Good day. I have an issue that spans both, Fedora 31 and Fedora 32. I have
installed NetworkManager-libreswan-gnome package to get IPsec XAUTH working
(with PSK).
When I connect, I see no errors and NetworkManager applet reports that
connection is established. Yet I have no internet connection after VPN
connection is allegedly established and I cannot access any resources on the
network behind gateway. I have an Android 9 phone with XAUTH VPN and the same
settings I have on my Fedora workstation and I have an internet and I can
access resources behind the gateway.
What should I do to get VPN working?
The journal does not report any issues:
Here's the output of the journal
---
Mar 26 19:36:39 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
STATE_MAIN_I2: sent MI2, expecting MR2
Mar 26 19:36:39 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
ignoring unknown Vendor ID payload [54e5043cf12b3c252ff3db185baa30a7]
Mar 26 19:36:39 attic pluto[1969]: | using MAC ops for appendix_b_keymat_e
Mar 26 19:36:39 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
STATE_MAIN_I3: sent MI3, expecting MR3
Mar 26 19:36:40 attic pluto[1969]: | protocol/port in Phase 1 ID Payload is
17/0. accepted with port_floating NAT-T
Mar 26 19:36:40 attic audit[1969]: CRYPTO_IKE_SA pid=1969 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:ipsec_t:s0 msg='op=start
direction=initiator conn-name="da766bbe-f8f8-47c9-8605-d1f973a9e423"
connstate=7 ike-version=1 auth=PRESHARED_KEY cipher=3des ksize=192 integ=sha1
prf=sha1>
Mar 26 19:36:40 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
Peer ID is ID_IPV4_ADDR: '180.235.156.4'
Mar 26 19:36:40 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
STATE_MAIN_I4: ISAKMP SA established {auth=PRESHARED_KEY cipher=3DES_CBC_192
integ=HMAC_SHA1 group=MODP1536}
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
XAUTH password requested, but no file descriptor available for prompt
Mar 26 19:36:41 attic audit[1969]: CRYPTO_IPSEC_SA pid=1969 uid=0
auid=4294967295 ses=4294967295 subj=system_u:system_r:ipsec_t:s0 msg='op=start
conn-name="da766bbe-f8f8-47c9-8605-d1f973a9e423" connstate=7,
satype=ipsec-policy samode=tunnel cipher=none ksize=0 integ=none
in-spi=0(0x00000000) out-s>
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
encountered fatal error in state STATE_MAIN_I4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> command
line: /usr/libexec/nm-libreswan-service-helper 7 4225
org.freedesktop.NetworkManager.libreswan.Connection_2
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: SPI_OUT=0x0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: VTI_SHARED=no
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_CFG_CLIENT=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_CFG_SERVER=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_USERNAME=Bogdan.Vatulya
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_CONN_ADDRFAMILY=ipv4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_STACK=netkey
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_ID=180.235.156.4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER=180.235.156.4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MY_PORT=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MY_CLIENT_NET=10.61.191.194
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MY_CLIENT=10.61.191.194/32
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_XFRMI_ROUTE=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_CONNECTION=da766bbe-f8f8-47c9-8605-d1f973a9e423
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_VERSION=2.0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: SPI_IN=0x0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_BANNER=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MY_SOURCEIP=10.61.191.194
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_CLIENT_MASK=0.0.0.0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MY_PROTOCOL=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_INTERFACE=enp11s0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_VIRT_INTERFACE=enp11s0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_NM_CONFIGURED=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_DOMAIN_INFO=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MOBIKE_EVENT=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_ADDTIME=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_PORT=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_CLIENT_NET=0.0.0.0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_CLIENT=0.0.0.0/0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_SA_REQID=16388
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MY_ID=192.168.8.100
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_ME=192.168.8.100
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: VTI_ROUTING=no
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: VTI_IFACE=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_DNS_INFO=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_IS_PEER_CISCO=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: XAUTH_FAILED=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_CONN_KIND=CK_PERMANENT
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment:
PLUTO_CONN_POLICY=PSK+ENCRYPT+TUNNEL+PFS+UP+XAUTH+MODECFG_PULL+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_CA=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_PEER_PROTOCOL=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_SA_TYPE=unknown?
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_MY_CLIENT_MASK=255.255.255.255
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_NEXT_HOP=192.168.8.1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PLUTO_VERB=disconnectNM-client
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: WATCHDOG_USEC=200000000
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PWD=/run/pluto
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: LANG=en_AU.UTF-8
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: INVOCATION_ID=88c9211316944d66853118803854521c
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: WATCHDOG_PID=1969
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: NOTIFY_SOCKET=/run/systemd/notify
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: SHLVL=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: JOURNAL_STREAM=9:45132
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug>
environment: _=/usr/libexec/nm-libreswan-service-helper
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0484]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: VPN connection: (IP4 Config Get) reply received
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: VPN Gateway: 180.235.156.4
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Tunnel Device: (null)
Mar 26 19:36:41 attic audit[1969]: CRYPTO_IKE_SA pid=1969 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:ipsec_t:s0 msg='op=destroy
direction=initiator conn-name="da766bbe-f8f8-47c9-8605-d1f973a9e423"
connstate=7 ike-version=1 auth=PRESHARED_KEY cipher=3des ksize=192 integ=sha1
prf=sh>
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
deleting state (STATE_MAIN_I4) aged 1.452s and sending notification
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: IPv4 configuration:
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
deleting IKE SA but connection is supposed to remain up; schedule
EVENT_REVIVE_CONNS
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Gateway: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Address: 10.61.191.194
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Prefix: 32
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Point-to-Point Address: 10.61.191.194
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 0.0.0.0/1 Next Hop: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 128.0.0.0/1 Next Hop: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 0.0.0.0/0 Next Hop: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 192.168.8.1/32 Next Hop: 0.0.0.0
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: DNS Domain: '(none)'
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: No IPv6 configuration
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0488]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: VPN connection: (IP Config Get) complete
Mar 26 19:36:41 attic systemd[1]: dbus-:1.7-org.freedesktop.problems@0.service:
Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
