VPN网关不产生流量

Question

我安装了一个VPN网关，使用IPsec连接到其他使用internet的VM。在我的例子中，我在另一边使用Debian，并且似乎是如何使用strongswan连接起来的。我感到惊讶的是检查流量日志，因为在蔚蓝一侧没有流量数据。在另一侧检查日志只显示以下内容：

Jul 19 16:47:16 vpnserver2 charon: 01[ENC] generating INFORMATIONAL response 1000 [ ]
Jul 19 16:47:16 vpnserver2 charon: 01[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:18 vpnserver2 charon: 14[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)
Jul 19 16:47:18 vpnserver2 charon: 14[ENC] parsed INFORMATIONAL request 1001 [ ]
Jul 19 16:47:18 vpnserver2 charon: 14[ENC] generating INFORMATIONAL response 1001 [ ]
Jul 19 16:47:18 vpnserver2 charon: 14[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:20 vpnserver2 charon: 13[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)
Jul 19 16:47:20 vpnserver2 charon: 13[ENC] parsed INFORMATIONAL request 1002 [ ]
Jul 19 16:47:20 vpnserver2 charon: 13[ENC] generating INFORMATIONAL response 1002 [ ]
Jul 19 16:47:20 vpnserver2 charon: 13[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:22 vpnserver2 charon: 15[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)
Jul 19 16:47:22 vpnserver2 charon: 15[ENC] parsed INFORMATIONAL request 1003 [ ]
Jul 19 16:47:22 vpnserver2 charon: 15[ENC] generating INFORMATIONAL response 1003 [ ]
Jul 19 16:47:22 vpnserver2 charon: 15[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:24 vpnserver2 charon: 05[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)
Jul 19 16:47:24 vpnserver2 charon: 05[ENC] parsed INFORMATIONAL request 1004 [ ]
Jul 19 16:47:24 vpnserver2 charon: 05[ENC] generating INFORMATIONAL response 1004 [ ]
Jul 19 16:47:24 vpnserver2 charon: 05[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:26 vpnserver2 charon: 16[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)
Jul 19 16:47:26 vpnserver2 charon: 16[ENC] parsed INFORMATIONAL request 1005 [ ]
Jul 19 16:47:26 vpnserver2 charon: 16[ENC] generating INFORMATIONAL response 1005 [ ]
Jul 19 16:47:26 vpnserver2 charon: 16[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:28 vpnserver2 charon: 11[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)
Jul 19 16:47:28 vpnserver2 charon: 11[ENC] parsed INFORMATIONAL request 1006 [ ]
Jul 19 16:47:28 vpnserver2 charon: 11[ENC] generating INFORMATIONAL response 1006 [ ]
Jul 19 16:47:28 vpnserver2 charon: 11[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:30 vpnserver2 charon: 06[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)
Jul 19 16:47:30 vpnserver2 charon: 06[ENC] parsed INFORMATIONAL request 1007 [ ]
Jul 19 16:47:30 vpnserver2 charon: 06[ENC] generating INFORMATIONAL response 1007 [ ]
Jul 19 16:47:30 vpnserver2 charon: 06[NET] sending packet: from MypublicIPA[4500] to MypublicIPB[4500] (80 bytes)
Jul 19 16:47:32 vpnserver2 charon: 03[NET] received packet: from MypublicIPB[4500] to MypublicIPA[4500] (80 bytes)

我不知道是否需要创建路由表来连接vpn网关和其他网之间的天蓝色，但我倾向于生成关于连接的流量，而不是真正连接的种子。

检查日志似乎也是空的，所以我不知道在哪里检查什么东西失败了。

有什么建议吗？

Answer 1

检查日志似乎也是空的，所以我不知道在哪里检查什么东西失败了。

您可以使用网络观察者检查VPN日志，请参阅此链接。

我有4GR与他们的vnets.Guide据说使用一个新的GR和vnet，所以现在我需要连接这个vnet到其他。

现在，这是不可能的。虚拟专用网业务不能在两个VNet之间具有传递关系。这意味着您需要在Azure中创建两个从本地到两个VNet的站点间VPN。在这种情况下，UDR和窥视也不起作用。请参阅此回答。