У нас много пользователей, которые ежедневно используют наш L2TP VPN для удалённой работы. VPN работает на нашем USG Pro 4 и использует встроенный Radius для аутентификации. Особенно один пользователь постоянно испытывает серьёзные проблемы с подключением к VPN. Обычно, если я перезагружаю USG на ночь, он сразу после этого может зайти без проблем. У него дома стоит роутер/точка доступа Google Wifi, и двойного NAT-а нет.
На USG, когда он пытается подключиться, я вижу кучу таких ошибок (IP-адреса скрыты из соображений безопасности):
Jan 31 22:55:51 01[IKE] <remote-access|156> closing CHILD_SA remote-access{101} with SPIs cfbb1394_i (389458 bytes) dd842e3a_o (2565831 bytes) and TS [office wan ip]/32[udp/l2f] === 98.202.128.32/32[udp/l2f]
Jan 31 22:55:51 06[IKE] <remote-access|156> CHILD_SA remote-access{101} established with SPIs ca9ee01c_i 07ae66ea_o and TS [office wan ip]/32[udp/l2f] === 98.202.128.32/32[udp/l2f]
Jan 31 22:56:45 03[IKE] <169> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 22:56:46 01[IKE] <remote-access|169> IKE_SA remote-access[169] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 22:57:21 01[IKE] <remote-access|169> deleting IKE_SA remote-access[169] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 22:59:26 08[IKE] <170> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 22:59:26 04[IKE] <remote-access|170> IKE_SA remote-access[170] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 23:00:01 10[IKE] <remote-access|170> deleting IKE_SA remote-access[170] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:06:10 04[IKE] <171> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:06:11 06[IKE] <remote-access|171> IKE_SA remote-access[171] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 23:06:46 02[IKE] <remote-access|171> deleting IKE_SA remote-access[171] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:07:46 08[IKE] <172> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:07:47 01[IKE] <remote-access|172> IKE_SA remote-access[172] established между [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:08:22 07[IKE] <remote-access|172> deleting IKE_SA remote-access[172] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:09:22 16[IKE] <173> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:09:23 05[IKE] <remote-access|173> IKE_SA remote-access[173] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:09:58 14[IKE] <remote-access|173> deleting IKE_SA remote-access[173] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:10:59 03[IKE] <174> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:10:59 06[IKE] <remote-access|174> IKE_SA remote-access[174] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:11:34 07[IKE] <remote-access|174> deleting IKE_SA remote-access[174] между [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
admin@USG:~$
Что это значит? Почему L2TP не ладит с этим пользователем?
На USG, когда он пытается подключиться, я вижу кучу таких ошибок (IP-адреса скрыты из соображений безопасности):
Jan 31 22:55:51 01[IKE] <remote-access|156> closing CHILD_SA remote-access{101} with SPIs cfbb1394_i (389458 bytes) dd842e3a_o (2565831 bytes) and TS [office wan ip]/32[udp/l2f] === 98.202.128.32/32[udp/l2f]
Jan 31 22:55:51 06[IKE] <remote-access|156> CHILD_SA remote-access{101} established with SPIs ca9ee01c_i 07ae66ea_o and TS [office wan ip]/32[udp/l2f] === 98.202.128.32/32[udp/l2f]
Jan 31 22:56:45 03[IKE] <169> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 22:56:46 01[IKE] <remote-access|169> IKE_SA remote-access[169] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:56:46 16[KNL] <remote-access|169> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 22:57:21 01[IKE] <remote-access|169> deleting IKE_SA remote-access[169] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 22:59:26 08[IKE] <170> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 22:59:26 04[IKE] <remote-access|170> IKE_SA remote-access[170] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 22:59:26 06[KNL] <remote-access|170> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 23:00:01 10[IKE] <remote-access|170> deleting IKE_SA remote-access[170] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:06:10 04[IKE] <171> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:06:11 06[IKE] <remote-access|171> IKE_SA remote-access[171] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, not found
Jan 31 23:06:11 14[KNL] <remote-access|171> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, not found
Jan 31 23:06:46 02[IKE] <remote-access|171> deleting IKE_SA remote-access[171] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:07:46 08[IKE] <172> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:07:47 01[IKE] <remote-access|172> IKE_SA remote-access[172] established между [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:07:47 06[KNL] <remote-access|172> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:08:22 07[IKE] <remote-access|172> deleting IKE_SA remote-access[172] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:09:22 16[IKE] <173> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:09:23 05[IKE] <remote-access|173> IKE_SA remote-access[173] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:09:23 07[KNL] <remote-access|173> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:09:58 14[IKE] <remote-access|173> deleting IKE_SA remote-access[173] between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:10:59 03[IKE] <174> [user home wan ip] is initiating a Main Mode IKE_SA
Jan 31 23:10:59 06[IKE] <remote-access|174> IKE_SA remote-access[174] established between [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [office wan ip]/32[udp/l2f] === [user home wan ip]/32[udp/l2f] out failed, не найдено
Jan 31 23:10:59 16[KNL] <remote-access|174> deleting policy [user home wan ip]/32[udp/l2f] === [office wan ip]/32[udp/l2f] in failed, не найдено
Jan 31 23:11:34 07[IKE] <remote-access|174> deleting IKE_SA remote-access[174] между [office wan ip][[office wan ip]]...[user home wan ip][[user pc lan ip]]
admin@USG:~$
Что это значит? Почему L2TP не ладит с этим пользователем?