Re[2]: vpn using pptpclient in FreeBSD

2011-09-01 Thread Коньков Евгений
Здравствуйте, Marco.

Вы писали 31 августа 2011 г., 23:14:14:

MB On Wed, 31 Aug 2011, the wise Mike Tancsa wrote:

 use mpd5 from the ports. It is well supported and works very well both
 as a client and server.

 There is a sample config in the mpd.conf.example where all you need to
 do is change the userid and passwd and server IP...

 pptp_client:
 #
 # PPTP client: only outgoing calls, auto reconnect,
 # ipcp-negotiated address, one-sided authentication,
 # default route points on ISP's end
 #

create bundle static B1
set iface route default
set ipcp ranges 0.0.0.0/0 0.0.0.0/0

create link static L1 pptp
set link action bundle B1
set auth authname MyLogin
set auth password MyPass
set link max-redial 0
set link mtu 1460
set link keep-alive 20 75
set pptp peer 1.2.3.4
set pptp disable windowing
open

MB I used the mpd.conf above but mpd5 doesn't work either. It looks like it
MB makes a connection but I don't have a vpn connection and it didn't log in.

MB I do get a lot of output though:

MB ...
MB process 9290 started, version 5.5 (r...@yokozuna.lan 17:08 30-Jul-2011)
MB CONSOLE: listening on 127.0.0.1 5005
MB web: listening on 0.0.0.0 5006
MB [B1] Bundle: Interface ng0 created
MB [L1] [L1] Link: OPEN event
MB [L1] LCP: Open event
MB [L1] LCP: state change Initial -- Starting
MB [L1] LCP: LayerStart
MB [L1] PPTP call successful
MB [L1] Link: UP event
MB [L1] LCP: Up event
MB [L1] LCP: state change Starting -- Req-Sent
MB [L1] LCP: SendConfigReq #1
MB [L1]   ACFCOMP
MB [L1]   PROTOCOMP
MB [L1]   ACCMAP 0x000a
MB [L1]   MRU 1500
MB [L1]   MAGICNUM 1b3bd364
MB [L1] LCP: SendConfigReq #2
MB [L1]   ACFCOMP
MB [L1]   PROTOCOMP
MB [L1]   ACCMAP 0x000a
MB [L1]   MRU 1500
MB [L1]   MAGICNUM 1b3bd364
MB [L1] LCP: rec'd Configure Reject #2 (Req-Sent)
MB [L1]   ACFCOMP
MB [L1]   PROTOCOMP
MB [L1] LCP: SendConfigReq #3
MB [L1]   ACCMAP 0x000a
MB [L1]   MRU 1500
MB [L1]   MAGICNUM 1b3bd364
MB [L1] LCP: rec'd Configure Nak #3 (Req-Sent)
MB [L1]   ACCMAP 0x000a
MB [L1] LCP: SendConfigReq #4
MB [L1]   ACCMAP 0x000a
MB [L1]   MRU 1500
MB [L1]   MAGICNUM 1b3bd364
MB [L1] LCP: rec'd Configure Ack #4 (Req-Sent)
MB [L1]   ACCMAP 0x000a
MB [L1]   MRU 1500
MB [L1]   MAGICNUM 1b3bd364
MB [L1] LCP: state change Req-Sent -- Ack-Rcvd
MB [L1] LCP: rec'd Configure Request #1 (Ack-Rcvd)
MB [L1]   AUTHPROTO CHAP MSOFTv2
MB [L1] LCP: SendConfigAck #1
MB [L1]   AUTHPROTO CHAP MSOFTv2
MB [L1] LCP: state change Ack-Rcvd -- Opened
MB [L1] LCP: auth: peer wants CHAP, I want nothing
MB [L1] LCP: LayerUp
MB [L1] CHAP: rec'd CHALLENGE #1 len: 21
MB [L1]   Name: 
MB [L1] CHAP: Using authname 
MB [L1] CHAP: sending RESPONSE #1 len: 69
MB [L1] CHAP: rec'd CHALLENGE #2 len: 21
MB [L1]   Name: 
MB [L1] CHAP: Using authname xx
MB [L1] CHAP: sending RESPONSE #2 len: 69
MB [L1] CHAP: rec'd SUCCESS #2 len: 46
MB [L1]   MESG: S=6FF41EBC586F72996FE28623516DEB70E57D6B5D
MB [L1] LCP: authorization successful
MB [L1] Link: Matched action 'bundle B1 '
MB [L1] Link: Join bundle B1
MB [B1] Bundle: Status update: up 1 link, total bandwidth 64000 bps
MB [B1] IPCP: Open event
MB [B1] IPCP: state change Initial -- Starting
MB [B1] IPCP: LayerStart
MB [B1] IPCP: Up event
MB [B1] IPCP: state change Starting -- Req-Sent
MB [B1] IPCP: SendConfigReq #1
MB [B1]   IPADDR 0.0.0.0
MB [B1]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
MB [B1] IPCP: rec'd Configure Request #0 (Req-Sent)
MB [B1]   IPADDR 130.115.3.34
MB [B1] 130.115.3.34 is OK
MB [B1] IPCP: SendConfigAck #0
MB [B1]   IPADDR 130.115.3.34
MB [B1] IPCP: state change Req-Sent -- Ack-Sent
MB [L1] rec'd unexpected protocol CCP, rejecting
MB [B1] IPCP: SendConfigReq #2
MB [B1]   IPADDR 0.0.0.0
MB [B1]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
MB [B1] IPCP: rec'd Configure Reject #2 (Ack-Sent)
MB [B1]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
MB [B1] IPCP: SendConfigReq #3
MB [B1]   IPADDR 0.0.0.0
MB [B1] IPCP: rec'd Configure Nak #3 (Ack-Sent)
MB [B1]   IPADDR 130.115.77.13
MB [B1] 130.115.77.13 is OK
MB [B1] IPCP: SendConfigReq #4
MB [B1]   IPADDR 130.115.77.13
MB [B1] IPCP: rec'd Configure Ack #4 (Ack-Sent)
MB [B1]   IPADDR 130.115.77.13
MB [B1] IPCP: state change Ack-Sent -- Opened
MB [B1] IPCP: LayerUp
MB [B1]   130.115.77.13 - 130.115.3.34
MB [B1] IFACE: Add route 0.0.0.0/0 130.115.3.34 failed: File exists
MB [B1] IFACE: Up event
MB [L1] LCP: no reply to 1 echo request(s)
MB [L1] PPTP call terminated
MB [L1] Link: DOWN event
MB [L1] LCP: Down event
MB [L1] LCP: state change Opened -- Starting
MB [L1] Link: Leave bundle B1
MB [B1] Bundle: Status update: up 0 links, total bandwidth 9600 bps
MB [B1] IPCP: Close event
MB [B1] IPCP: state change Opened -- Closing
MB [B1] IPCP: SendTerminateReq #5
MB [B1] IPCP: LayerDown
MB [B1] IFACE: Down event
MB [B1] IPCP: Down event
MB [B1] IPCP: LayerFinish
MB [B1] Bundle: No NCPs left. 

Re[2]: vpn using pptpclient in FreeBSD

2011-09-01 Thread Marco Beishuizen

On Thu, 1 Sep 2011, the wise Коньков Евгений wrote:


Notice: [B1] IFACE: Add route 0.0.0.0/0 130.115.3.34 failed: File exists
You already have default route in your system
why you set up the default again?
Notice in conf:
 set iface route default


With help from Mike Tancsa I've changed the config a bit and getting less 
errors now, but still not a working vpn connection. My mpd.conf is now:

...
# Default configuration is pptp_client

default:
load pptp_client

pptp_client:
#
# PPTP client: only outgoing calls, auto reconnect,
# ipcp-negotiated address, one-sided authentication,
# default route points on ISP's end
#

create bundle static B1
set iface route 130.115.0.0/16
set ipcp ranges 0.0.0.0/0 0.0.0.0/0

set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set bundle enable crypt-reqd
set mppc yes stateless

create link static L1 pptp
set link action bundle B1
set auth authname xx
set auth password x
set link max-redial 0
set link mtu 1460
set link keep-alive 20 75
set pptp peer vpn-eur-pptp.eur.nl
set pptp disable windowing
open
...

It looks like it's setting up a correct connection, but the site of the 
library I would like to access isn't accessible when mpd5 is running:

...
process 2965 started, version 5.5 (r...@yokozuna.lan 17:08 30-Jul-2011)
CONSOLE: listening on 127.0.0.1 5005
web: listening on 0.0.0.0 5006
[B1] Bundle: Interface ng0 created
[L1] [L1] Link: OPEN event
[L1] LCP: Open event
[L1] LCP: state change Initial -- Starting
[L1] LCP: LayerStart
[L1] PPTP call successful
[L1] Link: UP event
[L1] LCP: Up event
[L1] LCP: state change Starting -- Req-Sent
[L1] LCP: SendConfigReq #1
[L1]   ACFCOMP
[L1]   PROTOCOMP
[L1]   ACCMAP 0x000a
[L1]   MRU 1500
[L1]   MAGICNUM 0a9219e0
[L1] LCP: SendConfigReq #2
[L1]   ACFCOMP
[L1]   PROTOCOMP
[L1]   ACCMAP 0x000a
[L1]   MRU 1500
[L1]   MAGICNUM 0a9219e0
[L1] LCP: rec'd Configure Reject #2 (Req-Sent)
[L1]   PROTOCOMP
[L1] LCP: SendConfigReq #3
[L1]   ACFCOMP
[L1]   ACCMAP 0x000a
[L1]   MRU 1500
[L1]   MAGICNUM 0a9219e0
[L1] LCP: rec'd Configure Reject #3 (Req-Sent)
[L1]   ACFCOMP
[L1] LCP: SendConfigReq #4
[L1]   ACCMAP 0x000a
[L1]   MRU 1500
[L1]   MAGICNUM 0a9219e0
[L1] LCP: rec'd Configure Nak #4 (Req-Sent)
[L1]   ACCMAP 0x000a
[L1] LCP: SendConfigReq #5
[L1]   ACCMAP 0x000a
[L1]   MRU 1500
[L1]   MAGICNUM 0a9219e0
[L1] LCP: rec'd Configure Ack #5 (Req-Sent)
[L1]   ACCMAP 0x000a
[L1]   MRU 1500
[L1]   MAGICNUM 0a9219e0
[L1] LCP: state change Req-Sent -- Ack-Rcvd
[L1] LCP: rec'd Configure Request #1 (Ack-Rcvd)
[L1]   AUTHPROTO CHAP MSOFTv2
[L1] LCP: SendConfigAck #1
[L1]   AUTHPROTO CHAP MSOFTv2
[L1] LCP: state change Ack-Rcvd -- Opened
[L1] LCP: auth: peer wants CHAP, I want nothing
[L1] LCP: LayerUp
[L1] CHAP: rec'd CHALLENGE #1 len: 21
[L1]   Name: 
[L1] CHAP: Using authname x
[L1] CHAP: sending RESPONSE #1 len: 69
[L1] CHAP: rec'd CHALLENGE #2 len: 21
[L1]   Name: 
[L1] CHAP: Using authname xx
[L1] CHAP: sending RESPONSE #2 len: 69
[L1] rec'd proto IPCP during authenticate phase
[L1] rec'd proto CCP during authenticate phase
[L1] CHAP: sending RESPONSE #2 len: 69
[L1] CHAP: rec'd SUCCESS #2 len: 46
[L1]   MESG: S=F1619D8A3373D2F43E6652E992CA564D66B1C1A4
[L1] LCP: authorization successful
[L1] Link: Matched action 'bundle B1 '
[L1] Link: Join bundle B1
[B1] Bundle: Status update: up 1 link, total bandwidth 64000 bps
[B1] IPCP: Open event
[B1] IPCP: state change Initial -- Starting
[B1] IPCP: LayerStart
[B1] CCP: Open event
[B1] CCP: state change Initial -- Starting
[B1] CCP: LayerStart
[B1] IPCP: Up event
[B1] IPCP: state change Starting -- Req-Sent
[B1] IPCP: SendConfigReq #1
[B1]   IPADDR 0.0.0.0
[B1]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[B1] CCP: Up event
[B1] CCP: state change Starting -- Req-Sent
[B1] CCP: SendConfigReq #1
[B1]   MPPC
[B1] 0x0160:MPPE(40, 128 bits), stateless
[B1] CCP: rec'd Configure Nak #1 (Req-Sent)
[B1]   MPPC
[B1] 0x0140:MPPE(128 bits), stateless
[B1] CCP: SendConfigReq #2
[B1]   MPPC
[B1] 0x0140:MPPE(128 bits), stateless
[B1] CCP: rec'd Configure Ack #2 (Req-Sent)
[B1]   MPPC
[B1] 0x0140:MPPE(128 bits), stateless
[B1] CCP: state change Req-Sent -- Ack-Rcvd
[B1] IPCP: rec'd Configure Request #1 (Req-Sent)
[B1]   IPADDR 130.115.3.35
[B1] 130.115.3.35 is OK
[B1] IPCP: SendConfigAck #1
[B1]   IPADDR 130.115.3.35
[B1] IPCP: state change Req-Sent -- Ack-Sent
[B1] CCP: rec'd Configure Request #1 (Ack-Rcvd)
[B1]   MPPC
[B1] 0x0160:MPPE(40, 128 bits), stateless
[B1] CCP: SendConfigNak #1
[B1]   MPPC
[B1] 0x0140:MPPE(128 bits), stateless
[B1] CCP: rec'd Configure Request #2 (Ack-Rcvd)
[B1]   MPPC
[B1] 0x0140:MPPE(128 bits), stateless
[B1] CCP: SendConfigAck #2
[B1]   MPPC
[B1]