleni sosuku lonke lwemizamo ephindayo.

Hlola ukwakhiwa kwe-xl2tpd, hhayi igama lokukhishwa

Ukwakhiwa kwe-jammy kwe-Ubuntu kwe-xl2tpd 1.3.16 kwavula ukuthuthukiswa kwesikhathi sokuxhuma, okwaphula ukuhlaziywa kwesihlonzi somhubhe empendulweni ye-SCCRP yeseva. I-daemon bese ilahla amaphakethe okulawula omhubhe eyawudala yona. Intambo yenguqulo ibaluleke kakhulu kunegama lokusatshalaliswa.

dpkg -l xl2tpd
apt policy xl2tpd
apt-mark showhold

Iphakethe elilungisiwe yi-1.3.16-1ubuntu0.1, ngakho-ke ukwakhiwa okungenaso lesi sengezo kwandulela ukulungisa. Umphumela wenqubomgomo ubonisa ukuthi ukuthuthukisa kuzofaka yiphi ikhandidethi, futhi uhlu lokubamba luchaza ukuthi kungani ukulungisa kungakafiki. Lapho iphakethe litholakala khona, lithuthukise futhi uxhume kabusha ngephrofayili evamile esikhundleni sokuhlela amafayela ngesandla. Ungakhi kabusha amamojula futhi ungashintshi insenelo ngesikhathi ukwakhiwa okudala kusafakiwe.

Qinisekisa i-PPP ngemuva koshintsho

Ukuthuthukisa okuphumelelayo kubonakala esigabeni obekugxilwe kuso. Hlola ukuthi i-PPP inyukile, hhayi nje ukuthi isithonjana sishintshile.

ip -4 addr show ppp0
ip route | grep ppp

Uhlu lwezixhumi kufanele lubonise ikheli lendawo nelekontanga, futhi ithebula lomzila kufanele liphathe iziqalo zomhubhe. I-syslog kufanele ibonise umhubhe wamukelwe futhi i-pppd ibika womabili amakheli, ngaphandle kwemigqa ephindayo yomhubhe ongatholakali. Uma i-PPP inyukile futhi ithrafikhi isahluleka, bheka ngokulandelayo umzila noma i-MTU, ngoba isigaba se-L2TP siqedile umsebenzi waso. Bhala inguqulo yephakethe esebenzayo kumanothi omshini, ukuze ukufakwa kabusha kwesikhathi esizayo kungabuyiseli ukwakhiwa okugxilwe kuso.

Lapho iphakethe elilungisiwe lingatholakali, izindlela ezinye ezibhaliwe ukwakhiwa kwasekhaya kusukela kumthombo we-1.3.16 noma 1.3.17, ukushintshela ku-kl2tpd, noma ukwehliswa okubekwe. Ngakunye kunenzuzo yokunakekela okufanele kubhalwe.

Izihloko ezihlobene