☰

Verbindung zwischen Mac und Azure VPN über Ikev2 nicht möglich

tag-icon • tag-icon vpn azure mac-osx
Verbindung zwischen Mac und Azure VPN über Ikev2 nicht möglich

Ich versuche, mein Macbook mit einem Azure VPN zu verbinden. Bei jedem Verbindungsversuch erscheint die Verbindungsanimation des VPN-Symbols in der oberen Leiste (Bildbeschreibung hier eingeben) läuft einige Sekunden lang weiter und stoppt dann, ohne dass eine Erklärung abgegeben wird, was schiefgelaufen ist.

Ich habe alle Anweisungen genau befolgt, alles doppelt, dreifach und vierfach überprüft. Alle Zertifikate gelöscht und von vorne begonnen, aber immer noch kein Erfolg.

Beim Sniffing mit WireShark erhalte ich lediglich eine kurze Konversation, in der ich keinerlei Hinweise darauf finde, was falsch sein könnte:

WireShark

tailing /var/log/system.logIch kann dies sehen:

DATE Macbook nesessionmanager[16073]: NESMIKEv2VPNSession[PreProd:39C837FA-09F7-42BD-AD8D-F85994AB9470]: Received a start command from SystemUIServer[282]
DATE Macbook nesessionmanager[16073]: NESMIKEv2VPNSession[PreProd:39C837FA-09F7-42BD-AD8D-F85994AB9470]: status changed to connecting
DATE Macbook nesessionmanager[16073]: Failed to find the VPN app for plugin type com.apple.neplugin.IKEv2
DATE Macbook neagent[24535]: IKEv2 Plugin: ikev2_dns_callback: Error -65554
DATE Macbook kernel[0]: ipsec_ctl_connect: creating interface ipsec0
DATE Macbook configd[55]: network changed
DATE Macbook kernel[0]: hfs: mounted Recovery HD on device disk0s3
DATE Macbook mds[66]: (Volume.Normal:2464) volume:0x7fcf1c016000 ********** Bootstrapped Creating a default store:0 SpotLoc:(null) SpotVerLoc:(null) occlude:0 /Volumes/Recovery HD
DATE Macbook sandboxd[132] ([283]): Finder(283) System Policy: deny file-write-create /Volumes/Recovery HD/.Trashes/501
DATE Macbook fseventsd[48]: Logging disabled completely for device:1: /Volumes/Recovery HD
DATE Macbook kernel[0]: hfs: unmount initiated on Recovery HD on device disk0s3
DATE Macbook kernel[0]: hfs: mounted Recovery HD on device disk0s3
DATE Macbook mds[66]: (Volume.Normal:2464) volume:0x7fcf1a856c00 ********** Bootstrapped Creating a default store:0 SpotLoc:(null) SpotVerLoc:(null) occlude:0 /Volumes/Recovery HD
DATE Macbook kernel[0]: hfs: unmount initiated on Recovery HD on device disk0s3
DATE Macbook sandboxd[132] ([283]): Finder(283) System Policy: deny file-write-create /Volumes/Recovery HD/.Trashes/501
DATE Macbook neagent[24535]: Authentication method did not match
DATE Macbook neagent[24535]: Failed to process IKE Auth packet
DATE Macbook symptomsd[238]: -[FlowAnalyticsEngine _newFlowData:] netanalyticsdebug: (2) no head-end for flow azuregateway-515cbc58-3610-48a3-958f-6362b55579cb-e4f08f898b02.vpn.azure.com, discarding all its records
DATE Macbook neagent[24535]: Failed to receive packet
DATE Macbook neagent[24535]: BUG in libdispatch client: kevent[EVFILT_READ] delete: "Bad file descriptor" - 0x9
DATE Macbook nesessionmanager[16073]: NESMIKEv2VPNSession[PreProd:39C837FA-09F7-42BD-AD8D-F85994AB9470]: status changed to disconnecting
DATE Macbook kernel[0]: SIOCPROTODETACH_IN6: ipsec0 error=6
DATE Macbook nesessionmanager[16073]: NESMIKEv2VPNSession[PreProd:39C837FA-09F7-42BD-AD8D-F85994AB9470]: status changed to disconnected, last stop reason Stop command received
DATE Macbook configd[55]: network changed
DATE Macbook symptomsd[238]: nw_interface_create_with_name netutil_ifname_to_ifindex(ipsec0) failed, dumping backtrace:
            [x86_64] libnetcore-583.50.1
        0   libsystem_network.dylib             0x00007fff9c67cde9 __nw_create_backtrace_string + 123
        1   libsystem_network.dylib             0x00007fff9c69f1f3 nw_interface_create_with_name + 179
        2   Network                             0x00007fff8992cedc -[NWInterface initWithInterfaceName:] + 120
        3   SymptomEvaluator                    0x00007fff9a9482fc config_callback + 874
        4   SystemConfiguration                 0x00007fff9b823faf rlsPerform + 184
        5   SystemConfiguration                 0x00007fff9b8373ab __SCDynamicStoreSetDispatchQueue_block_invoke_2 + 52
        6   libdispatch.dylib                   0x00007fff9b01893d _dispatch_call_block_and_release + 12
        7   libdispatch.dylib                   0x00007fff9b00d40b _dispatch_client_callout + 8
        8   libdispatch.dylib                   0x00007fff9b01203b _dispatch_queue_drain + 754
        9   libdispatch.dylib                   0x00007fff9b018707 _dispatch_queue_invoke + 549
        10  libdispatch.dylib                   0x00007fff9b010d53 _dispatch_root_queue_drain + 538
        11  libdispatch.dylib                   0x00007fff9b010b00 _dispatch_worker_thread3 + 91
        12  libsystem_pthread.dylib             0x00007fff893544de _pthread_wqthread + 1129
        13  libsystem_pthread.dylib             0x00007fff89352341 start_wqthread + 13
DATE Macbook symptomsd[238]: -[NWInterface initWithInterfaceName:] nw_interface_create_with_name(ipsec0) failed, dumping backtrace:
            [x86_64] libnetcore-583.50.1
        0   libsystem_network.dylib             0x00007fff9c67cde9 __nw_create_backtrace_string + 123
        1   Network                             0x00007fff8992cf46 -[NWInterface initWithInterfaceName:] + 226
        2   SymptomEvaluator                    0x00007fff9a9482fc config_callback + 874
        3   SystemConfiguration                 0x00007fff9b823faf rlsPerform + 184
        4   SystemConfiguration                 0x00007fff9b8373ab __SCDynamicStoreSetDispatchQueue_block_invoke_2 + 52
        5   libdispatch.dylib                   0x00007fff9b01893d _dispatch_call_block_and_release + 12
        6   libdispatch.dylib                   0x00007fff9b00d40b _dispatch_client_callout + 8
        7   libdispatch.dylib                   0x00007fff9b01203b _dispatch_queue_drain + 754
        8   libdispatch.dylib                   0x00007fff9b018707 _dispatch_queue_invoke + 549
        9   libdispatch.dylib                   0x00007fff9b010d53 _dispatch_root_queue_drain + 538
        10  libdispatch.dylib                   0x00007fff9b010b00 _dispatch_worker_thread3 + 91
        11  libsystem_pthread.dylib             0x00007fff893544de _pthread_wqthread + 1129
        12  libsystem_pthread.dylib             0x00007fff89352341 start_wqthread + 13
DATE Macbook symptomsd[238]: nw_interface_create_with_name netutil_ifname_to_ifindex(ipsec0) failed, dumping backtrace:
            [x86_64] libnetcore-583.50.1
        0   libsystem_network.dylib             0x00007fff9c67cde9 __nw_create_backtrace_string + 123
        1   libsystem_network.dylib             0x00007fff9c69f1f3 nw_interface_create_with_name + 179
        2   Network                             0x00007fff8992cedc -[NWInterface initWithInterfaceName:] + 120
        3   SymptomEvaluator                    0x00007fff9a9482fc config_callback + 874
        4   SystemConfiguration                 0x00007fff9b823faf rlsPerform + 184
        5   SystemConfiguration                 0x00007fff9b8373ab __SCDynamicStoreSetDispatchQueue_block_invoke_2 + 52
        6   libdispatch.dylib                   0x00007fff9b01893d _dispatch_call_block_and_release + 12
        7   libdispatch.dylib                   0x00007fff9b00d40b _dispatch_client_callout + 8
        8   libdispatch.dylib                   0x00007fff9b01203b _dispatch_queue_drain + 754
        9   libdispatch.dylib                   0x00007fff9b018707 _dispatch_queue_invoke + 549
        10  libdispatch.dylib                   0x00007fff9b010d53 _dispatch_root_queue_drain + 538
        11  libdispatch.dylib                   0x00007fff9b010b00 _dispatch_worker_thread3 + 91
        12  libsystem_pthread.dylib             0x00007fff893544de _pthread_wqthread + 1129
        13  libsystem_pthread.dylib             0x00007fff89352341 start_wqthread + 13
DATE Macbook symptomsd[238]: -[NWInterface initWithInterfaceName:] nw_interface_create_with_name(ipsec0) failed, dumping backtrace:
            [x86_64] libnetcore-583.50.1
        0   libsystem_network.dylib             0x00007fff9c67cde9 __nw_create_backtrace_string + 123
        1   Network                             0x00007fff8992cf46 -[NWInterface initWithInterfaceName:] + 226
        2   SymptomEvaluator                    0x00007fff9a9482fc config_callback + 874
        3   SystemConfiguration                 0x00007fff9b823faf rlsPerform + 184
        4   SystemConfiguration                 0x00007fff9b8373ab __SCDynamicStoreSetDispatchQueue_block_invoke_2 + 52
        5   libdispatch.dylib                   0x00007fff9b01893d _dispatch_call_block_and_release + 12
        6   libdispatch.dylib                   0x00007fff9b00d40b _dispatch_client_callout + 8
        7   libdispatch.dylib                   0x00007fff9b01203b _dispatch_queue_drain + 754
        8   libdispatch.dylib                   0x00007fff9b018707 _dispatch_queue_invoke + 549
        9   libdispatch.dylib                   0x00007fff9b010d53 _dispatch_root_queue_drain + 538
        10  libdispatch.dylib                   0x00007fff9b010b00 _dispatch_worker_thread3 + 91
        11  libsystem_pthread.dylib             0x00007fff893544de _pthread_wqthread + 1129
        12  libsystem_pthread.dylib             0x00007fff89352341 start_wqthread + 13
DATE Macbook kernel[0]: hfs: mounted Recovery HD on device disk0s3
DATE Macbook mds[66]: (Volume.Normal:2464) volume:0x7fcf22841600 ********** Bootstrapped Creating a default store:0 SpotLoc:(null) SpotVerLoc:(null) occlude:0 /Volumes/Recovery HD
DATE Macbook fseventsd[48]: Logging disabled completely for device:1: /Volumes/Recovery HD
DATE Macbook kernel[0]: hfs: unmount initiated on Recovery HD on device disk0s3
DATE Macbook sandboxd[132] ([283]): Finder(283) System Policy: deny file-write-create /Volumes/Recovery HD/.Trashes/501
DATE Macbook kernel[0]: hfs: mounted Recovery HD on device disk0s3
DATE Macbook mds[66]: (Volume.Normal:2464) volume:0x7fcf1c016000 ********** Bootstrapped Creating a default store:0 SpotLoc:(null) SpotVerLoc:(null) occlude:0 /Volumes/Recovery HD
DATE Macbook kernel[0]: hfs: unmount initiated on Recovery HD on device disk0s3
DATE Macbook sandboxd[132] ([283]): Finder(283) System Policy: deny file-write-create /Volumes/Recovery HD/.Trashes/501

Ich kann daraus nicht schließen, wo das Problem liegt. Ich habe versucht, die Fehlermeldungen zu googeln, die verdächtig aussehen, aber die Ergebnisse waren enttäuschend ...

Kann mir irgendjemand irgendwie die richtige Richtung weisen, wie ich dies weiter untersuchen kann …?

Antwort1

Es scheint, dass es einInsekt.

Ein ähnlicher Fallin dessen Protokollen dasselbe Szenario vorliegt wie bei Ihnen.

Sie können auch diese Methode ausprobieren: ipsec.confAktualisieren Sie in die Chiffren und die Rightauth.

rightauth=eap-tls
ike=3des-sha1-modp1024
esp=3des-sha1-modp1024

Referenz:https://apple.stackexchange.com/questions/217366/ikev2-vpn-el-capitan-10-11

Schließlich können Sie eine Nachricht an eine der Mailinglisten von Apple senden: https://lists.apple.com/mailman/listinfo

Antwort2

Gehen Sie zu Ihrer VPN-Verbindung unter OSX, wählen Sie unter Authentifizierungseinstellungen „Keine“ und dann „Zertifikat“ (Ihr Zertifikat sollte angezeigt werden). Klicken Sie auf „Verbinden“, jetzt wird die Verbindung nicht mehr getrennt!

verwandte Informationen