• Zarejestrowany: 2012-02-01
  • Posty: 62

Temat: PPTP - Gargoyle (1.5.6) - parametry konfiguracyjne

Witam,

Wykonałem wszystkie akcje opisane w poradniku (http://www.eko.one.pl/?p=openwrt-pptpd), zamiast zestawionego połączenia uzyskuję poniższe błędy. Co jest nie tak, czy może ustawienia z poradnika są nieaktualne ?

Nov 25 16:50:20 pptpd[4619]: MGR: Maximum of 100 connections reduced to 10, not enough IP addresses given
Nov 25 16:50:20 pptpd[4621]: MGR: Manager process started
Nov 25 16:50:20 pptpd[4621]: MGR: Maximum of 10 connections available
Nov 25 16:51:03 pptpd[4640]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 25 16:51:03 pptpd[4640]: CTRL: local address = 192.168.3.1
Nov 25 16:51:03 pptpd[4640]: CTRL: remote address = 192.168.3.90
Nov 25 16:51:03 pptpd[4640]: CTRL: pppd speed = 115200
Nov 25 16:51:03 pptpd[4640]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 25 16:51:03 pptpd[4640]: CTRL: Client 212.2.99.191 control connection started
Nov 25 16:51:03 pptpd[4640]: CTRL: Received PPTP Control Message (type: 1)
Nov 25 16:51:03 pptpd[4640]: CTRL: Made a START CTRL CONN RPLY packet
Nov 25 16:51:03 pptpd[4640]: CTRL: I wrote 156 bytes to the client.
Nov 25 16:51:03 pptpd[4640]: CTRL: Sent packet to client
Nov 25 16:51:03 pptpd[4640]: CTRL: Received PPTP Control Message (type: 7)
Nov 25 16:51:03 pptpd[4640]: CTRL: Set parameters to 100000000 maxbps, 8192 window size
Nov 25 16:51:03 pptpd[4640]: CTRL: Made a OUT CALL RPLY packet
Nov 25 16:51:03 pptpd[4640]: CTRL: Starting call (launching pppd, opening GRE)
Nov 25 16:51:03 pptpd[4640]: CTRL: pty_fd = 6
Nov 25 16:51:03 pptpd[4640]: CTRL: tty_fd = 7
Nov 25 16:51:03 pptpd[4640]: CTRL: I wrote 32 bytes to the client.
Nov 25 16:51:03 pptpd[4640]: CTRL: Sent packet to client
Nov 25 16:51:03 pptpd[4641]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 25 16:51:03 pptpd[4641]: CTRL (PPPD Launcher): local address = 192.168.3.1
Nov 25 16:51:03 pptpd[4641]: CTRL (PPPD Launcher): remote address = 192.168.3.90
Nov 25 16:51:03 pppd[4641]: pppd 2.4.5 started by root, uid 0
Nov 25 16:51:03 pppd[4641]: Using interface ppp0
Nov 25 16:51:03 pppd[4641]: Connect: ppp0 <--> /dev/pts/1
Nov 25 16:51:03 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:06 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:09 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:12 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:15 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:18 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:21 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:24 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:27 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:30 pppd[4641]: sent [LCP ConfReq id=0x1   ]
Nov 25 16:51:33 pppd[4641]: LCP: timeout sending Config-Requests
Nov 25 16:51:33 pppd[4641]: Connection terminated.
Nov 25 16:51:33 pppd[4641]: Modem hangup
Nov 25 16:51:33 pppd[4641]: Exit.
Nov 25 16:51:33 pptpd[4640]: GRE: read(fd=6,buffer=41fd7c,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 25 16:51:33 pptpd[4640]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Nov 25 16:51:33 pptpd[4640]: CTRL: Reaping child PPP[4641]
Nov 25 16:51:33 pptpd[4640]: CTRL: Client 212.2.99.191 control connection finished
Nov 25 16:51:33 pptpd[4640]: CTRL: Exiting with active call
Nov 25 16:51:33 pptpd[4640]: CTRL: Made a CALL DISCONNECT RPLY packet
Nov 25 16:51:33 pptpd[4640]: CTRL: Couldn't write packet to client.
Nov 25 16:51:33 pptpd[4640]: CTRL: Made a STOP CTRL REQ packet
Nov 25 16:51:33 pptpd[4640]: CTRL: Couldn't write packet to client.
Nov 25 16:51:33 pptpd[4640]: CTRL: Exiting now

.....

Moje pliki konfiguracyjne:

pptp.config:

debug
option /etc/ppp/options.pptpd
speed 115200
stimeout 10
localip 192.168.3.1
remoteip 192.168.3.90-99
#localip & remoteip are not needed, ip management is done by pppd"

options.pptp

debug
logfile /tmp/pptp-server.log
#172.16.1.1:
auth
name "pptp-server"
lcp-echo-failure 3
lcp-echo-interval 60
default-asyncmap
mtu 1482
mru 1482
nobsdcomp
nodeflate
#noproxyarp
#nomppc
mppe required,no40,no56,stateless
require-mschap-v2
refuse-chap
refuse-mschap
refuse-eap
refuse-pap
proxyarp
ms-dns 192.168.3.1

firewall.user

# This file is interpreted as shell script.
# Put your custom iptables rules here, they will
# be executed with each firewall (re-)start.
iptables -A forwarding_rule -i ppp+ -j ACCEPT
iptables -A forwarding_rule -o ppp+ -j ACCEPT


wycinek z firewall-a (inne wpisy mają apostrofy, ten skopiowany z poradnika ich nie ma)

config rule
        option _name PPTP
        option src wan
        option dest_port 1723
        option proto tcp
        option target ACCEPT

wycinek z iptables --list

Chain zone_wan (1 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            udp dpt:bootpc
ACCEPT     icmp --  anywhere             anywhere            icmp echo-request
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:1723
input_wan  all  --  anywhere             anywhere
zone_wan_REJECT  all  --  anywhere             anywhere

2 Odpowiedź przez slaw2012

  • Zarejestrowany: 2012-02-01
  • Posty: 62

Odp: PPTP - Gargoyle (1.5.6) - parametry konfiguracyjne

Dodam tylko, że od strony LAN udaje się ustawić tunel (chociaż IP klienta jest poza wyznaczonym zakresem). Czy protokół GRE jest poprawnie przepuszczany przez firewalla ?

Nov 27 02:59:17 pptpd[1616]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 27 02:59:17 pptpd[1616]: CTRL: local address = 192.168.3.1
Nov 27 02:59:17 pptpd[1616]: CTRL: remote address = 192.168.3.90
Nov 27 02:59:17 pptpd[1616]: CTRL: pppd speed = 115200
Nov 27 02:59:17 pptpd[1616]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 27 02:59:17 pptpd[1616]: CTRL: Client 192.168.3.169 control connection started
Nov 27 02:59:17 pptpd[1616]: CTRL: Received PPTP Control Message (type: 1)
Nov 27 02:59:17 pptpd[1616]: CTRL: Made a START CTRL CONN RPLY packet
Nov 27 02:59:17 pptpd[1616]: CTRL: I wrote 156 bytes to the client.
Nov 27 02:59:17 pptpd[1616]: CTRL: Sent packet to client
Nov 27 02:59:17 pptpd[1616]: CTRL: Received PPTP Control Message (type: 7)
Nov 27 02:59:17 pptpd[1616]: CTRL: Set parameters to 100000000 maxbps, 8192 window size
Nov 27 02:59:17 pptpd[1616]: CTRL: Made a OUT CALL RPLY packet
Nov 27 02:59:17 pptpd[1616]: CTRL: Starting call (launching pppd, opening GRE)
Nov 27 02:59:17 pptpd[1616]: CTRL: pty_fd = 6
Nov 27 02:59:17 pptpd[1616]: CTRL: tty_fd = 7
Nov 27 02:59:17 pptpd[1616]: CTRL: I wrote 32 bytes to the client.
Nov 27 02:59:17 pptpd[1616]: CTRL: Sent packet to client
Nov 27 02:59:17 pptpd[1617]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 27 02:59:17 pptpd[1617]: CTRL (PPPD Launcher): local address = 192.168.3.1
Nov 27 02:59:17 pptpd[1617]: CTRL (PPPD Launcher): remote address = 192.168.3.90
Nov 27 02:59:17 pppd[1617]: pppd 2.4.5 started by root, uid 0
Nov 27 02:59:17 pppd[1617]: using channel 14
Nov 27 02:59:17 pppd[1617]: Using interface ppp0
Nov 27 02:59:17 pppd[1617]: Connect: ppp0 <--> /dev/pts/1
Nov 27 02:59:17 pppd[1617]: sent [LCP ConfReq id=0x1   ]
Nov 27 02:59:17 pptpd[1616]: GRE: accepting packet #0
Nov 27 02:59:17 pptpd[1616]: GRE: accepting packet #1
Nov 27 02:59:17 pppd[1617]: rcvd [LCP ConfReq id=0x1     ]
Nov 27 02:59:17 pppd[1617]: sent [LCP ConfRej id=0x1   ]
Nov 27 02:59:17 pppd[1617]: rcvd [LCP ConfAck id=0x1   ]
Nov 27 02:59:17 pptpd[1616]: GRE: accepting packet #2
Nov 27 02:59:17 pppd[1617]: rcvd [LCP ConfReq id=0x2  ]
Nov 27 02:59:17 pppd[1617]: sent [LCP ConfAck id=0x2  ]
Nov 27 02:59:17 pppd[1617]: sent [LCP EchoReq id=0x0 magic=0xfe3b8424]
Nov 27 02:59:17 pppd[1617]: sent [CHAP Challenge id=0xa , name = "pptp-server"]
Nov 27 02:59:17 pptpd[1616]: GRE: accepting packet #3
Nov 27 02:59:17 pptpd[1616]: GRE: accepting packet #4
Nov 27 02:59:17 pppd[1617]: rcvd [LCP EchoRep id=0x0 magic=0x61fb7f90]
Nov 27 02:59:17 pppd[1617]: rcvd [CHAP Response id=0xa , name = "slaw2012"]
Nov 27 02:59:17 pppd[1617]: Warning - secret file /etc/ppp/chap-secrets has world and/or group access
Nov 27 02:59:17 pppd[1617]: sent [CHAP Success id=0xa "S=B28D290EA0C79797876230BB88602DE8DAFF3E0C M=Access granted"]
Nov 27 02:59:17 pppd[1617]: sent [CCP ConfReq id=0x1 ]
Nov 27 02:59:18 pptpd[1616]: GRE: accepting packet #5
Nov 27 02:59:18 pptpd[1616]: GRE: accepting packet #6
Nov 27 02:59:18 pppd[1617]: rcvd [CCP ConfReq id=0x1 ]
Nov 27 02:59:18 pppd[1617]: sent [CCP ConfNak id=0x1 ]
Nov 27 02:59:18 pppd[1617]: rcvd [CCP ConfAck id=0x1 ]
Nov 27 02:59:18 pptpd[1616]: GRE: accepting packet #7
Nov 27 02:59:18 pppd[1617]: rcvd [CCP ConfReq id=0x2 ]
Nov 27 02:59:18 pppd[1617]: sent [CCP ConfAck id=0x2 ]
Nov 27 02:59:18 pppd[1617]: MPPE 128-bit stateless compression enabled
Nov 27 02:59:18 pppd[1617]: sent [IPCP ConfReq id=0x1  ]
Nov 27 02:59:18 pptpd[1616]: GRE: accepting packet #8
Nov 27 02:59:18 pptpd[1616]: GRE: accepting packet #9
Nov 27 02:59:18 pppd[1617]: rcvd [IPCP ConfReq id=0x1    ]
Nov 27 02:59:18 pppd[1617]: sent [IPCP ConfNak id=0x1   ]
Nov 27 02:59:18 pppd[1617]: rcvd [IPCP ConfAck id=0x1  ]
Nov 27 02:59:18 pptpd[1616]: GRE: accepting packet #10
Nov 27 02:59:18 pppd[1617]: rcvd [IPCP ConfReq id=0x2    ]
Nov 27 02:59:18 pppd[1617]: sent [IPCP ConfAck id=0x2    ]
Nov 27 02:59:18 pppd[1617]: found interface br-lan for proxy arp
Nov 27 02:59:18 pppd[1617]: local  IP address 192.168.3.1
Nov 27 02:59:18 pppd[1617]: remote IP address 192.168.3.90
Nov 27 02:59:18 pppd[1617]: Script /etc/ppp/ip-up started (pid 1630)
Nov 27 02:59:18 ifup: Enabling Router Solicitations on 192_168_3_169 (ppp0)
Nov 27 02:59:18 pppd[1617]: Script /etc/ppp/ip-up finished (pid 1630), status = 0x0
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #11
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #12
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #13
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #14
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #15
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #16
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #17
Nov 27 02:59:22 pptpd[1616]: GRE: accepting packet #18
Nov 27 02:59:23 pptpd[1616]: GRE: accepting packet #19

3 Odpowiedź przez slaw2012

  • Zarejestrowany: 2012-02-01
  • Posty: 62

Odp: PPTP - Gargoyle (1.5.6) - parametry konfiguracyjne

Problem rozwiązany. Klienci (telefon, modem) podłączali się w czasie testów przez APNa, który najwidoczniej blokował protokół GRE. Po zmianie APN na standardowy (internet) wszystkio działa poprawnie, zgodnie z poradnikiem.