apache / apache/cloudstack

The remote access VPN can not connected

未關閉
#7,282 8 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
archive Severity:Trivial status:stale
主要語言
Java
星號
3.1k
分支
1.4k
平均合併
6 天 19 小時
30 天內合併 PR
32

描述

##### ISSUE TYPE

* Bug Report

##### COMPONENT NAME
- VPN

##### CLOUDSTACK VERSION
- CloudStack 4.17.2.0

##### CONFIGURATION
Using a VPC-102, The public address is 10.26.20.64

![image](https://user-images.githubusercontent.com/4197714/220871224-8ccfe234-66ce-416f-99b0-e375b60b487b.png)

![image](https://user-images.githubusercontent.com/4197714/220871270-b5b52ac6-5d63-481b-8a06-fdc46bc6d76e.png)

##### OS / ENVIRONMENT
OS: oracle linux8

##### SUMMARY
I use the https://docs.cloudstack.apache.org/en/latest/adminguide/networking/using_remote_access.html#microsoft-windows-8 as a direct.

##### STEPS TO REPRODUCE
1. Create remote access VPN
2. connect using the windows 10 (https://docs.cloudstack.apache.org/en/latest/adminguide/networking/using_remote_access.html#microsoft-windows-8)

##### EXPECTED RESULTS
can connect the remote access VPN

##### ACTUAL RESULTS
can not connect remote access VPN

The windows 10 vpn client error is

![image](https://user-images.githubusercontent.com/4197714/220872012-e7f7d8aa-f3f8-48d5-a068-1f0d1fc046d0.png)

The cloudstack manager log error is :
```
2023-02-23 17:26:26,767 DEBUG [c.c.a.ApiServer] (qtp555273695-23:ctx-50335df0 ctx-c4f50adb) (logid:12aebde2) CIDRs from which account 'Acct[86761a89-6cab-11ed-
b904-69f592fc371d-admin] -- Account {"id": 2, "name": "admin", "uuid": "86761a89-6cab-11ed-b904-69f592fc371d"}' is allowed to perform API calls: 0.0.0.0/0,::/0
2023-02-23 17:26:26,778 DEBUG [c.c.a.ApiServlet] (qtp555273695-23:ctx-50335df0 ctx-c4f50adb) (logid:12aebde2) ===END=== 10.64.94.43 -- GET jobId=c66ab6d8-74f
3-42fa-8255-cb855393ce24&command=queryAsyncJobResult&response=json
2023-02-23 17:26:26,855 DEBUG [c.c.a.ApiServlet] (qtp555273695-14:ctx-0d37275c) (logid:049edc7e) ===START=== 10.64.94.43 -- GET listall=true&tab=vpn&id=7b77a
8ca-e989-48e0-a4ff-14b1ecee9d25&allocatedonly=false&page=1&pagesize=20&command=listPublicIpAddresses&response=json
2023-02-23 17:26:26,860 DEBUG [c.c.a.ApiServer] (qtp555273695-14:ctx-0d37275c ctx-3386c022) (logid:049edc7e) CIDRs from which account 'Acct[86761a89-6cab-11ed-
b904-69f592fc371d-admin] -- Account {"id": 2, "name": "admin", "uuid": "86761a89-6cab-11ed-b904-69f592fc371d"}' is allowed to perform API calls: 0.0.0.0/0,::/0
2023-02-23 17:26:26,863 DEBUG [c.c.a.ApiServlet] (qtp555273695-17:ctx-5439e3ce) (logid:8e9ca2d8) ===START=== 10.64.94.43 -- GET publicipid=7b77a8ca-e989-48e0
-a4ff-14b1ecee9d25&listAll=true&command=listRemoteAccessVpns&response=json
2023-02-23 17:26:26,865 WARN [c.c.a.d.ParamGenericValidationWorker] (qtp555273695-14:ctx-0d37275c ctx-3386c022) (logid:049edc7e) Received unknown parameters for command listPublicIpAddresses. Unknown parameters : tab
2023-02-23 17:26:26,868 DEBUG [c.c.a.ApiServer] (qtp555273695-17:ctx-5439e3ce ctx-4a866503) (logid:8e9ca2d8) CIDRs from which account 'Acct[86761a89-6cab-11ed-b904-69f592fc371d-admin] -- Account {"id": 2, "name": "admin", "uuid": "86761a89-6cab-11ed-b904-69f592fc371d"}' is allowed to perform API calls: 0.0.0.0/0,::/0
2023-02-23 17:26:26,874 DEBUG [c.c.a.ApiServlet] (qtp555273695-17:ctx-5439e3ce ctx-4a866503) (logid:8e9ca2d8) ===END=== 10.64.94.43 -- GET publicipid=7b77a8ca-e989-48e0-a4ff-14b1ecee9d25&listAll=true&command=listRemoteAccessVpns&response=json
2023-02-23 17:26:26,890 DEBUG [c.c.a.ApiServlet] (qtp555273695-14:ctx-0d37275c ctx-3386c022) (logid:049edc7e) ===END=== 10.64.94.43 -- GET listall=true&tab=vpn&id=7b77a8ca-e989-48e0-a4ff-14b1ecee9d25&allocatedonly=false&page=1&pagesize=20&command=listPublicIpAddresses&response=json
2023-02-23 17:26:26,894 DEBUG [c.c.a.ApiServlet] (qtp555273695-22:ctx-92a83a62) (logid:a5dc90f0) ===START=== 10.64.94.43 -- GET listall=true&tab=vpn&id=7b77a8ca-e989-48e0-a4ff-14b1ecee9d25&allocatedonly=false&page=1&pagesize=20&command=listPublicIpAddresses&response=json
2023-02-23 17:26:26,898 DEBUG [c.c.a.ApiServer] (qtp555273695-22:ctx-92a83a62 ctx-f0f118dd) (logid:a5dc90f0) CIDRs from which account 'Acct[86761a89-6cab-11ed-b904-69f592fc371d-admin] -- Account {"id": 2, "name": "admin", "uuid": "86761a89-6cab-11ed-b904-69f592fc371d"}' is allowed to perform API calls: 0.0.0.0/0,::/0
2023-02-23 17:26:26,901 WARN [c.c.a.d.ParamGenericValidationWorker] (qtp555273695-22:ctx-92a83a62 ctx-f0f118dd) (logid:a5dc90f0) Received unknown parameters for command listPublicIpAddresses. Unknown parameters : tab
2023-02-23 17:26:26,918 DEBUG [c.c.a.ApiServlet] (qtp555273695-22:ctx-92a83a62 ctx-f0f118dd) (logid:a5dc90f0) ===END=== 10.64.94.43 -- GET listall=true&tab=vpn&id=7b77a8ca-e989-48e0-a4ff-14b1ecee9d25&allocatedonly=false&page=1&pagesize=20&command=listPublicIpAddresses&response=json
2023-02-23 17:26:26,933 DEBUG [c.c.a.ApiServlet] (qtp555273695-23:ctx-a6b97ac8) (logid:9169a691) ===START=== 10.64.94.43 -- GET listall=true&tab=vpn&id=7b77a8ca-e989-48e0-a4ff-14b1ecee9d25&allocatedonly=false&page=1&pagesize=20&command=listPublicIpAddresses&response=json
2023-02-23 17:26:26,938 DEBUG [c.c.a.ApiServer] (qtp555273695-23:ctx-a6b97ac8 ctx-63aa5551) (logid:9169a691) CIDRs from which account 'Acct[86761a89-6cab-11ed-b904-69f592fc371d-admin] -- Account {"id": 2, "name": "admin", "uuid": "86761a89-6cab-11ed-b904-69f592fc371d"}' is allowed to perform API calls: 0.0.0.0/0,::/0
2023-02-23 17:26:26,942 WARN [c.c.a.d.ParamGenericValidationWorker] (qtp555273695-23:ctx-a6b97ac8 ctx-63aa5551) (logid:9169a691) Received unknown parameters for command listPublicIpAddresses. Unknown parameters : tab
2023-02-23 17:26:26,961 DEBUG [c.c.a.ApiServlet] (qtp555273695-23:ctx-a6b97ac8 ctx-63aa5551) (logid:9169a691) ===END=== 10.64.94.43 -- GET listall=true&tab=vpn&id=7b77a8ca-e989-48e0-a4ff-14b1ecee9d25&allocatedonly=false&page=1&pagesize=20&command=listPublicIpAddresses&response=json

```

[management-server.log](https://github.com/apache/cloudstack/files/10812245/management-server.log)

Please take a look, Thanks

貢獻指南

開啟貢獻指南

研究方向

從 issue 中連結的遠端存取 VPN 程序開始,使用提供的 VPC 設定在 CloudStack 4.17.2.0 上重現 Windows 10 連線失敗問題。結合報告中顯示的 VPN 和 API 請求檢查 management-server.log。確定原因並恢復成功的遠端存取 VPN 連線即表示完成。

由索引模型根據 Issue 內容生成。

評估

技術堆疊
java
領域
networking
Issue 類型
缺陷
難度
4/5
預估耗時
3-5 天
活躍度
停滯
描述清晰度
需要釐清
新手友好度
25/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。