4.0 Alpha 4: Отвал IKEv2 на KN-1111

[Veter_ARH]

KN-1111 4.0 Alpha 4

Белый IP, режим работы (IPv4): авто (Включен прямой доступ). 

Сыплет вот такие ошибки.

Янв 25 16:12:22 ipsec
06[CFG] selected peer config 'VirtualIPServerIKE2'
Янв 25 16:12:22 ipsec
06[IKE] initiating EAP_IDENTITY method (id 0x00)
Янв 25 16:12:22 ipsec
06[IKE] peer supports MOBIKE, but disabled in config
Янв 25 16:12:22 ipsec
06[IKE] authentication of '****.keenetic.pro' (myself) with RSA signature successful
Янв 25 16:12:22 ipsec
06[IKE] sending end entity cert "CN=****.keenetic.pro"
Янв 25 16:12:22 ipsec
06[IKE] sending issuer cert "C=US, O=Let's Encrypt, CN=R3"
Янв 25 16:12:22 ipsec
08[IKE] received retransmit of request with ID 1, retransmitting response
Янв 25 16:12:22 ipsec
08[IKE] received message ID 1, expected 2, ignored
Янв 25 16:12:22 ipsec
09[IKE] received message ID 1, expected 2, ignored
Янв 25 16:12:23 ipsec
05[IKE] received retransmit of request with ID 1, retransmitting response
Янв 25 16:12:23 ipsec
05[IKE] received message ID 1, expected 2, ignored
Янв 25 16:12:23 ipsec
06[IKE] received message ID 1, expected 2, ignored
Янв 25 16:12:35 ndnproxy
answer from wrong socket, ignore.

 

[Veter_ARH]

На других роутерах с данной версией прошивки нет такой проблемы

[Veter_ARH]

self-test в скрытом сообщении

[Veter_ARH]

Не исправлено в  KN-1111 4.00.A.5.0-0

 

Янв 29 22:04:05 ipsec
07[CFG] selected proposal: IKE:AES_CBC=128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024
Янв 29 22:04:05 ipsec
07[IKE] remote host is behind NAT
Янв 29 22:04:05 ipsec
06[IKE] received 41 cert requests for an unknown ca
Янв 29 22:04:05 ipsec
06[CFG] looking for peer configs matching 127.0.0.1[%any]...95.***.***.***[172.17.0.89]
Янв 29 22:04:05 ipsec
06[CFG] selected peer config 'VirtualIPServerIKE2'
Янв 29 22:04:05 ipsec
06[IKE] initiating EAP_IDENTITY method (id 0x00)
Янв 29 22:04:05 ipsec
06[IKE] peer supports MOBIKE, but disabled in config
Янв 29 22:04:05 ipsec
06[IKE] authentication of '***.keenetic.pro' (myself) with RSA signature successful
Янв 29 22:04:05 ipsec
06[IKE] sending end entity cert "CN=***.keenetic.pro"
Янв 29 22:04:05 ipsec
06[IKE] sending issuer cert "C=US, O=Let's Encrypt, CN=R3"
Янв 29 22:04:06 ipsec
07[IKE] received retransmit of request with ID 1, retransmitting response
Янв 29 22:04:06 ipsec
07[IKE] received message ID 1, expected 2, ignored
Янв 29 22:04:06 ipsec
09[IKE] received message ID 1, expected 2, ignored
Янв 29 22:04:07 ipsec
06[IKE] received retransmit of request with ID 1, retransmitting response
Янв 29 22:04:07 ipsec
06[IKE] received message ID 1, expected 2, ignored
Янв 29 22:04:07 ipsec
05[IKE] received message ID 1, expected 2, ignored
Янв 29 22:04:35 ipsec
07[JOB] deleting half open IKE_SA with 95.**.**.** after timeout

 

Изменено 29 января, 2023 пользователем Veter_ARH