17 votos

Servidor VPN migrado roto con MacOS Catalina

Mi Mac mini ha funcionado perfectamente con macOS Mojave como servidor VPN siguiendo el método de migración descrito en el Guía de migración del servicio de MacOS Server pero después de actualizar a MacOS Catalina hay problemas.

Los clientes de la VPN se conectan bien en la red interna, pero no en una red externa, lo que hace que el servidor VPN sea un poco inútil.

Puedo confirmar que todo funcionaba bien con el servidor que ejecutaba macOS Mojave, y mis clientes de iOS 13 y iPadOS 13 se han conectado sin problemas; es la actualización a macOS Catalina en el servidor lo que ha causado este problema.

Aquí están las entradas de registro para una conexión fallida:

2019-10-12 20:42:38 CDT Incoming call... Address given to client = 10.0.0.224  
Sat Oct 12 20:42:38 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:38 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:38 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:38 2019 : L2TP sent SCCRP  
2019-10-12 20:42:38 CDT Incoming call... Address given to client = 10.0.0.225  
Sat Oct 12 20:42:38 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:38 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:38 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:38 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:38 2019 : L2TP sent SCCRP  
2019-10-12 20:42:40 CDT Incoming call... Address given to client = 10.0.0.226  
Sat Oct 12 20:42:40 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:40 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:40 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:40 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:40 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:40 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:40 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:40 2019 : L2TP sent SCCRP  
2019-10-12 20:42:44 CDT Incoming call... Address given to client = 10.0.0.227  
Sat Oct 12 20:42:44 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:44 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:44 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:44 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:44 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:44 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:44 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:44 2019 : L2TP sent SCCRP  
2019-10-12 20:42:48 CDT Incoming call... Address given to client = 10.0.0.228  
Sat Oct 12 20:42:48 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:48 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:48 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:48 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:48 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:48 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:48 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:48 2019 : L2TP sent SCCRP  
2019-10-12 20:42:52 CDT Incoming call... Address given to client = 10.0.0.229  
Sat Oct 12 20:42:52 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:52 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:52 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:52 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:52 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:52 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:52 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:52 2019 : L2TP sent SCCRP  
2019-10-12 20:42:56 CDT Incoming call... Address given to client = 10.0.0.230  
Sat Oct 12 20:42:56 2019 : Directory Services Authentication plugin initialized  
Sat Oct 12 20:42:56 2019 : Directory Services Authorization plugin initialized  
Sat Oct 12 20:42:56 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:56 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:56 2019 : publish_entry SCDSet() failed: Success!  
Sat Oct 12 20:42:56 2019 : L2TP incoming call in progress from 'xx.xx.xxx.xxx'...  
Sat Oct 12 20:42:56 2019 : L2TP received SCCRQ  
Sat Oct 12 20:42:56 2019 : L2TP sent SCCRP  
2019-10-12 20:42:58 CDT    --> Client with address = 10.0.0.224 has hung-up  
2019-10-12 20:42:58 CDT    --> Client with address = 10.0.0.225 has hung-up  
2019-10-12 20:43:00 CDT    --> Client with address = 10.0.0.226 has hung-up  
2019-10-12 20:43:04 CDT    --> Client with address = 10.0.0.227 has hung-up  
2019-10-12 20:43:08 CDT    --> Client with address = 10.0.0.228 has hung-up  
2019-10-12 20:43:12 CDT    --> Client with address = 10.0.0.229 has hung-up  
2019-10-12 20:43:16 CDT    --> Client with address = 10.0.0.230 has hung-up  

Actualmente estoy utilizando la VPN integrada en MacOS Catalina 10.15.1

1voto

Matthew Elvey Puntos 300

La guía de migración no está bien diseñada: Es probable que mucha gente se pierda esta sección.

Los siguientes servicios requieren que los usuarios cuyo tipo de contraseña es RECUPERABLE :
- VPN
- RADIUS
Si MacOS Server está instalado y configurado, puede utilizarlo para crear usuarios adicionales cuyo tipo de contraseña se puede establecer como RECUPERABLE.
NOTA: Si se elimina la aplicación Server, ya no podrá podrá crear usuarios cuyo tipo de contraseña sea RECUPERABLE

AppleAyuda.com

AppleAyuda es una comunidad de usuarios de los productos de Apple en la que puedes resolver tus problemas y dudas.
Puedes consultar las preguntas de otros usuarios, hacer tus propias preguntas o resolver las de los demás.

Powered by:

X