Пошук по сайту

Здравствуйте! Помогите настроить L2TP/IPsec VPN на pfSense. Есть свежеустановленная тестовая машина с pfSense: 2.3.2-RELEASE (i386) built on Tue Jul 19 13:09:39 CDT 2016 FreeBSD 10.3-RELEASE-p5 WAN IP: 62.216.xx.xx LAN IP (DHCP - disabled): 192.168.1.5 Настраивал по мануалу Логи pfsense: Oct 1 02:03:13 charon 10[NET] <13> received packet: from 89.252.xx.xx[500] to 62.216.xx.xx[500] (408 bytes) Oct 1 02:03:13 charon 10[ENC] <13> parsed ID_PROT request 0 [ SA V V V V V V V V ] Oct 1 02:03:13 charon 10[ENC] <13> received unknown vendor ID: 01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:01 Oct 1 02:03:13 charon 10[IKE] <13> received MS NT5 ISAKMPOAKLEY vendor ID Oct 1 02:03:13 charon 10[IKE] <13> received NAT-T (RFC 3947) vendor ID Oct 1 02:03:13 charon 10[IKE] <13> received draft-ietf-ipsec-nat-t-ike-02\n vendor ID Oct 1 02:03:13 charon 10[IKE] <13> received FRAGMENTATION vendor ID Oct 1 02:03:13 charon 10[ENC] <13> received unknown vendor ID: fb:1d:e3:cd:f3:41:b7:ea:16:b7:e5:be:08:55:f1:20 Oct 1 02:03:13 charon 10[ENC] <13> received unknown vendor ID: 26:24:4d:38:ed:db:61:b3:17:2a:36:e3:d0:cf:b8:19 Oct 1 02:03:13 charon 10[ENC] <13> received unknown vendor ID: e3:a5:96:6a:76:37:9f:e7:07:22:82:31:e5:ce:86:52 Oct 1 02:03:13 charon 10[IKE] <13> 89.252.xx.xx is initiating a Main Mode IKE_SA Oct 1 02:03:13 charon 10[ENC] <13> generating ID_PROT response 0 [ SA V V V V ] Oct 1 02:03:13 charon 10[NET] <13> sending packet: from 62.216.xx.xx[500] to 89.252.xx.xx[500] (160 bytes) Oct 1 02:03:13 charon 10[NET] <13> received packet: from 89.252.xx.xx[500] to 62.216.xx.xx[500] (388 bytes) Oct 1 02:03:13 charon 10[ENC] <13> parsed ID_PROT request 0 [ KE No NAT-D NAT-D ] Oct 1 02:03:13 charon 10[IKE] <13> remote host is behind NAT Oct 1 02:03:13 charon 10[ENC] <13> generating ID_PROT response 0 [ KE No NAT-D NAT-D ] Oct 1 02:03:13 charon 10[NET] <13> sending packet: from 62.216.xx.xx[500] to 89.252.xx.xx[500] (372 bytes) Oct 1 02:03:13 charon 10[NET] <13> received packet: from 89.252.xx.xx[4500] to 62.216.xx.xx[4500] (76 bytes) Oct 1 02:03:13 charon 10[ENC] <13> parsed ID_PROT request 0 [ ID HASH ] Oct 1 02:03:13 charon 10[CFG] <13> looking for pre-shared key peer configs matching 62.216.xx.xx...89.252.xx.xx[192.168.5.104] Oct 1 02:03:13 charon 10[CFG] <13> selected peer config "con1" Oct 1 02:03:13 charon 10[IKE] <con1|13> IKE_SA con1[13] established between 62.216.xx.xx[62.216.xx.xx]...89.252.xx.xx[192.168.5.104] Oct 1 02:03:13 charon 10[IKE] <con1|13> scheduling reauthentication in 28143s Oct 1 02:03:13 charon 10[IKE] <con1|13> maximum IKE_SA lifetime 28683s Oct 1 02:03:13 charon 10[IKE] <con1|13> DPD not supported by peer, disabled Oct 1 02:03:13 charon 10[ENC] <con1|13> generating ID_PROT response 0 [ ID HASH ] Oct 1 02:03:13 charon 10[NET] <con1|13> sending packet: from 62.216.xx.xx[4500] to 89.252.xx.xx[4500] (76 bytes) Oct 1 02:03:13 charon 15[NET] <con1|13> received packet: from 89.252.xx.xx[4500] to 62.216.xx.xx[4500] (332 bytes) Oct 1 02:03:13 charon 15[ENC] <con1|13> parsed QUICK_MODE request 1 [ HASH SA No ID ID NAT-OA NAT-OA ] Oct 1 02:03:13 charon 15[IKE] <con1|13> received 250000000 lifebytes, configured 0 Oct 1 02:03:13 charon 15[ENC] <con1|13> generating QUICK_MODE response 1 [ HASH SA No ID ID NAT-OA NAT-OA ] Oct 1 02:03:13 charon 15[NET] <con1|13> sending packet: from 62.216.xx.xx[4500] to 89.252.xx.xx[4500] (204 bytes) Oct 1 02:03:13 charon 15[NET] <con1|13> received packet: from 89.252.xx.xx[4500] to 62.216.xx.xx[4500] (60 bytes) Oct 1 02:03:13 charon 15[ENC] <con1|13> parsed QUICK_MODE request 1 [ HASH ] Oct 1 02:03:13 charon 15[IKE] <con1|13> CHILD_SA con1{6} established with SPIs c1421d55_i a0ce5dca_o and TS 62.216.xx.xx/32|/0[udp/l2f] === 89.252.xx.xx/32|/0[udp/l2f] Oct 1 02:03:48 charon 15[NET] <con1|13> received packet: from 89.252.xx.xx[4500] to 62.216.xx.xx[4500] (76 bytes) Oct 1 02:03:48 charon 15[ENC] <con1|13> parsed INFORMATIONAL_V1 request 4256905100 [ HASH D ] Oct 1 02:03:48 charon 15[IKE] <con1|13> received DELETE for ESP CHILD_SA with SPI a0ce5dca Oct 1 02:03:48 charon 15[IKE] <con1|13> closing CHILD_SA con1{6} with SPIs c1421d55_i (756 bytes) a0ce5dca_o (0 bytes) and TS 62.216.xx.xx/32|/0[udp/l2f] === 89.252.xx.xx/32|/0[udp/l2f] Oct 1 02:03:48 charon 05[NET] <con1|13> received packet: from 89.252.xx.xx[4500] to 62.216.xx.xx[4500] (92 bytes) Oct 1 02:03:48 charon 05[ENC] <con1|13> parsed INFORMATIONAL_V1 request 3672929147 [ HASH D ] Oct 1 02:03:48 charon 05[IKE] <con1|13> received DELETE for IKE_SA con1[13] Oct 1 02:03:48 charon 05[IKE] <con1|13> deleting IKE_SA con1[13] between 62.216.xx.xx[62.216.xx.xx]...89.252.xx.xx[192.168.5.104] В винде при подключении ошибка: Не удалось установить связь по сети между компьютером и ВПН-сервером, так как удаленный сервер не отвечает. Возможная причина: одно из сетевых устройств не настроено для разрешения ВПН подключений... Роутер перед клиентским ноутбуком 100% пропускает ВПН трафик, так как успешно подключается к другому L2TP/IPsec VPN-серверу. Подскажите в чем может быть проблема?

В наличии следующие конфигурации: 1. На базе Lanner FW-7541 (Intel Atom 1.8 GHz CPU, 2Gb DDR3 SODIMM, 4Gb Industrial SLC Compact Flash, 6 GbE network ports, Two USB 2.0 Ports, One RJ45 COM Port (Console), One miniPCI-e slot with SIM carrier, питание 12V, 5A, б/п в комплекте, высота 1U, кронштейн для установки в стойку в комплекте) - 6 штук - по 480$/шт 2. На базе Lanner FW-7541 (Intel Atom 1.8 GHz CPU, 2Gb DDR3 SODIMM, 60 Gb Crucial SSD, 6 GbE network ports, Two USB 2.0 Ports, One RJ45 COM Port (Console), One miniPCI-e slot with SIM carrier, питание 12V, 5A, б/п в комплекте, высота 1U, кронштейн для установки в стойку в комплекте) - 2 штуки - по 520$/шт 3. PFW201 (Atom N270 1.6 GHz, 1Gb DDR2 SODIMM, 4Gb Industrial SLC Compact Flash, 4 GbE network ports, Two USB 2.0 Ports, VGA, питание 30Watt, 12V DC, б/п в комплекте) - 3 штуки - по 430$/шт 4. PFW201R (Core 2 Duo 1.6GHz, 2GB DDR2, 4Gb Industrial SLC Compact Flash, 4 x Intel 1Gbps NICs + 4 x Realtek 10/100Mbs, miniPCI VPN Accelerator card, Two USB 2.0 Ports, VGA, высота 1U) - 2 штуки - по 750$/шт 5. Phoenix Server (1.9Ghz Intel Celeron G465, 4GB DDR3, 2Gb Compact Flash, 5 GbE Realtek network ports, питание 45W) - 2 штуки - по 580$/шт 6. Phoenix Server (1.9Ghz Intel Celeron G465, 4GB DDR3, 120Gb MLC SSD, 5 GbE Realtek network ports, питание 45W) - 1 штука - 640$ 7. Mercury IV Server (2.8Ghz Intel Dual-Core i3-3220T, 8GB DDR3, 120Gb MLC SSD, 5 GbE Realtek network ports, питание 45W) - 3 штуки - по 880$/шт 8. Mercury IV Server (2.8Ghz Intel Dual-Core i3-3220T, 16GB DDR3, 120Gb MLC SSD, 5 GbE Realtek network ports, питание 45W) - 1 штука - 950$ 9. Mars III Server (2.9Ghz Intel Quad-Core i5-3470S, 8GB DDR3, 120Gb MLC SSD, 1 x Realtek + 4 x Intel GbE ports, питание 90W) - 1 штука - 1300$ Тел: 093-758-2555 Андрей

Модель - Lanner Electronix FW-7541D CPU: Intel® Atom™ D525 1.8GHz Dualcore Chipset: Intel® ICH8M RAM: 2Gb DDR3 SDRAM (максимум до 4Gb) Network: 6 x GbE RJ45 CF-card: 4GB Industrial SLC Flash USB: 2 x USB 2.0 Питание: 12V Состояние: новые в упаковке Страна производства: Тайвань В комплекте: Сам комп, шасси для установки в стойку, БП, крепеж, CD с драйверами, кабели (питания, SATA, консольный, патч-корд) Более детальные спецификации здесь - http://www.lannerusa.com/Products/ProductDetail.php?PID=17 На флешку установлен pfSense - http://www.pfsense.org , но можно поставить все, что угодно, RouterOS, Asterisk, да хоть Винду. В наличии 3 штуки, по 690$ за/шт. Доставка Новой Почтой в любой регион. 093-535-0083 Андрей FW-7541_DM.pdf