☰

如何調試 VPN 連線問題 (13.10)

tag-icon • tag-icon 13.10 network-manager vpn ppp
如何調試 VPN 連線問題 (13.10)

我嘗試連線到工作 VPN，但每次嘗試連線都會失敗。 VPN 已在網路管理器 UI 中配置，並且連線也從那裡啟動。我檢查了系統日誌並看到以下內容：

Jan 28 08:29:09 cwlt NetworkManager[751]: <info> Starting VPN service 'pptp'...
Jan 28 08:29:09 cwlt NetworkManager[751]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 6383
Jan 28 08:29:09 cwlt NetworkManager[751]: <info> VPN service 'pptp' appeared; activating connections
Jan 28 08:29:09 cwlt NetworkManager[751]: <info> VPN plugin state changed: starting (3)
Jan 28 08:29:09 cwlt NetworkManager[751]: <info> VPN connection 'VPN' (Connect) reply received.
Jan 28 08:29:09 cwlt pppd[6387]: Plugin /usr/lib/pppd/2.4.5/nm-pptp-pppd-plugin.so loaded.
Jan 28 08:29:09 cwlt pppd[6387]: pppd 2.4.5 started by root, uid 0
Jan 28 08:29:09 cwlt pppd[6387]: using channel 10
Jan 28 08:29:09 cwlt pppd[6387]: Using interface ppp0
Jan 28 08:29:09 cwlt pppd[6387]: Connect: ppp0 <--> /dev/pts/4
Jan 28 08:29:09 cwlt NetworkManager[751]:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jan 28 08:29:09 cwlt NetworkManager[751]:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Jan 28 08:29:09 cwlt NetworkManager[751]: <warn> /sys/devices/virtual/net/ppp0: couldn't determine device driver; ignoring...
Jan 28 08:29:09 cwlt pptp[6391]: nm-pptp-service-6383 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Jan 28 08:29:09 cwlt whoopsie[1138]: online
Jan 28 08:29:09 cwlt pptp[6405]: nm-pptp-service-6383 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jan 28 08:29:09 cwlt pptp[6405]: nm-pptp-service-6383 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Jan 28 08:29:09 cwlt pptp[6405]: nm-pptp-service-6383 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Jan 28 08:29:10 cwlt pptp[6405]: nm-pptp-service-6383 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jan 28 08:29:10 cwlt whoopsie[1138]: online
Jan 28 08:29:10 cwlt pptp[6405]: nm-pptp-service-6383 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Jan 28 08:29:10 cwlt pptp[6405]: nm-pptp-service-6383 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 42341).
Jan 28 08:29:49 cwlt NetworkManager[751]: <warn> VPN connection 'Fluency Labs VPN' (IP Config Get) timeout exceeded.
Jan 28 08:29:49 cwlt NetworkManager[751]: <info> Policy set 'VM529841-5G' (eth1) as default for IPv4 routing and DNS.
Jan 28 08:29:49 cwlt pppd[6387]: Terminating on signal 15
Jan 28 08:29:49 cwlt pppd[6387]: Connection terminated.
Jan 28 08:29:49 cwlt avahi-daemon[709]: Withdrawing workstation service for ppp0.
Jan 28 08:29:49 cwlt NetworkManager[751]:    SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jan 28 08:29:49 cwlt pppd[6387]: Child process /usr/sbin/pptp xxx.xxx.xxx.xxx --nolaunchpppd --loglevel 0 --logstring nm-pptp-service-6383 (pid 6389) terminated with signal 15
Jan 28 08:29:49 cwlt pppd[6387]: Exit.
Jan 28 08:29:49 cwlt pptp[6391]: nm-pptp-service-6383 warn[decaps_hdlc:pptp_gre.c:204]: short read (-1): Input/output error
Jan 28 08:29:49 cwlt pptp[6391]: nm-pptp-service-6383 warn[decaps_hdlc:pptp_gre.c:216]: pppd may have shutdown, see pppd log
Jan 28 08:29:49 cwlt pptp[6405]: nm-pptp-service-6383 log[callmgr_main:pptp_callmgr.c:234]: Closing connection (unhandled)
Jan 28 08:29:49 cwlt pptp[6405]: nm-pptp-service-6383 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Jan 28 08:29:49 cwlt pptp[6405]: nm-pptp-service-6383 log[call_callback:pptp_callmgr.c:79]: Closing connection (call state)
Jan 28 08:29:54 cwlt NetworkManager[751]: <info> VPN service 'pptp' disappeared

我故意在這裡隱藏了 IP 位址，所以不用擔心。我真的不知道這裡出了什麼問題，所以如果有人能指出我正確的方向，那就太好了。

答案1

回答你的問題標題與你的具體問題有點不同。我先回答問題標題：如何調試 VPN 連線問題？

  1. 首先，您需要透過傳遞 debug 選項在偵錯模式下執行 pppd。
sudo grep debug /etc/rsyslog.d/*

輸出可能是這樣的：

 /etc/rsyslog.d/50-default.conf:#*.=debug;\
 /etc/rsyslog.d/50-default.conf:#   news.none;mail.none -/var/log/debug
 /etc/rsyslog.d/50-default.conf:#   *.=debug;*.=info;\
 /etc/rsyslog.d/50-default.conf:    *.=debug;*.=info;\

所以/var/日誌/調試是你的調試檔。

  1. 使用偵錯選項啟動 pppd

sudo pppd 偵錯呼叫 /path/to/yourvpn.vpn

  1. 觀看調試日誌

尾-f /var/log/debug

答案2

現在讓我回答您的具體問題。

因為您的日誌中似乎有一些警告。我將嘗試對它們進行一一調查。

  1. 你有一句話說：

NetworkManager[751]：策略集「VM529841-5G」(eth1) 作為 IPv4 路由和 DNS 的預設值。

我假設 VPN 應該使用隧道介面而不是 ethernet1。因此，請嘗試在網路連線 -> VPN -> 編輯 -> Ipv4 設定標籤 -> 路由中取消選取「僅將此連線用於其網路上的資源」。

  1. 另一行說：

VPN 連線「Fluency Labs VPN」（IP Config Get）逾時

從 /etc/nsswitch.conf 主機行中刪除 Wins 項目

  1. 另一行說：

/sys/devices/virtual/net/ppp0: 無法確定裝置驅動程式；忽略...

下列的這個問題看起來 libgcrypt11=1.5.0-3ubuntu2.2 一定有 bug。回滾到 libgcrypt11=1.5.0-3ubuntu2.1 後，一切又恢復正常了...

sudo apt-get install libgcrypt11=1.5.0-3ubuntu2.1

我希望這能拯救你

相關內容