ubuntu 配置L2tp出現的問題解決


運行環境:ubuntu 14.04 64位

 

配置推薦網址:

https://linux.cn/article-3409-1.html


首先,官方教程是必須的:

https://help.ubuntu.com/community/L2TPServer
沒有安照這個做過了就先不要到處百度“如何部署L2TP”之類的了。先參閱Official Ubuntu Documentation。


主要的問題出在:

sudo ipsec verify

這一步。因為官方要求是得到一個沒有任何錯誤的反饋。

在第一次測試的時候我出現了2個[FAILED],具體情況如下:
Checking your system to see if IPsec got installed and started correctly:

Version check and ipsec on-path [OK]

Linux Openswan U2.6.38/K3.13.0-52-generic (netkey)

Checking for IPsec support in kernel [OK]

SAref kernel support [N/A]

NETKEY: Testing XFRM related proc values [FAILED]


Please disable /proc/sys/net/ipv4/conf/*/send_redirects

or NETKEY will cause the sending of bogus ICMP redirects!


[FAILED]


Please disable /proc/sys/net/ipv4/conf/*/accept_redirects

or NETKEY will accept bogus ICMP redirects!


[OK]

Hardware RNG detected, testing if used properly [FAILED]


Hardware RNG is present but 'rngd' or 'clrngd' is not running.

No harware random used!


Checking that pluto is running [OK]

Pluto listening for IKE on udp 500 [OK]

Pluto listening for NAT-T on udp 4500 [OK]

Checking for 'ip' command [OK]

Checking /bin/sh is not /bin/dash [WARNING]

Checking for 'iptables' command [OK]

Opportunistic Encryption Support [DISABLED]

 

我們先解決:

NETKEY: Testing XFRM related proc values [FAILED]

解決方案:在命令行里黏貼以下命令


for each in /proc/sys/net/ipv4/conf/*

> do

> echo 0 > $each/accept_redirects

> echo 0 > $each/send_redirects

> done


然后解決:


Hardware RNG detected, testing if used properly [FAILED]


Hardware RNG is present but 'rngd' or 'clrngd' is not running.

No harware random used!

解決方案:

sudo apt-get install rng-tools


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM