mirror of
https://github.com/hwdsl2/docker-ipsec-vpn-server.git
synced 2026-04-26 10:05:48 +03:00
[GH-ISSUE #357] ipsec-vpn-server on Synology NAS (Docker) won't work. #332
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Dieterm5 on GitHub (Mar 19, 2023).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/357
Checklist
Describe the issue
After a successfull connection to the server via IKEv2 option, the DSM on Synology NAS are not reacting anymore.
On my phone it doesn't have internet access, the local network are also not responding (es. my pihole didn't respond).
All the other containers on Docker crashes immediately. After a few minutes Synology restarts and it says there were a black-out. The docker says "error gathering device information while adding custom device /dev/ppp: no such file or directory".
This image can run without problems, the problem is starting when I try to connect to my server via IKEv2 option.
To Reproduce
Steps to reproduce the behavior:
SSH to Synology, get root access and then this:
env file looks like this:
Expected behavior
The connection works and I still can work on my DSM on synology and also I should have access to internet on my phone during the connection
Logs
Enable logs, check VPN status, and add error logs to help explain the problem, if applicable.
Logs on synology docker:
Libreswan logs:
Messages:
Server (please complete the following information)
Client (please complete the following information)
Additional context
Add any other context about the problem here.
Enabling Libreswan logs:
Hope I didn't fuck up somewhere and didn't something right.
But this seems very strange and after 1 week of a lot research I'm posting this issue now.
I have filled it in as completely as possible.
Thanks
@seemebreakthis commented on GitHub (Mar 23, 2023):
Per this comment
https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/298#issuecomment-1158593803
@hwdsl2 says himself this docker image does not work with Synology for unknown reasons.
I wish they would put this caveat up prominently in README.md. You and many others (myself included) have wasted so much time trying to get this docker image to work on Synology NAS I am sure, because of Android's limitation on types of VPN connections allowed + VPN server being a common use case for Synology NAS owners.
(Edit: Ended up installing kylemanna/docker-vpn per instructions here, working flawlessly)
@hwdsl2 commented on GitHub (Mar 23, 2023):
@Dieterm5 Hello! Thank you for reporting this issue. I looked at your description and logs, you mentioned that the DiskStation Manager (DSM) on Synology NAS crashes as soon as an IKEv2 connection is established. This is most likely a bug with IPsec VPN support in the DSM system. The exact cause is unclear from your provided logs.
As @seemebreakthis suggested, I can add a note in the README regarding using this Docker image on Synology NAS systems. Note that the separate issue in #298 was related to MOBIKE support and it was already fixed earlier. This can be seen from your logs that the IKEv2 connection was added successfully at Libreswan startup.
@Dieterm5 commented on GitHub (Mar 25, 2023):
@seemebreakthis Hi thanks for your message, I also ended up installing openvpn from Kylemanna's image and it works perfectly. Thanks for referring me to this.
Actually I wish to get IKEv2 connection because that's the only way to use 'routines' on Android to autoconnect via IKEv2-VPN when I open an app that requires a specify IP (for example an IP from a specify country to be able see the videos).
If I can autoconnect my phone using openvpn opening a specified app, all helps are welcome too 🎉
@hwdsl2 Thanks for your fast reply! Ok I will contact synology's team about this situation and hopefully they will fix something so this wouldn't happen again. I'll keep you updated.
Also I've watchtower installed on my docker, so after every update of this image I'll get a notify and I'll keep a watch on this.
@Dieterm5 commented on GitHub (Mar 28, 2023):
@hwdsl2, @seemebreakthis
I got a reply from Synology:
You have to run this image in privileged mode, set local ports to automatic (container port to 4500 and 500 udp)I'm not going to test this btw, I'm afraid to break my NAS, maybe someone can test this?