MSR36-20
- 0关注
- 1收藏，2051浏览
问题描述：
本地有一台MSR36-20设备和总部做ipsec vpn，一直用的没问题，本地配置没有动过，现在今天vpn不能使用了，在设备上打开debugging ipsec all
信息如下：我改如何排错，有没有具体命令？
*Jul 27 14:29:04:384 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Can't find block-flow node. *Jul 27 14:29:04:384 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Failed to find SA by SP, SP mode is 2. *Jul 27 14:29:04:384 2018 qdccb-jn-3620-waiwang01 IPSEC/7/ERROR: The reason of dropping packet is no available IPsec tunnel. *Jul 27 14:29:04:384 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Sent SA-Acquire message : SP ID = 0 *Jul 27 14:29:04:384 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Received negotiatiate SA message from IPsec kernel. *Jul 27 14:29:04:387 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Enter IPsec output process, Flag : 0x0, Data length : 60 *Jul 27 14:29:04:387 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Can't find block-flow node. *Jul 27 14:29:04:387 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Failed to find SA by SP, SP mode is 2. *Jul 27 14:29:04:387 2018 qdccb-jn-3620-waiwang01 IPSEC/7/ERROR: The reason of dropping packet is no available IPsec tunnel. *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Sent SA-Acquire message : SP ID = 0 *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Enter IPsec output process, Flag : 0x0, Data length : 60 *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Can't find block-flow node. *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Failed to find SA by SP, SP mode is 2. *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/ERROR: The reason of dropping packet is no available IPsec tunnel. *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Sent SA-Acquire message : SP ID = 0 *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Received negotiatiate SA message from IPsec kernel. *Jul 27 14:29:04:388 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Received negotiatiate SA message from IPsec kernel. *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Enter IPsec output process, Flag : 0x0, Data length : 60 *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Can't find block-flow node. *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Failed to find SA by SP, SP mode is 2. *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/ERROR: The reason of dropping packet is no available IPsec tunnel. *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Sent SA-Acquire message : SP ID = 0 *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Enter IPsec output process, Flag : 0x0, Data length : 60 *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Can't find block-flow node. *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/PACKET: Failed to find SA by SP, SP mode is 2. *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/ERROR: The reason of dropping packet is no available IPsec tunnel. *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Sent SA-Acquire message : SP ID = 0 *Jul 27 14:29:04:397 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Received negotiatiate SA message from IPsec kernel. *Jul 27 14:29:04:398 2018 qdccb-jn-3620-waiwang01 IPSEC/7/EVENT: Received negotiatiate SA message from IPsec kernel.
- 2018-07-27提问
- 举报
-
(0)
最佳答案
首先display ike sa看一下ike sa有没有协商成功，没有的话，建议先打开debug ike all看一下。ipsec大多都是配置问题，如果之前一直能用突然不能用的话，可能还是双方协商过的配置有修改，本地没有修改过的话，可以问问对端是不是有改动。
- 2018-07-27回答
- 评论(1)
- 举报
-
(0)
这是debuging看到的会不会有问题*Jul 27 15:13:05:833 2018 qdccb-jn-3620-waiwang01 IKE/7/PACKET: Sending packet to 221.0.173.245 remote port 500, local port 500. Jul 27 15:13:13:908 2018 qdccb-jn-3620-waiwang01 IKE/7/PACKET: Received packet from 144.123.42.242 source port 500 destination port 500
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
这是debuging看到的会不会有问题*Jul 27 15:13:05:833 2018 qdccb-jn-3620-waiwang01 IKE/7/PACKET: Sending packet to 221.0.173.245 remote port 500, local port 500. Jul 27 15:13:13:908 2018 qdccb-jn-3620-waiwang01 IKE/7/PACKET: Received packet from 144.123.42.242 source port 500 destination port 500