июн 19 09:05:38 yarilo NetworkManager[1278]: [1718777138.1664] audit: op="statistics" interface="eth2" ifindex=3 args="2000" pid=21511 uid=500 result="success" июн 19 09:05:38 yarilo NetworkManager[1278]: [1718777138.1708] audit: op="statistics" interface="wlan0" ifindex=2 args="2000" pid=21511 uid=500 result="success" июн 19 09:05:40 yarilo plasmashell[21511]: QDBusObjectPath: invalid path "" июн 19 09:05:40 yarilo NetworkManager[1278]: [1718777140.6779] vpn[0x55e06bc88d70,f2bc4893-9323-419a-9405-7e1fb0d4b86e,"Сафьяново"]: starting l2tp июн 19 09:05:40 yarilo NetworkManager[1278]: [1718777140.6786] audit: op="connection-activate" uuid="f2bc4893-9323-419a-9405-7e1fb0d4b86e" name="Сафьяново" pid=21511 uid=500 result="success" июн 19 09:05:40 yarilo kded5[21463]: org.kde.plasma.nm.kded: Unhandled VPN connection state change: NetworkManager::VpnConnection::NeedAuth июн 19 09:05:40 yarilo kded5[21463]: kf.networkmanagerqt: void NetworkManager::ConnectionPrivate::onPropertiesChanged(const QVariantMap&) Unhandled property "VersionId" июн 19 09:05:40 yarilo kded5[21463]: org.kde.plasma.nm.kded: Unhandled VPN connection state change: NetworkManager::VpnConnection::Connecting июн 19 09:05:40 yarilo plasmashell[21511]: kf.networkmanagerqt: void NetworkManager::ConnectionPrivate::onPropertiesChanged(const QVariantMap&) Unhandled property "VersionId" июн 19 09:05:40 yarilo nm-l2tp-service[22667]: Check port 1701 июн 19 09:05:40 yarilo NetworkManager[22681]: Stopping strongSwan IPsec failed: starter is not running июн 19 09:05:42 yarilo NetworkManager[22678]: Starting strongSwan 5.9.14 IPsec [starter]... июн 19 09:05:42 yarilo ipsec_starter[22678]: Starting strongSwan 5.9.14 IPsec [starter]... июн 19 09:05:42 yarilo NetworkManager[22678]: Loading config setup июн 19 09:05:42 yarilo NetworkManager[22678]: Loading conn 'f2bc4893-9323-419a-9405-7e1fb0d4b86e' июн 19 09:05:42 yarilo ipsec_starter[22678]: Loading config setup июн 19 09:05:42 yarilo ipsec_starter[22678]: Loading conn 'f2bc4893-9323-419a-9405-7e1fb0d4b86e' июн 19 09:05:42 yarilo ipsec_starter[22699]: Attempting to start charon... июн 19 09:05:42 yarilo charon[22700]: 00[DMN] Starting IKE charon daemon (strongSwan 5.9.14, Linux 6.6.33-un-def-alt1, x86_64) июн 19 09:05:42 yarilo charon[22700]: 00[CFG] PKCS11 module '' lacks library path июн 19 09:05:42 yarilo charon[22700]: 00[LIB] providers loaded by OpenSSL: legacy default июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'sqlite': failed to load - sqlite_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] created TUN device: ipsec0 июн 19 09:05:42 yarilo kernel: tun: Universal TUN/TAP device driver, 1.6 июн 19 09:05:42 yarilo charon[22700]: 00[CFG] using '/sbin/resolvconf' to install DNS servers июн 19 09:05:42 yarilo NetworkManager[1278]: [1718777142.8510] manager: (ipsec0): new Tun device (/org/freedesktop/NetworkManager/Devices/5) июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'eap-tnc': failed to load - eap_tnc_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo avahi-daemon[1134]: Joining mDNS multicast group on interface ipsec0.IPv6 with address fe80::331b:9967:7aad:748c. июн 19 09:05:42 yarilo avahi-daemon[1134]: New relevant interface ipsec0.IPv6 for mDNS. июн 19 09:05:42 yarilo avahi-daemon[1134]: Registering new address record for fe80::331b:9967:7aad:748c on ipsec0.*. июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnc-ifmap': failed to load - tnc_ifmap_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnc-pdp': failed to load - tnc_pdp_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnc-imc': failed to load - tnc_imc_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnc-imv': failed to load - tnc_imv_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnc-tnccs': failed to load - tnc_tnccs_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnccs-20': failed to load - tnccs_20_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnccs-11': failed to load - tnccs_11_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[LIB] plugin 'tnccs-dynamic': failed to load - tnccs_dynamic_plugin_create not found and no plugin file available июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loading ca certificates from '/etc/strongswan/ipsec.d/cacerts' июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loading aa certificates from '/etc/strongswan/ipsec.d/aacerts' июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loading ocsp signer certificates from '/etc/strongswan/ipsec.d/ocspcerts' июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loading attribute certificates from '/etc/strongswan/ipsec.d/acerts' июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loading crls from '/etc/strongswan/ipsec.d/crls' июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loading secrets from '/etc/strongswan/ipsec.secrets' июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loading secrets from '/etc/strongswan/ipsec.d/ipsec.nm-l2tp.secrets' июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loaded IKE secret for %any июн 19 09:05:42 yarilo charon[22700]: 00[CFG] opening triplet file /etc/strongswan/ipsec.d/triplets.dat failed: No such file or directory июн 19 09:05:42 yarilo charon[22700]: 00[CFG] loaded 0 RADIUS server configurations июн 19 09:05:42 yarilo charon[22700]: 00[CFG] HA config misses local/remote address июн 19 09:05:42 yarilo charon[22700]: 00[CFG] no script for ext-auth script defined, disabled июн 19 09:05:42 yarilo charon[22700]: 00[LIB] loaded plugins: charon ldap pkcs11 tpm aesni aes des rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints acert pubkey pkcs1 pkcs7 pkcs12 pgp dnskey sshkey pem openssl gcrypt pkcs8 fips-prf gmp curve25519 agent chapoly xcbc cmac hmac kdf ctr ccm gcm ntru drbg newhope curl attr kernel-libipsec kernel-netlink resolve socket-default farp stroke vici smp updown eap-identity eap-sim eap-sim-pcsc eap-aka eap-aka-3gpp eap-aka-3gpp2 eap-md5 eap-gtc eap-mschapv2 eap-dynamic eap-radius eap-tls eap-ttls eap-peap xauth-generic xauth-eap xauth-pam xauth-noauth dhcp led duplicheck addrblock unity counters июн 19 09:05:42 yarilo charon[22700]: 00[LIB] dropped capabilities, running as uid 0, gid 0 июн 19 09:05:42 yarilo charon[22700]: 00[JOB] spawning 16 worker threads июн 19 09:05:42 yarilo ipsec_starter[22699]: charon (22700) started after 40 ms июн 19 09:05:42 yarilo charon[22700]: 11[CFG] received stroke: add connection 'f2bc4893-9323-419a-9405-7e1fb0d4b86e' июн 19 09:05:42 yarilo charon[22700]: 11[CFG] added configuration 'f2bc4893-9323-419a-9405-7e1fb0d4b86e' июн 19 09:05:43 yarilo charon[22700]: 11[CFG] rereading secrets июн 19 09:05:43 yarilo charon[22700]: 11[CFG] loading secrets from '/etc/strongswan/ipsec.secrets' июн 19 09:05:43 yarilo charon[22700]: 11[CFG] loading secrets from '/etc/strongswan/ipsec.d/ipsec.nm-l2tp.secrets' июн 19 09:05:43 yarilo charon[22700]: 11[CFG] loaded IKE secret for %any июн 19 09:05:43 yarilo charon[22700]: 13[CFG] received stroke: initiate 'f2bc4893-9323-419a-9405-7e1fb0d4b86e' июн 19 09:05:43 yarilo charon[22700]: 15[IKE] initiating Main Mode IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] to xx.xxx.xx.xxx июн 19 09:05:43 yarilo charon[22700]: 15[IKE] initiating Main Mode IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] to xx.xxx.xx.xxx июн 19 09:05:43 yarilo charon[22700]: 15[ENC] generating ID_PROT request 0 [ SA V V V V V ] июн 19 09:05:43 yarilo charon[22700]: 15[NET] sending packet: from 172.17.192.38[500] to xx.xxx.xx.xxx[500] (216 bytes) июн 19 09:05:43 yarilo charon[22700]: 01[NET] received packet: from xx.xxx.xx.xxx[500] to 172.17.192.38[500] (160 bytes) июн 19 09:05:43 yarilo charon[22700]: 01[ENC] parsed ID_PROT response 0 [ SA V V V V ] июн 19 09:05:43 yarilo charon[22700]: 01[IKE] received NAT-T (RFC 3947) vendor ID июн 19 09:05:43 yarilo charon[22700]: 01[IKE] received XAuth vendor ID июн 19 09:05:43 yarilo charon[22700]: 01[IKE] received DPD vendor ID июн 19 09:05:43 yarilo charon[22700]: 01[IKE] received FRAGMENTATION vendor ID июн 19 09:05:43 yarilo charon[22700]: 01[CFG] selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024 июн 19 09:05:43 yarilo charon[22700]: 01[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ] июн 19 09:05:43 yarilo charon[22700]: 01[NET] sending packet: from 172.17.192.38[500] to xx.xxx.xx.xxx[500] (244 bytes) июн 19 09:05:44 yarilo charon[22700]: 12[NET] received packet: from xx.xxx.xx.xxx[500] to 172.17.192.38[500] (236 bytes) июн 19 09:05:44 yarilo charon[22700]: 12[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ] июн 19 09:05:44 yarilo charon[22700]: 12[IKE] local host is behind NAT, sending keep alives июн 19 09:05:44 yarilo charon[22700]: 12[ENC] generating ID_PROT request 0 [ ID HASH ] июн 19 09:05:44 yarilo charon[22700]: 12[NET] sending packet: from 172.17.192.38[4500] to xx.xxx.xx.xxx[4500] (76 bytes) июн 19 09:05:44 yarilo charon[22700]: 14[NET] received packet: from xx.xxx.xx.xxx[4500] to 172.17.192.38[4500] (76 bytes) июн 19 09:05:44 yarilo charon[22700]: 14[ENC] parsed ID_PROT response 0 [ ID HASH ] июн 19 09:05:44 yarilo charon[22700]: 14[IKE] IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] established between 172.17.192.38[172.17.192.38]...xx.xxx.xx.xxx[xx.xxx.xx.xxx] июн 19 09:05:44 yarilo charon[22700]: 14[IKE] IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] established between 172.17.192.38[172.17.192.38]...xx.xxx.xx.xxx[xx.xxx.xx.xxx] июн 19 09:05:44 yarilo charon[22700]: 14[IKE] scheduling reauthentication in 10238s июн 19 09:05:44 yarilo charon[22700]: 14[IKE] maximum IKE_SA lifetime 10778s июн 19 09:05:44 yarilo charon[22700]: 14[ENC] generating QUICK_MODE request 827676382 [ HASH SA No ID ID NAT-OA NAT-OA ] июн 19 09:05:44 yarilo charon[22700]: 14[NET] sending packet: from 172.17.192.38[4500] to xx.xxx.xx.xxx[4500] (204 bytes) июн 19 09:05:44 yarilo charon[22700]: 15[NET] received packet: from xx.xxx.xx.xxx[4500] to 172.17.192.38[4500] (188 bytes) июн 19 09:05:44 yarilo charon[22700]: 15[ENC] parsed QUICK_MODE response 827676382 [ HASH SA No ID ID NAT-OA NAT-OA ] июн 19 09:05:44 yarilo charon[22700]: 15[CFG] selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ июн 19 09:05:44 yarilo charon[22700]: 15[ESP] IPsec SA: unsupported mode июн 19 09:05:44 yarilo charon[22700]: 15[ESP] failed to create SAD entry июн 19 09:05:44 yarilo NetworkManager[22738]: initiating Main Mode IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] to xx.xxx.xx.xxx июн 19 09:05:44 yarilo NetworkManager[22738]: generating ID_PROT request 0 [ SA V V V V V ] июн 19 09:05:44 yarilo NetworkManager[22738]: sending packet: from 172.17.192.38[500] to xx.xxx.xx.xxx[500] (216 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: received packet: from xx.xxx.xx.xxx[500] to 172.17.192.38[500] (160 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: parsed ID_PROT response 0 [ SA V V V V ] июн 19 09:05:44 yarilo NetworkManager[22738]: received NAT-T (RFC 3947) vendor ID июн 19 09:05:44 yarilo NetworkManager[22738]: received XAuth vendor ID июн 19 09:05:44 yarilo NetworkManager[22738]: received DPD vendor ID июн 19 09:05:44 yarilo NetworkManager[22738]: received FRAGMENTATION vendor ID июн 19 09:05:44 yarilo NetworkManager[22738]: selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024 июн 19 09:05:44 yarilo NetworkManager[22738]: generating ID_PROT request 0 [ KE No NAT-D NAT-D ] июн 19 09:05:44 yarilo NetworkManager[22738]: sending packet: from 172.17.192.38[500] to xx.xxx.xx.xxx[500] (244 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: received packet: from xx.xxx.xx.xxx[500] to 172.17.192.38[500] (236 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: parsed ID_PROT response 0 [ KE No NAT-D NAT-D ] июн 19 09:05:44 yarilo NetworkManager[22738]: local host is behind NAT, sending keep alives июн 19 09:05:44 yarilo NetworkManager[22738]: generating ID_PROT request 0 [ ID HASH ] июн 19 09:05:44 yarilo NetworkManager[22738]: sending packet: from 172.17.192.38[4500] to xx.xxx.xx.xxx[4500] (76 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: received packet: from xx.xxx.xx.xxx[4500] to 172.17.192.38[4500] (76 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: parsed ID_PROT response 0 [ ID HASH ] июн 19 09:05:44 yarilo NetworkManager[22738]: IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] established between 172.17.192.38[172.17.192.38]...xx.xxx.xx.xxx[xx.xxx.xx.xxx] июн 19 09:05:44 yarilo NetworkManager[22738]: scheduling reauthentication in 10238s июн 19 09:05:44 yarilo NetworkManager[22738]: maximum IKE_SA lifetime 10778s июн 19 09:05:44 yarilo NetworkManager[22738]: generating QUICK_MODE request 827676382 [ HASH SA No ID ID NAT-OA NAT-OA ] июн 19 09:05:44 yarilo NetworkManager[22738]: sending packet: from 172.17.192.38[4500] to xx.xxx.xx.xxx[4500] (204 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: received packet: from xx.xxx.xx.xxx[4500] to 172.17.192.38[4500] (188 bytes) июн 19 09:05:44 yarilo NetworkManager[22738]: parsed QUICK_MODE response 827676382 [ HASH SA No ID ID NAT-OA NAT-OA ] июн 19 09:05:44 yarilo NetworkManager[22738]: selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ июн 19 09:05:44 yarilo NetworkManager[22738]: IPsec SA: unsupported mode июн 19 09:05:44 yarilo NetworkManager[22738]: failed to create SAD entry июн 19 09:05:44 yarilo NetworkManager[22738]: IPsec SA: unsupported mode июн 19 09:05:44 yarilo NetworkManager[22738]: failed to create SAD entry июн 19 09:05:44 yarilo NetworkManager[22738]: unable to install inbound and outbound IPsec SA (SAD) in kernel июн 19 09:05:44 yarilo NetworkManager[22738]: establishing connection 'f2bc4893-9323-419a-9405-7e1fb0d4b86e' failed июн 19 09:05:44 yarilo charon[22700]: 15[ESP] IPsec SA: unsupported mode июн 19 09:05:44 yarilo charon[22700]: 15[ESP] failed to create SAD entry июн 19 09:05:44 yarilo charon[22700]: 15[IKE] unable to install inbound and outbound IPsec SA (SAD) in kernel июн 19 09:05:44 yarilo charon[22700]: 15[ENC] generating INFORMATIONAL_V1 request 1296478391 [ HASH N(NO_PROP) ] июн 19 09:05:44 yarilo charon[22700]: 15[NET] sending packet: from 172.17.192.38[4500] to xx.xxx.xx.xxx[4500] (76 bytes) июн 19 09:05:44 yarilo NetworkManager[22745]: Stopping strongSwan IPsec... июн 19 09:05:44 yarilo charon[22700]: 00[DMN] SIGINT received, shutting down июн 19 09:05:44 yarilo charon[22700]: 00[IKE] deleting IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] between 172.17.192.38[172.17.192.38]...xx.xxx.xx.xxx[xx.xxx.xx.xxx] июн 19 09:05:44 yarilo charon[22700]: 00[IKE] deleting IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] between 172.17.192.38[172.17.192.38]...xx.xxx.xx.xxx[xx.xxx.xx.xxx] июн 19 09:05:44 yarilo charon[22700]: 00[IKE] sending DELETE for IKE_SA f2bc4893-9323-419a-9405-7e1fb0d4b86e[1] июн 19 09:05:44 yarilo charon[22700]: 00[ENC] generating INFORMATIONAL_V1 request 647635 [ HASH D ] июн 19 09:05:44 yarilo charon[22700]: 00[NET] sending packet: from 172.17.192.38[4500] to xx.xxx.xx.xxx[4500] (92 bytes) июн 19 09:05:44 yarilo avahi-daemon[1134]: Interface ipsec0.IPv6 no longer relevant for mDNS. июн 19 09:05:44 yarilo avahi-daemon[1134]: Leaving mDNS multicast group on interface ipsec0.IPv6 with address fe80::331b:9967:7aad:748c. июн 19 09:05:44 yarilo avahi-daemon[1134]: Withdrawing address record for fe80::331b:9967:7aad:748c on ipsec0. июн 19 09:05:44 yarilo ipsec_starter[22699]: child 22700 (charon) has quit (exit code 0) июн 19 09:05:44 yarilo ipsec_starter[22699]: июн 19 09:05:44 yarilo ipsec_starter[22699]: charon stopped after 200 ms июн 19 09:05:44 yarilo ipsec_starter[22699]: ipsec starter stopped июн 19 09:05:44 yarilo nm-l2tp-service[22667]: Could not establish IPsec connection.