3:57 a.m.
Good day. I have an issue that spans both, Fedora 31 and Fedora 32. I have installed
NetworkManager-libreswan-gnome package to get IPsec XAUTH working (with PSK).
When I connect, I see no errors and NetworkManager applet reports that connection is
established. Yet I have no internet connection after VPN connection is allegedly
established and I cannot access any resources on the network behind gateway. I have an
Android 9 phone with XAUTH VPN and the same settings I have on my Fedora workstation and I
have an internet and I can access resources behind the gateway.
What should I do to get VPN working?
The journal does not report any issues:
Here's the output of the journal
---
Mar 26 19:36:39 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
STATE_MAIN_I2: sent MI2, expecting MR2
Mar 26 19:36:39 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
ignoring unknown Vendor ID payload [54e5043cf12b3c252ff3db185baa30a7]
Mar 26 19:36:39 attic pluto[1969]: | using MAC ops for appendix_b_keymat_e
Mar 26 19:36:39 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
STATE_MAIN_I3: sent MI3, expecting MR3
Mar 26 19:36:40 attic pluto[1969]: | protocol/port in Phase 1 ID Payload is 17/0. accepted
with port_floating NAT-T
Mar 26 19:36:40 attic audit[1969]: CRYPTO_IKE_SA pid=1969 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:ipsec_t:s0 msg='op=start direction=initiator
conn-name="da766bbe-f8f8-47c9-8605-d1f973a9e423" connstate=7 ike-version=1
auth=PRESHARED_KEY cipher=3des ksize=192 integ=sha1 prf=sha1>
Mar 26 19:36:40 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
Peer ID is ID_IPV4_ADDR: '180.235.156.4'
Mar 26 19:36:40 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
STATE_MAIN_I4: ISAKMP SA established {auth=PRESHARED_KEY cipher=3DES_CBC_192
integ=HMAC_SHA1 group=MODP1536}
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
XAUTH password requested, but no file descriptor available for prompt
Mar 26 19:36:41 attic audit[1969]: CRYPTO_IPSEC_SA pid=1969 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:ipsec_t:s0 msg='op=start
conn-name="da766bbe-f8f8-47c9-8605-d1f973a9e423" connstate=7,
satype=ipsec-policy samode=tunnel cipher=none ksize=0 integ=none in-spi=0(0x00000000)
out-s>
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
encountered fatal error in state STATE_MAIN_I4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> command line:
/usr/libexec/nm-libreswan-service-helper 7 4225
org.freedesktop.NetworkManager.libreswan.Connection_2
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
SPI_OUT=0x0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
VTI_SHARED=no
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_CFG_CLIENT=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_CFG_SERVER=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_USERNAME=Bogdan.Vatulya
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_CONN_ADDRFAMILY=ipv4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_STACK=netkey
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_ID=180.235.156.4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER=180.235.156.4
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MY_PORT=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MY_CLIENT_NET=10.61.191.194
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MY_CLIENT=10.61.191.194/32
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_XFRMI_ROUTE=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_CONNECTION=da766bbe-f8f8-47c9-8605-d1f973a9e423
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_VERSION=2.0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
SPI_IN=0x0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_BANNER=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MY_SOURCEIP=10.61.191.194
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_CLIENT_MASK=0.0.0.0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MY_PROTOCOL=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_INTERFACE=enp11s0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_VIRT_INTERFACE=enp11s0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_NM_CONFIGURED=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_DOMAIN_INFO=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MOBIKE_EVENT=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_ADDTIME=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_PORT=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_CLIENT_NET=0.0.0.0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_CLIENT=0.0.0.0/0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_SA_REQID=16388
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MY_ID=192.168.8.100
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_ME=192.168.8.100
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
VTI_ROUTING=no
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
VTI_IFACE=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_DNS_INFO=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_IS_PEER_CISCO=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
XAUTH_FAILED=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_CONN_KIND=CK_PERMANENT
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_CONN_POLICY=PSK+ENCRYPT+TUNNEL+PFS+UP+XAUTH+MODECFG_PULL+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_CA=
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_PEER_PROTOCOL=0
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_SA_TYPE=unknown?
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_MY_CLIENT_MASK=255.255.255.255
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_NEXT_HOP=192.168.8.1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PLUTO_VERB=disconnectNM-client
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
WATCHDOG_USEC=200000000
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PWD=/run/pluto
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
LANG=en_AU.UTF-8
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
INVOCATION_ID=88c9211316944d66853118803854521c
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
WATCHDOG_PID=1969
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
NOTIFY_SOCKET=/run/systemd/notify
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
SHLVL=1
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
JOURNAL_STREAM=9:45132
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
disconnectNM-client output: nm-libreswan-helper[4225,5086]: <debug> environment:
_=/usr/libexec/nm-libreswan-service-helper
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0484]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: VPN connection: (IP4 Config Get) reply received
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: VPN Gateway: 180.235.156.4
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Tunnel Device: (null)
Mar 26 19:36:41 attic audit[1969]: CRYPTO_IKE_SA pid=1969 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:ipsec_t:s0 msg='op=destroy direction=initiator
conn-name="da766bbe-f8f8-47c9-8605-d1f973a9e423" connstate=7 ike-version=1
auth=PRESHARED_KEY cipher=3des ksize=192 integ=sha1 prf=sh>
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
deleting state (STATE_MAIN_I4) aged 1.452s and sending notification
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: IPv4 configuration:
Mar 26 19:36:41 attic pluto[1969]: "da766bbe-f8f8-47c9-8605-d1f973a9e423" #7:
deleting IKE SA but connection is supposed to remain up; schedule EVENT_REVIVE_CONNS
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Gateway: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Address: 10.61.191.194
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Prefix: 32
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Internal Point-to-Point Address: 10.61.191.194
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 0.0.0.0/1 Next Hop: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0486]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 128.0.0.0/1 Next Hop: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 0.0.0.0/0 Next Hop: 192.168.8.1
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: Static Route: 192.168.8.1/32 Next Hop: 0.0.0.0
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: DNS Domain: '(none)'
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0487]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: Data: No IPv6 configuration
Mar 26 19:36:41 attic NetworkManager[1079]: <info> [1585211801.0488]
vpn-connection[0x555ddd4d20f0,da766bbe-f8f8-47c9-8605-d1f973a9e423,"WTG
XAUTH",0]: VPN connection: (IP Config Get) complete
Mar 26 19:36:41 attic systemd[1]: dbus-:1.7-org.freedesktop.problems@0.service:
Succeeded.
-- Subject: Unit succeeded
-- Defined-By: systemd
-- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel