Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
HOWTO pptpclient with MS vpn server
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2, 3, 4, 5  Next  
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
neilhwatson
l33t
l33t


Joined: 06 Feb 2003
Posts: 719
Location: Canada

PostPosted: Tue Mar 22, 2005 4:12 pm    Post subject: Reply with quote

Does anyone know why I can call
Code:
pon <peer>
successfully via command line but not via crontab?
_________________
The true guru is a teacher.
Neil Watson
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Tue Mar 22, 2005 4:35 pm    Post subject: Reply with quote

As a guess: try typing the full path of the command in your crontab?
Or could it be a problem with group permissions?
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
neilhwatson
l33t
l33t


Joined: 06 Feb 2003
Posts: 719
Location: Canada

PostPosted: Tue Mar 22, 2005 4:44 pm    Post subject: Reply with quote

I use the full paths for all commands. I ran in debug mode having the script start and stop a VPN tunnel but, the ppp log revealed little:
Code:

Mar 22 11:39:01 ettin pppd[19400]: pppd 2.4.2 started by root, uid 0
Mar 22 11:39:01 ettin pppd[19400]: using channel 58
Mar 22 11:39:01 ettin pppd[19400]: Using interface ppp1
Mar 22 11:39:01 ettin pppd[19400]: Connect: ppp1 <--> /dev/pts/5
Mar 22 11:39:02 ettin pppd[19400]: Modem hangup
Mar 22 11:39:02 ettin pppd[19400]: Connection terminated.
Mar 22 11:39:02 ettin pppd[19400]: Waiting for 1 child processes...
Mar 22 11:39:02 ettin pppd[19400]:   script pptp xxx.xxx.xxx.xxx --nolaunchpppd, pid 19402
Mar 22 11:39:02 ettin pppd[19400]: Script pptp xxx.xxx.xxx.xxx --nolaunchpppd finished (pid 19402), status = 0x7f
Mar 22 11:39:02 ettin pppd[19400]: Exit.

_________________
The true guru is a teacher.
Neil Watson
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Fri Mar 25, 2005 1:32 am    Post subject: Going crazy with PPTP config Reply with quote

Hello there,
I'm trying to have pptp client running a VPN connection to my college but... I can't !
I have followed this HOWTO and the PPTP gentoo tutorial, googled, and I'm getting crazy about it.
The only thing I know for sure is that my VPN server requires MPPE and MPOA activated in the kernel.
Here is my config for /etc/ppp/peers/mypeer
Code:

remotename mypeer
linkname mypeer
ipparam mypeer
pty "pptp my.peer.some.where --nolaunchpppd "
name myusername

usepeerdns
require-mppe
debug dump

noauth

file /etc/ppp/options.pptp



the /etc/ppp/options.pptp

Code:


lock
noauth
nobsdcomp
nodeflate
require-mppe
mtu 1000
mru 1000
lcp-echo-failure 10
lcp-echo-interval 10



and the debug log:

Code:

pptpconfig: debug information dump begins
WARNING: security sensitive information follows
pptpconfig 1.2 2004/06/19 08:57:15
# pppd --version
pppd version 2.4.3
# uname -a
Linux dphlp0002 2.6.11-gentoo-r4 #2 SMP Mon Mar 21 17:10:55 GMT 2005 i686 Mobile Intel(R) Pentium(R) 4     CPU 3.06GHz GenuineIntel GNU/Linux
# grep mppe /proc/modules
# modinfo ppp_mppe
Array
(
    [name] => Mypeer
    [server] => my.peer.some.where
    [domain] =>
    [username] => myusername
    [password] => (hidden by pptpconfig)
    [pppd-options] =>
    [pptp-options] =>
    [resolv] =>
    [dns-options] =>
    [routing] => routing_interface_only
    [usepeerdns] => 1
    [require-mppe] => 1
    [nomppe-40] =>
    [nomppe-128] =>
    [refuse-eap] =>
    [mppe-stateful] =>
    [autostart] =>
    [iconify] =>
    [persist] =>
    [debug] => 1
    [client-to-lan] =>
)
# route -n (before pppd)
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.0.0        0.0.0.0         255.0.0.0       U     0      0        0 ath0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         10.0.0.2        0.0.0.0         UG    0      0        0 ath0
pptpconfig: debug information dump ends, starting pppd
/usr/sbin/pppd: In file /etc/ppp/peers/mypeer: unrecognized option 'require-mppe'
# route -n (after pppd exit)
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.0.0        0.0.0.0         255.0.0.0       U     0      0        0 ath0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         10.0.0.2        0.0.0.0         UG    0      0        0 ath0
pptpconfig: pppd process terminated by signal 2 (failed)
pptpconfig: SIGINT
# route -n (after completion)
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
10.0.0.0        0.0.0.0         255.0.0.0       U     0      0        0 ath0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         10.0.0.2        0.0.0.0         UG    0      0        0 ath0


Also, I get this message:
Code:
modinfo: could not find module ppp_mppe


I can't see what I'm doing wrong and why this module can't be found... Sorry if it's trivial, but I need some help.

Cheers.
_________________
nichocouk

L'Etat, c'est moi.


Last edited by nichocouk on Fri Mar 25, 2005 5:09 pm; edited 1 time in total
Back to top
View user's profile Send private message
KsE
Apprentice
Apprentice


Joined: 18 Mar 2003
Posts: 269
Location: St. Cloud, MN

PostPosted: Fri Mar 25, 2005 3:20 pm    Post subject: Reply with quote

Your options.pptp file should look like this
Code:

lock
noauth
nobsdcomp
nodeflate

Notice the "require-mppe" line isn't there.
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Fri Mar 25, 2005 3:45 pm    Post subject: Reply with quote

Thanks! I actually have made some progress and found out that it is better when this line is not there. But why is that so? My VPN server says that it requires MPPE encryption. :?:

Now, I get the modem hangup message that someone else also had:
Code:

pptpconfig: debug information dump begins
WARNING: security sensitive information follows
pptpconfig 1.2 2004/06/19 08:57:15
# pppd --version
pppd version 2.4.3
# uname -a
Linux dphlp0002 2.6.11-gentoo-r4 #2 SMP Mon Mar 21 17:10:55 GMT 2005 i686 Mobile Intel(R) Pentium(R) 4     CPU 3.06GHz GenuineIntel GNU/Linux
# grep mppe /proc/modules
ppp_mppe_mppc 16004 0 - Live 0xe0bc6000 [Note that it's there because I did a modprobe by hand]
# modinfo ppp_mppe
Array
(
    [name] => MyPeer
    [server] => my.peer.some.where
    [domain] =>
    [username] => MyName
    [password] => (hidden by pptpconfig)
    [pppd-options] =>
    [pptp-options] =>
    [resolv] =>
    [dns-options] =>
    [routing] => routing_all_to_tunnel
    [usepeerdns] => 1
    [require-mppe] =>
    [nomppe-40] =>
    [nomppe-128] =>
    [refuse-eap] =>
    [mppe-stateful] =>
    [autostart] =>
    [iconify] =>
    [persist] =>
    [debug] => 1
    [client-to-lan] =>
)
# route -n (before pppd)
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
144.124.47.241  144.124.51.254  255.255.255.255 UGH   0      0        0 eth0
144.124.48.0    0.0.0.0         255.255.252.0   U     0      0        0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         144.124.51.254  0.0.0.0         UG    0      0        0 eth0
pptpconfig: debug information dump ends, starting pppd
pppd options in effect:
debug      # (from /etc/ppp/peers/MyPeer)
updetach      # (from command line)
logfd 1      # (from command line)
linkname MyPeer      # (from /etc/ppp/peers/MyPeer)
dump      # (from /etc/ppp/peers/MyPeer)
noauth      # (from /etc/ppp/options.pptp)
name MyName      # (from /etc/ppp/peers/MyPeer)
remotename MyPeer      # (from /etc/ppp/peers/MyPeer)
      # (from /etc/ppp/options.pptp)
pty pptp my.peer.some.where --nolaunchpppd       # (from /etc/ppp/peers/MyPeer)
mru 1000      # (from /etc/ppp/options.pptp)
mtu 1000      # (from /etc/ppp/options.pptp)
lcp-echo-failure 10      # (from /etc/ppp/options.pptp)
lcp-echo-interval 10      # (from /etc/ppp/options.pptp)
ipparam MyPeer      # (from /etc/ppp/peers/MyPeer)
usepeerdns      # (from /etc/ppp/peers/MyPeer)
nobsdcomp      # (from /etc/ppp/options.pptp)
nodeflate      # (from /etc/ppp/options.pptp)
using channel 3
Using interface ppp0
pptpconfig: monitoring interface ppp0
Connect: ppp0 <--> /dev/pts/3
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <mru 1400> <auth chap MS-v2> <magic 0x26d462fb> <pcomp> <accomp> <callback CBCP>]
sent [LCP ConfRej id=0x0 <callback CBCP>]
rcvd [LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <mru 1400> <auth chap MS-v2> <magic 0x26d462fb> <pcomp> <accomp>]
sent [LCP ConfNak id=0x1 <auth pap>]
rcvd [LCP ConfReq id=0x2 <mru 1400> <auth chap MS> <magic 0x26d462fb> <pcomp> <accomp>]
sent [LCP ConfNak id=0x2 <auth pap>]
rcvd [LCP ConfReq id=0x3 <mru 1400> <auth chap MS> <magic 0x26d462fb> <pcomp> <accomp>]
sent [LCP ConfNak id=0x3 <auth pap>]
rcvd [LCP ConfReq id=0x4 <mru 1400> <auth chap MS> <magic 0x26d462fb> <pcomp> <accomp>]
sent [LCP ConfNak id=0x4 <auth pap>]
rcvd [LCP ConfReq id=0x5 <mru 1400> <auth chap MS> <magic 0x26d462fb> <pcomp> <accomp>]
sent [LCP ConfNak id=0x5 <auth pap>]
rcvd [LCP ConfReq id=0x6 <mru 1400> <auth chap MS> <magic 0x26d462fb> <pcomp> <accomp>]
sent [LCP ConfRej id=0x6 <auth chap MS>]
rcvd [LCP TermReq id=0x7 "&\37777777724b\37777777773\000<\37777777715t\000\000\003\37777777627"]
sent [LCP TermAck id=0x7]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xa5c3c187> <pcomp> <accomp>]
Script pptp my.peer.some.where --nolaunchpppd  finished (pid 7714), status = 0x0
Modem hangup
Connection terminated.
# route -n (after pppd exit)
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
144.124.47.241  144.124.51.254  255.255.255.255 UGH   0      0        0 eth0
144.124.48.0    0.0.0.0         255.255.252.0   U     0      0        0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         144.124.51.254  0.0.0.0         UG    0      0        0 eth0
pptpconfig: pppd process terminated by signal 16 (failed)
pptpconfig: SIGUSR1
# route -n (after completion)
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
144.124.47.241  144.124.51.254  255.255.255.255 UGH   0      0        0 eth0
144.124.48.0    0.0.0.0         255.255.252.0   U     0      0        0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         144.124.51.254  0.0.0.0         UG    0      0        0 eth0


Any idea??

Cheers,
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
KsE
Apprentice
Apprentice


Joined: 18 Mar 2003
Posts: 269
Location: St. Cloud, MN

PostPosted: Fri Mar 25, 2005 3:56 pm    Post subject: Reply with quote

Can you show me your options.pptp file, and your peers/my_peer file?

Also, can you run pptp like this
Code:

pppd call my_peer logfd 2 nodetach debug dump

and give me the output?

Remember to remove any sensitive info.
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Fri Mar 25, 2005 4:20 pm    Post subject: Reply with quote

options.pptp
Code:

lock
noauth
nobsdcomp
nodeflate
mtu 1000
mru 1000
lcp-echo-failure 10
lcp-echo-interval 10


peers/mypeer
Code:

remotename Mypeer
linkname Mypeer
ipparam Mypeer
pty "pptp my.peer.some.where --nolaunchpppd "
name Myname
usepeerdns
debug dump
noauth
file /etc/ppp/options.pptp


Output:
Code:

pppd options in effect:
debug debug             # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
linkname AberVPN                # (from /etc/ppp/peers/AberVPN)
dump            # (from command line)
noauth          # (from /etc/ppp/options.pptp)
name nll                # (from /etc/ppp/peers/AberVPN)
remotename AberVPN              # (from /etc/ppp/peers/AberVPN)
                # (from /etc/ppp/options.pptp)
pty pptp vpn.aber.ac.uk --nolaunchpppd          # (from /etc/ppp/peers/AberVPN)
mru 1000                # (from /etc/ppp/options.pptp)
mtu 1000                # (from /etc/ppp/options.pptp)
lcp-echo-failure 10             # (from /etc/ppp/options.pptp)
lcp-echo-interval 10            # (from /etc/ppp/options.pptp)
ipparam AberVPN         # (from /etc/ppp/peers/AberVPN)
usepeerdns              # (from /etc/ppp/peers/AberVPN)
nobsdcomp               # (from /etc/ppp/options.pptp)
nodeflate               # (from /etc/ppp/options.pptp)
using channel 2
Using interface ppp0
Connect: ppp0 <--> /dev/pts/4
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <mru 1400> <auth chap MS-v2> <magic 0x4d8e6704> <pcomp> <accomp> <callback CBCP>]
sent [LCP ConfRej id=0x0 <callback CBCP>]
rcvd [LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <mru 1400> <auth chap MS-v2> <magic 0x4d8e6704> <pcomp> <accomp>]
sent [LCP ConfNak id=0x1 <auth pap>]
rcvd [LCP ConfReq id=0x2 <mru 1400> <auth chap MS> <magic 0x4d8e6704> <pcomp> <accomp>]
sent [LCP ConfNak id=0x2 <auth pap>]
rcvd [LCP ConfReq id=0x3 <mru 1400> <auth chap MS> <magic 0x4d8e6704> <pcomp> <accomp>]
sent [LCP ConfNak id=0x3 <auth pap>]
rcvd [LCP ConfReq id=0x4 <mru 1400> <auth chap MS> <magic 0x4d8e6704> <pcomp> <accomp>]
sent [LCP ConfNak id=0x4 <auth pap>]
rcvd [LCP ConfReq id=0x5 <mru 1400> <auth chap MS> <magic 0x4d8e6704> <pcomp> <accomp>]
sent [LCP ConfNak id=0x5 <auth pap>]
rcvd [LCP ConfReq id=0x6 <mru 1400> <auth chap MS> <magic 0x4d8e6704> <pcomp> <accomp>]
sent [LCP ConfRej id=0x6 <auth chap MS>]
rcvd [LCP TermReq id=0x7 "M\37777777616g\004\000<\37777777715t\000\000\003\37777777627"]
sent [LCP TermAck id=0x7]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x1e30041f> <pcomp> <accomp>]
Script pptp vpn.aber.ac.uk --nolaunchpppd  finished (pid 7316), status = 0x0
Modem hangup
Connection terminated.


Well, I might have a hint: I am today at my work place - behind a firewall. I will have to wait tonight until I'm back home to see the result.
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
KsE
Apprentice
Apprentice


Joined: 18 Mar 2003
Posts: 269
Location: St. Cloud, MN

PostPosted: Fri Mar 25, 2005 4:48 pm    Post subject: Reply with quote

Ok, if not, there is a few things in your peers/my_peer file you should change.

First, do you need a domain when logging in? Like "domain\\user"?
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Fri Mar 25, 2005 5:04 pm    Post subject: Reply with quote

I'll check with the VPN people. I don't think so, but I'll ask them again. I'd like to carry on trying though because it's bank holiday today and on Monday for Easter and I would like to be able to connect before Tuesday!:cry:
EDIT: They are back to work next Wednesday! aaaaarrrggggg...
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Sat Mar 26, 2005 12:14 am    Post subject: Modem hangup ... again! Reply with quote

Hello,
this time I'm at home with my ADSL connection. I get the same kind of modem hangup error message.

If I leave my config files as given before on my previous post, the output of the pppd command is:
Code:

pppd options in effect:
debug debug             # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
linkname MyPeer                # (from /etc/ppp/peers/MyPeer)
dump            # (from command line)
noauth          # (from /etc/ppp/options.pptp)
name MyName                # (from /etc/ppp/peers/MyPeer)
remotename MyPeer              # (from /etc/ppp/peers/MyPeer)
                # (from /etc/ppp/options.pptp)
                pty pptp my.peer.some.where --nolaunchpppd          # (from /etc/ppp/peers/MyPeer)
                mru 1000                # (from /etc/ppp/options.pptp)
                mtu 1000                # (from /etc/ppp/options.pptp)
                lcp-echo-failure 10             # (from /etc/ppp/options.pptp)
                lcp-echo-interval 10            # (from /etc/ppp/options.pptp)
                ipparam MyPeer         # (from /etc/ppp/peers/MyPeer)
                usepeerdns              # (from /etc/ppp/peers/MyPeer)
                nobsdcomp               # (from /etc/ppp/options.pptp)
                nodeflate               # (from /etc/ppp/options.pptp)
                using channel 6
                Using interface ppp0
                Connect: ppp0 <--> /dev/pts/1
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                rcvd [LCP ConfReq id=0x0 <mru 1400> <auth chap MS-v2> <magic 0xc5451b0> <pcomp> <accomp> <callback CBCP>]
                sent [LCP ConfRej id=0x0 <callback CBCP>]
                rcvd [LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                rcvd [LCP ConfReq id=0x1 <mru 1400> <auth chap MS-v2> <magic 0xc5451b0> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x1 <auth pap>]
                rcvd [LCP ConfReq id=0x2 <mru 1400> <auth chap MS> <magic 0xc5451b0> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x2 <auth pap>]
                rcvd [LCP ConfReq id=0x3 <mru 1400> <auth chap MS> <magic 0xc5451b0> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x3 <auth pap>]
                rcvd [LCP ConfReq id=0x4 <mru 1400> <auth chap MS> <magic 0xc5451b0> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x4 <auth pap>]
                rcvd [LCP ConfReq id=0x5 <mru 1400> <auth chap MS> <magic 0xc5451b0> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x5 <auth pap>]
                rcvd [LCP ConfReq id=0x6 <mru 1400> <auth chap MS> <magic 0xc5451b0> <pcomp> <accomp>]
                sent [LCP ConfRej id=0x6 <auth chap MS>]
                rcvd [LCP TermReq id=0x7 0c 54 51 b0 00 3c cd 74 00 00 03 97]
                sent [LCP TermAck id=0x7]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x2b1bfd7d> <pcomp> <accomp>]
                Script pptp my.peer.some.where --nolaunchpppd  finished (pid 7406), status = 0x0
                Modem hangup
                Connection terminated.


I also tried to comment the lines about MTU/MRU and lcp-echo (which means I basically removed the last 4 lines from options.pptp). The output is the following:
Code:

pppd options in effect:
debug debug             # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
linkname MyPeer                # (from /etc/ppp/peers/MyPeer)
dump            # (from command line)
noauth          # (from /etc/ppp/options.pptp)
name MyName                # (from /etc/ppp/peers/MyPeer)
remotename MyPeer              # (from /etc/ppp/peers/MyPeer)
                # (from /etc/ppp/options.pptp)
                pty pptp my.peer.some.where --nolaunchpppd          # (from /etc/ppp/peers/MyPeer)
                ipparam MyPeer         # (from /etc/ppp/peers/MyPeer)
                usepeerdns              # (from /etc/ppp/peers/MyPeer)
                nobsdcomp               # (from /etc/ppp/options.pptp)
                nodeflate               # (from /etc/ppp/options.pptp)
                using channel 5
                Using interface ppp0
                Connect: ppp0 <--> /dev/pts/1
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                rcvd [LCP ConfReq id=0x0 <mru 1400> <auth chap MS-v2> <magic 0x6a7b6265> <pcomp> <accomp> <callback CBCP>]
                sent [LCP ConfRej id=0x0 <callback CBCP>]
                rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                rcvd [LCP ConfReq id=0x1 <mru 1400> <auth chap MS-v2> <magic 0x6a7b6265> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x1 <auth pap>]
                rcvd [LCP ConfReq id=0x2 <mru 1400> <auth chap MS> <magic 0x6a7b6265> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x2 <auth pap>]
                rcvd [LCP ConfReq id=0x3 <mru 1400> <auth chap MS> <magic 0x6a7b6265> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x3 <auth pap>]
                rcvd [LCP ConfReq id=0x4 <mru 1400> <auth chap MS> <magic 0x6a7b6265> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x4 <auth pap>]
                rcvd [LCP ConfReq id=0x5 <mru 1400> <auth chap MS> <magic 0x6a7b6265> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x5 <auth pap>]
                rcvd [LCP ConfReq id=0x6 <mru 1400> <auth chap MS> <magic 0x6a7b6265> <pcomp> <accomp>]
                sent [LCP ConfRej id=0x6 <auth chap MS>]
                rcvd [LCP TermReq id=0x7 "j{be\000<\37777777715t\000\000\003\37777777627"]
                sent [LCP TermAck id=0x7]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8cbb7997> <pcomp> <accomp>]
                Script pptp my.peer.some.where --nolaunchpppd  finished (pid 7368), status = 0x0
                Modem hangup
                Connection terminated.


Thanks again for your time!
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
kiezpro
Tux's lil' helper
Tux's lil' helper


Joined: 13 May 2004
Posts: 126
Location: Yes

PostPosted: Tue Mar 29, 2005 4:55 pm    Post subject: Reply with quote

@ KsE:

That's a great howto, worked without problems the first time I tried.
Thanks!
Back to top
View user's profile Send private message
KsE
Apprentice
Apprentice


Joined: 18 Mar 2003
Posts: 269
Location: St. Cloud, MN

PostPosted: Tue Mar 29, 2005 9:31 pm    Post subject: Reply with quote

That's good to hear. That's why I posted it.

I struggled with this for quite some time. I got help from James Cameron (one of the developers) debugging it for quite some time before I got it to work.
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Thu Mar 31, 2005 12:15 am    Post subject: Reply with quote

Hi there,
I got some new hints from the VPN server administrator: I do not need a domain name; I should remove the noauth line in my config files. So now I have:
options.pptp
Code:

lock
nobsdcomp
nodeflate
mtu 1000
mru 1000
lcp-echo-failure 10
lcp-echo-interval 10


peers/mypeer
Code:

remotename mypeer
linkname mypeer
ipparam mypeer
pty "pptp my.peer.some.where --nolaunchpppd "
name myname
usepeerdns
debug dump
file /etc/ppp/options.pptp


Ouput from command:
Code:

pppd options in effect:
debug debug             # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
linkname Mypeer                # (from /etc/ppp/peers/Mypeer)
dump            # (from command line)
name Myname                # (from /etc/ppp/peers/Mypeer)
remotename Mypeer              # (from /etc/ppp/peers/Mypeer)
                # (from /etc/ppp/options.pptp)
                pty pptp my.peer.some.where --nolaunchpppd          # (from /etc/ppp/peers/Mypeer)
                mru 1000                # (from /etc/ppp/options.pptp)
                mtu 1000                # (from /etc/ppp/options.pptp)
                lcp-echo-failure 10             # (from /etc/ppp/options.pptp)
                lcp-echo-interval 10            # (from /etc/ppp/options.pptp)
                ipparam Mypeer         # (from /etc/ppp/peers/Mypeer)
                usepeerdns              # (from /etc/ppp/peers/Mypeer)
                nobsdcomp               # (from /etc/ppp/options.pptp)
                nodeflate               # (from /etc/ppp/options.pptp)
                using channel 3
                Using interface ppp0
                Connect: ppp0 <--> /dev/pts/2
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                rcvd [LCP ConfReq id=0x0 <mru 1400> <auth chap MS-v2> <magic 0x772b6001> <pcomp> <accomp> <callback CBCP>]
                sent [LCP ConfRej id=0x0 <callback CBCP>]
                rcvd [LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                rcvd [LCP ConfReq id=0x1 <mru 1400> <auth chap MS-v2> <magic 0x772b6001> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x1 <auth pap>]
                rcvd [LCP ConfReq id=0x2 <mru 1400> <auth chap MS> <magic 0x772b6001> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x2 <auth pap>]
                rcvd [LCP ConfReq id=0x3 <mru 1400> <auth chap MS> <magic 0x772b6001> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x3 <auth pap>]
                rcvd [LCP ConfReq id=0x4 <mru 1400> <auth chap MS> <magic 0x772b6001> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x4 <auth pap>]
                rcvd [LCP ConfReq id=0x5 <mru 1400> <auth chap MS> <magic 0x772b6001> <pcomp> <accomp>]
                sent [LCP ConfNak id=0x5 <auth pap>]
                rcvd [LCP ConfReq id=0x6 <mru 1400> <auth chap MS> <magic 0x772b6001> <pcomp> <accomp>]
                sent [LCP ConfRej id=0x6 <auth chap MS>]
                rcvd [LCP TermReq id=0x7 "w+`\001\000<\37777777715t\000\000\003\37777777627"]
                sent [LCP TermAck id=0x7]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0xbf85ed4e> <pcomp> <accomp>]
                Script pptp my.peer.some.where --nolaunchpppd  finished (pid 7528), status = 0x0
                Modem hangup
                Connection terminated.


It hasn't changed much since last time...! Sorry!
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
Maddog Battie
n00b
n00b


Joined: 30 Jun 2003
Posts: 11

PostPosted: Fri Apr 01, 2005 12:15 am    Post subject: Reply with quote

Thanks for all the comments / tips etc in the above posts. After being stuck for quite a while I've managed to get my link working. In this process I've spotted the following which hopefully will be useful to somebody:

minor typo
Code:
# gzip -d linux-2.6.10-mppe-mppc-1.2.patch.gz
# patch -p1 < linux-2.6.10-mppe-mppc-1.2.patch.gz
should read
Code:
# gzip -d linux-2.6.10-mppe-mppc-1.2.patch.gz
# patch -p1 < linux-2.6.10-mppe-mppc-1.2.patch
(or possibly even 2.6.11 as that is the latest version now)

This bit I didn't understand
Code:
# nano -w /etc/modules.d/ppp
ppp-compress-18
ppp_mppe
my file contained the following and I left it as is
Code:
# cat /etc/modules.d/ppp
alias char-major-108    ppp_generic
alias /dev/ppp          ppp_generic
alias tty-ldisc-3       ppp_async
alias tty-ldisc-13      n_hdlc
alias tty-ldisc-14      ppp_synctty
alias ppp-compress-21   bsd_comp
alias ppp-compress-24   ppp_deflate
alias ppp-compress-26   ppp_deflate
alias net-pf-24         pppoe
alias ppp-compress-18 ppp_mppe_mppc

The following I assume is OK when logging on to a domain
Code:
# nano -w /etc/ppp/chap-secrets
<domain>\\<user> PPTP <pass> *
PPTP <domain>\\<user> <pass> *
but I used the following for use without a domain
Code:
# nano -w /etc/ppp/chap-secrets
<user> PPTP <pass> *
PPTP <user> <pass> *
(obvious really)

However it is important that you lock down this file to stop anyone from reading it
Code:
# chmod 600 /etc/ppp/chap-secrets

if /etc/ppp/peers does not exsist then it needs to be made
Code:
#mkdir /etc/ppp/peers

You also have to remove the domain in the following if you don't have one
Code:
# nano -w /etc/ppp/peers/my_peer
pty "pptp <vpn ip addr> --nolaunchpppd"
name <user>
remotename PPTP
#require-mppe-128
file /etc/ppp/options.pptp
ipparam my_peer

Now the above got me partially working and I was able to ping the near end of the link but not the far end of the link
Code:
# ifconfig ppp0
ppp0      Link encap:Point-to-Point Protocol
          inet addr:10.0.2.200  P-t-P:10.0.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1000  Metric:1
          RX packets:413 errors:0 dropped:0 overruns:0 frame:0
          TX packets:413 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:4130 (4.0 Kb)  TX bytes:4136 (4.0 Kb)
Going into debug mode gave me the following:
Code:
# pppd call <my_peer> logfd 2 nodetach debug dump

<big snip>

rcvd [CHAP Success id=0x1 "Authentication succeeded, welcome!"]
CHAP authentication succeeded: Authentication succeeded, welcome!
sent [CCP ConfReq id=0x1 <mppe -H -M -S -L -D +C>]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [IPCP ConfReq id=0x1 <addr 10.0.0.2>]
sent [IPCP ConfAck id=0x1 <addr 10.0.0.2>]
rcvd [CCP ConfReq id=0x1 <mppe +H +M +S +L -D -C>]
sent [CCP ConfNak id=0x1 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfNak id=0x1 <mppe +H +M +S +L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfNak id=0x2 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [IPCP ConfNak id=0x2 <addr 10.0.2.200>]
sent [IPCP ConfReq id=0x3 <addr 10.0.2.200>]
rcvd [CCP ConfReq id=0x3 <mppe +H -M +S -L -D -C>]
sent [CCP ConfNak id=0x3 <mppe -H -M +S -L -D -C>]
rcvd [IPCP ConfAck id=0x3 <addr 10.0.2.200>]
local  IP address 10.0.2.200
remote IP address 10.0.0.2
Script /etc/ppp/ip-up started (pid 6506)
Script /etc/ppp/ip-up finished (pid 6506), status = 0x1
rcvd [CCP ConfReq id=0x4 <mppe +H -M +S -L -D -C>]
sent [CCP ConfNak id=0x4 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x5 <mppe +H -M +S -L -D -C>]
sent [CCP ConfNak id=0x5 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x6 <mppe +H -M +S -L -D -C>]
sent [CCP ConfRej id=0x6 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x6 <mppe +H -M +S -L -D -C>]
sent [CCP ConfRej id=0x6 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x6 <mppe +H -M +S -L -D -C>]
which started off OK but ended up not being able to negotiate the correct flags for mppe (I think). The link therefore never started up.
I solved the problem by adding the following to options.pptp
Code:
# nano options.pptp
lock
noauth
nobsdcomp
nodeflate
#require-mppe
mppe required,stateless
mtu 1000
mru 1000
lcp-echo-failure 10
lcp-echo-interval 10
which then got me up and running.
Code:
# pppd call <my_peer> logfd 2 nodetach debug dump

<big snip>

rcvd [CHAP Success id=0x1 "Authentication succeeded, welcome!"]
CHAP authentication succeeded: Authentication succeeded, welcome!
sent [CCP ConfReq id=0x1 <mppe +H +M +S +L -D +C>]
rcvd [IPCP ConfReq id=0x1 <addr 10.0.0.2>]
sent [IPCP TermAck id=0x1]
rcvd [CCP ConfReq id=0x1 <mppe +H +M +S +L -D -C>]
sent [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfNak id=0x1 <mppe +H +M +S +L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
sent [LCP EchoReq id=0x1 magic=0x4b111c0a]
rcvd [LCP EchoRep id=0x1 magic=0xd4b6f4]
rcvd [IPCP ConfReq id=0x1 <addr 10.0.0.2>]
sent [IPCP TermAck id=0x1]
rcvd [CCP ConfReq id=0x1 <mppe +H +M +S +L -D -C>]
sent [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [IPCP ConfNak id=0x2 <addr 10.0.2.200>]
sent [IPCP ConfReq id=0x3 <addr 10.0.2.200>]
rcvd [IPCP ConfAck id=0x3 <addr 10.0.2.200>]
sent [IPCP ConfReq id=0x3 <addr 10.0.2.200>]
rcvd [IPCP ConfAck id=0x3 <addr 10.0.2.200>]
sent [IPCP ConfReq id=0x3 <addr 10.0.2.200>]
rcvd [IPCP ConfAck id=0x3 <addr 10.0.2.200>]
sent [IPCP ConfReq id=0x3 <addr 10.0.2.200>]
rcvd [IPCP ConfAck id=0x3 <addr 10.0.2.200>]
sent [LCP EchoReq id=0x2 magic=0x4b111c0a]
rcvd [IPCP ConfReq id=0x1 <addr 10.0.0.2>]
sent [IPCP ConfAck id=0x1 <addr 10.0.0.2>]
local  IP address 10.0.2.200
remote IP address 10.0.0.2
Script /etc/ppp/ip-up started (pid 6574)
Script /etc/ppp/ip-up finished (pid 6574), status = 0x1

_________________
wot no sig!
Back to top
View user's profile Send private message
KsE
Apprentice
Apprentice


Joined: 18 Mar 2003
Posts: 269
Location: St. Cloud, MN

PostPosted: Fri Apr 01, 2005 3:52 am    Post subject: Reply with quote

I actually noticed that typo a few weeks back. I thought I fixed it, guess not. Changed it now.

It's good to see you were able to work through your problem.

The /etc/modules.d/ppp portion was from the official doc. It didn't make a difference if I had it in there, but it might for some since it's in the original doc so I kept it. No harm in having the modules load.
Back to top
View user's profile Send private message
micah_death
n00b
n00b


Joined: 16 Sep 2004
Posts: 73

PostPosted: Fri Apr 01, 2005 2:13 pm    Post subject: Reply with quote

Will this work nearly the same with a 2.4.x kernel instead of 2.6? (the 2.6 wasn't liking my raid devices =(
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Fri Apr 01, 2005 3:48 pm    Post subject: Reply with quote

Hello,

I am still trying to sort out my VPN connection with Linux. I have made some other changes which seem to make things a bit better (THANK YOU Maddog Battie for your post!), but I'm still not able to connect . I would be happy to have some more help! :cry:

*****
Here is the output of the command "pppd call mypeer logfd 2 nodetach debug dump":
Code:

pppd options in effect:
debug debug             # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
dump            # (from command line)
name myname                # (from /etc/ppp/peers/mypeer)
remotename PPTP         # (from /etc/ppp/peers/mypeer)
                # (from /etc/ppp/options.pptp)
pty pptp my.peer.some.where --nolaunchpppd          # (from
/etc/ppp/peers/mypeer)
mru 1000                # (from /etc/ppp/options.pptp)
mtu 1000                # (from /etc/ppp/options.pptp)
lcp-echo-failure 10             # (from /etc/ppp/options.pptp)
lcp-echo-interval 10            # (from /etc/ppp/options.pptp)
ipparam mypeer         # (from /etc/ppp/peers/mypeer)
usepeerdns              # (from /etc/ppp/peers/mypeer)
nobsdcomp               # (from /etc/ppp/options.pptp)
nodeflate               # (from /etc/ppp/options.pptp)
using channel 7
Using interface ppp0
Connect: ppp0 <--> /dev/pts/1

[removed a few lines...]

rcvd [LCP EchoRep id=0x0 magic=0xfdb12c0]
rcvd [CHAP Success id=0x0 "S=978F1AFB189CFC67E8FA42F57D32A2962940FA72"]
sent [CCP ConfReq id=0x1 <mppe -H -M -S -L -D +C>]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 144.124.48.95>
<ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
rcvd [CCP ConfReq id=0x3 <mppe +H -M -S -L -D +C>]
sent [CCP ConfNak id=0x3 <mppe -H -M -S -L -D +C>]
rcvd [IPCP ConfReq id=0x4 <addr 144.124.45.1>]
sent [IPCP ConfAck id=0x4 <addr 144.124.45.1>]
rcvd [CCP ConfAck id=0x1 <mppe -H -M -S -L -D +C>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 144.124.48.95> <ms-dns1 0.0.0.0>
<ms-dns3 0.0.0.0>]
rcvd [CCP ConfReq id=0x5 <mppe -H -M -S -L -D +C>]
sent [CCP ConfAck id=0x5 <mppe -H -M -S -L -D +C>]
MPPC compression enabled
rcvd [IPCP ConfNak id=0x2 <addr 144.124.45.18> <ms-dns1 144.124.16.12>
<ms-dns3 144.124.16.11>]
sent [IPCP ConfReq id=0x3 <addr 144.124.45.18> <ms-dns1 144.124.16.12>
<ms-dns3 144.124.16.11>]
rcvd [IPCP ConfAck id=0x3 <addr 144.124.45.18> <ms-dns1 144.124.16.12>
<ms-dns3 144.124.16.11>]
local  IP address 144.124.45.18
remote IP address 144.124.45.1
primary   DNS address 144.124.16.12
secondary DNS address 144.124.16.11
Script /etc/ppp/ip-up started (pid 14998)
Script /etc/ppp/ip-up finished (pid 14998), status = 0x1
sent [LCP EchoReq id=0x1 magic=0xef11b5d5]
rcvd [LCP EchoRep id=0x1 magic=0xfdb12c0]

...

The last sent / rcvd messages carry on and on until i hit ^C and then I
get:
Code:

Terminating on signal 2
Connect time 1.5 minutes.
Sent 0 bytes, received 36 bytes.
Script /etc/ppp/ip-down started (pid 15006)
sent [LCP TermReq id=0x2 "User request"]
Script pptp my.peer.some.where --nolaunchpppd finished (pid 14988), status =
0x0
Modem hangup
Connection terminated.
Script /etc/ppp/ip-down finished (pid 15006), status = 0x1

Before I interrupt the process I can check:
*** ifconfig ppp0
Code:

ppp0      Link encap:Point-to-Point Protocol
          inet addr:144.124.45.9  P-t-P:144.124.45.1
Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1000  Metric:1 RX
packets:8 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:130 (130.0 b)  TX bytes:112 (112.0 b)



Below are my config files:

*** /etc/modules.d/ppp
Code:

alias char-major-108    ppp_generic
alias /dev/ppp          ppp_generic
alias tty-ldisc-3       ppp_async
alias tty-ldisc-13      n_hdlc
alias tty-ldisc-14      ppp_synctty
alias ppp-compress-21   bsd_comp
alias ppp-compress-24   ppp_deflate
alias ppp-compress-26   ppp_deflate
alias net-pf-24         pppoe
alias ppp-compress-18 ppp_mppe_mppc

*** /etc/ppp/chap-secrets
Code:

myname PPTP my_passwd *
PPTP myname my_passwd *

*** /etc/ppp/peers/mypeer
Code:

pty "pptp my.peer.some.where --nolaunchpppd"
name myname
remotename PPTP
file /etc/ppp/options.pptp
ipparam mypeer
usepeerdns
debug dump

*** /etc/ppp/options.pptp
Code:

lock
nobsdcomp
nodeflate
mtu 1000
mru 1000
lcp-echo-failure 10
lcp-echo-interval 10

Many thanks again for your help.

Code:

# uname -a
Linux dphlp0002 2.6.11-gentoo-r4 #2 SMP Mon Mar 21 17:10:55 GMT 2005
i686 Mobile Intel(R) Pentium(R) 4     CPU 3.06GHz GenuineIntel GNU/Linux

_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
nichocouk
Guru
Guru


Joined: 10 Mar 2005
Posts: 585
Location: Glasgow

PostPosted: Mon Apr 04, 2005 1:10 pm    Post subject: Reply with quote

Right... I am happy to say that my VPN connection was running well yesterday evening. In fact my previous post here shows that it was probably running quite well last time, but I was too exhausted to notice it! :wink:
However I must add that I have upgraded to gentoo-sources-2.6.11-r5 and reconfigured my kernel from scratch and it probably helped a bit...
_________________
nichocouk

L'Etat, c'est moi.
Back to top
View user's profile Send private message
Dexter2004
Tux's lil' helper
Tux's lil' helper


Joined: 23 Jul 2004
Posts: 123

PostPosted: Sat Apr 16, 2005 2:49 pm    Post subject: Reply with quote

hi

I'm having some problems connecting to a vpn... This is the command and the error:
Code:


pon my_peer  debug dump logfd 2 nodetach

pppd options in effect:
debug           # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
linkname my_peer              # (from /etc/ppp/peers/digitalis)
dump            # (from command line)
noauth          # (from /etc/ppp/options.pptp)
refuse-eap              # (from /etc/ppp/peers/digitalis)
name username             # (from /etc/ppp/peers/digitalis)
remotename my_peer            # (from /etc/ppp/peers/digitalis)
                # (from /etc/ppp/options.pptp)
pty pptp ipaddress --nolaunchpppd            # (from /etc/ppp/peers/digitalis)
ipparam my_peer               # (from /etc/ppp/peers/digitalis)
usepeerdns              # (from /etc/ppp/peers/digitalis)
nobsdcomp               # (from /etc/ppp/options.pptp)
nodeflate               # (from /etc/ppp/options.pptp)
using channel 31
Using interface ppp0
Connect: ppp0 <--> /dev/pts/3
Warning - secret file /etc/ppp/pap-secrets has world and/or group access
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xc4cdacff> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <auth chap MS-v2> <magic 0x5d7a0fee> <pcomp> <accomp> <callback CBCP> <mrru 1614> <endpoint [local:ea.32.25.08.87.50.49.7e.af.e9.74.ed.63.9d.63.b7.00.00.00.00]> < 17 04 00 35>]
sent [LCP ConfRej id=0x0 <callback CBCP> <mrru 1614> < 17 04 00 35>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xc4cdacff> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <auth chap MS-v2> <magic 0x5d7a0fee> <pcomp> <accomp> <endpoint [local:ea.32.26.88.83.51.49.6e.af.e9.74.ed.63.9d.63.b7.00.00.00.00]>]
sent [LCP ConfAck id=0x1 <auth chap MS-v2> <magic 0x5d7a0fee> <pcomp> <accomp> <endpoint [local:ea.32.26.88.83.51.49.6e.af.e9.74.ed.63.9d.63.b7.00.00.00.00]>]
rcvd [CHAP Challenge id=0x0 <08245687773d3744848accc8951e12cd>, name = "PHOE"]
sent [CHAP Response id=0x0 <794965c3bdc3c60ba15765a6f561c842000000000000000070069e91d2473cc51b61157bd97f3afe0b32a6e95ccc5e2500>, name = "username"]
rcvd [LCP TermReq id=0x3 "]z\017\37777777756\000<\37777777715t\000\000\003\37777777642"]
LCP terminated by peer (]z^OM-n^@<M-Mt^@^@^CM-")
sent [LCP TermAck id=0x3]
Connection terminated.
using channel 32
Using interface ppp0
Connect: ppp0 <--> /dev/pts/4
Waiting for 2 child processes...
  script pptp ipaddress --nolaunchpppd , pid 8672
  script pptp ipaddress --nolaunchpppd , pid 8666
Warning - secret file /etc/ppp/pap-secrets has world and/or group access
sent [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0xf648db7> <pcomp> <accomp>]
sent [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0xf648db7> <pcomp> <accomp>]
sending SIGTERM to process 8672
sending SIGTERM to process 8666
tcflush failed: Bad file descriptor



Can someone tell me what is appening?

thanks
Back to top
View user's profile Send private message
patrickbores
Apprentice
Apprentice


Joined: 19 May 2003
Posts: 276
Location: Minneapolis, MN, USA

PostPosted: Mon Apr 25, 2005 9:45 pm    Post subject: Reply with quote

I was getting LCP timeout errors, until I examined the traffic with tcpdump. It turned out that I was sending GRE packets, but not receiving any acknowledgements from the server.

Enabling GRE in the kernel solved the problem immediately. Now I just have to figure out how to get it to use the peer DNS server.

Patrick
_________________
P.S. - this is what part of the alphabet would look like if Q and R were eliminated.
Back to top
View user's profile Send private message
patrickbores
Apprentice
Apprentice


Joined: 19 May 2003
Posts: 276
Location: Minneapolis, MN, USA

PostPosted: Mon Apr 25, 2005 10:18 pm    Post subject: Reply with quote

Nevermind. Spoke too soon. It just stopped working for no reason.

Patrick
_________________
P.S. - this is what part of the alphabet would look like if Q and R were eliminated.
Back to top
View user's profile Send private message
wmgoree
Apprentice
Apprentice


Joined: 08 Aug 2003
Posts: 246
Location: Alexandria, VA

PostPosted: Wed Apr 27, 2005 1:42 am    Post subject: Segmentation fault? Reply with quote

Perl-style variables are set up correctly but not listed.

Code:
pppd call $TUNNEL dump debug logfd 2 nodetach
pppd options in effect:
debug           # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
dump            # (from command line)
noauth          # (from /etc/ppp/options.pptp)
name $DOMAIN\\$USERNAME          # (from /etc/ppp/peers/$TUNNELr)
remotename PPTP         # (from /etc/ppp/peers/$TUNNEL)
                # (from /etc/ppp/options.pptp)
pty pptp $VPN_SERVER             # (from /etc/ppp/peers/$TUNNEL)
ipparam $TUNNEL_NAME         # (from /etc/ppp/peers/$TUNNEL)
nobsdcomp               # (from /etc/ppp/options.pptp)
nodeflate               # (from /etc/ppp/options.pptp)
using channel 18
Using interface ppp0
Connect: ppp0 <--> /dev/pts/3
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x1d628e0c> <pcomp> <accomp>]
Segmentation fault


Any hints?
_________________
vi? *snicker* it doesn't even include a mail reader...
Back to top
View user's profile Send private message
daviessm
n00b
n00b


Joined: 20 May 2005
Posts: 36

PostPosted: Fri May 20, 2005 10:02 am    Post subject: Reply with quote

Hi,

I'm just trying to set up my PPTP VPN connection in Gentoo but when I bring the connection up, my computer seems to try to send infinite amounts of data to it and never receives a response.

Here's the output from pon:

Code:
root@bedevere:/usr/src> pon aberVPN debug logfd 2 nodetach
using channel 4
Using interface ppp0
Connect: ppp0 <--> /dev/pts/3
Warning - secret file /etc/ppp/pap-secrets has world and/or group access
sent [LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x8e09547b> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <mru 1400> <auth chap MS-v2> <magic 0x4abb506d> <pcomp> <accomp> <callback CBCP>]
sent [LCP ConfRej id=0x0 <callback CBCP>]
rcvd [LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x8e09547b> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <mru 1400> <auth chap MS-v2> <magic 0x4abb506d> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <mru 1400> <auth chap MS-v2> <magic 0x4abb506d> <pcomp> <accomp>]
sent [LCP EchoReq id=0x0 magic=0x8e09547b]
rcvd [CHAP Challenge id=0x0 <eeb099df52e715f02a311c889be518c9>, name = "VPNSERV2"]
Warning - secret file /etc/ppp/chap-secrets has world and/or group access
sent [CHAP Response id=0x0 <ae2670b166cfdf4164689f66bfee7e350000000000000000a303de5a33fef854edd903fe0983b74921f21c934776b75a00>, name = "username"]
rcvd [LCP EchoRep id=0x0 magic=0x4abb506d]
rcvd [CHAP Success id=0x0 "S=D0B0B201447D06BA1D4334D1BD1C8A62951A970D"]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [CCP ConfReq id=0x3 <mppe +H -M -S -L -D +C>]
sent [CCP ConfReq id=0x1]
sent [CCP ConfRej id=0x3 <mppe +H -M -S -L -D +C>]
rcvd [IPCP ConfReq id=0x4 <addr 144.124.45.1>]
sent [IPCP ConfAck id=0x4 <addr 144.124.45.1>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [CCP ConfAck id=0x1]
rcvd [CCP TermReq id=0x5"J\37777777673Pm\000<\37777777715t\000\000\002\37777777734"]
sent [CCP TermAck id=0x5]
rcvd [IPCP ConfNak id=0x2 <addr 144.124.45.57>]
sent [IPCP ConfReq id=0x3 <addr 144.124.45.57>]
rcvd [IPCP ConfAck id=0x3 <addr 144.124.45.57>]
local  IP address 144.124.45.57
remote IP address 144.124.45.1
Script /etc/ppp/ip-up started (pid 13176)
Script /etc/ppp/ip-up finished (pid 13176), status = 0x0
sent [CCP ConfReq id=0x1]
sent [CCP ConfReq id=0x1]
sent [CCP ConfReq id=0x1]
sent [CCP ConfReq id=0x1]
sent [CCP ConfReq id=0x1]
sent [CCP ConfReq id=0x1]
sent [CCP ConfReq id=0x1]
sent [CCP ConfReq id=0x1]
Terminating on signal 2.
Script /etc/ppp/ip-down started (pid 13180)
sent [LCP TermReq id=0x2 "User request"]
Script /etc/ppp/ip-down finished (pid 13180), status = 0x1
Modem hangup
Connection terminated.
Connect time 0.5 minutes.
Sent 422277009 bytes, received 70 bytes.
Waiting for 1 child processes...
  script pptp vpn.aber.ac.uk --nolaunchpppd, pid 13164
Script pptp vpn.aber.ac.uk --nolaunchpppd finished (pid 13164), status = 0x0
Connect time 0.5 minutes.
Sent 422277009 bytes, received 70 bytes.


I think my main problem is that I haven't got mppe-mppc support compiled intot the kernel, as www.polbox.com is unreachable at the moment - does anyone have a copy of the patch for kernel 2.6.11?

EDIT:
polbox.com woke up again so I have MPPE working now. My problem now is that even though the VPN connection seems to work, as soon as I try to add a route to the new network through the VPN, pptp starts taking up 99% processor usage. The command I'm using to add the route is:
Code:
/sbin/route add -net 144.124.0.0 netmask 255.255.0.0 dev ppp0


Thanks,
Back to top
View user's profile Send private message
wmgoree
Apprentice
Apprentice


Joined: 08 Aug 2003
Posts: 246
Location: Alexandria, VA

PostPosted: Mon May 23, 2005 10:10 am    Post subject: routing weirdness Reply with quote

daviessm wrote:
My problem now is that even though the VPN connection seems to work, as soon as I try to add a route to the new network through the VPN, pptp starts taking up 99% processor usage. The command I'm using to add the route is:
Code:
/sbin/route add -net 144.124.0.0 netmask 255.255.0.0 dev ppp0



I had this problem back with the old version of pptp, which I could get to not segfault (see above).

If it's like what I had, your ppp0 has foolishly taken a route that your physical interface should have. Let me give an example:

Suppose your pptp server is 123.45.67.89. For reasons that escape me, ppp0 will set up a route to 123.45.67.89. This is a Bad Thing and results in sending an exponential number of packets to the VPN server. So, if your routing tables have a target of 123.45.67.89 with the device ppp0, do this
Code:
route del -host 123.45.67.89 dev ppp0

and then (kind of quickly; before the VPN connection times out):
Code:
route add -host 123.45.67.89 gw 192.168.1.1 dev eth0
route add -net 123.45.67.0 netmask 255.255.255.0 dev ppp0

_________________
vi? *snicker* it doesn't even include a mail reader...
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Goto page Previous  1, 2, 3, 4, 5  Next
Page 2 of 5

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum