Hallo,
ich versuche seit geraumer Zeit erfolglos eine VPN-Verbindung zu meiner Firma herzustellen.
Ich habe hierfür denn PPTP-Client gemäß dieser Anleitung http://pptpclient.sourceforge.net/howto-ubuntu.phtml installiert.
Die Richtigkeit der Verbindungseinstellungen ist gegeben, habe das mehrfach 😉 mit meinem Arbeitskollegen (bei dem VPN unter Linux mit dem PPTPClient funktioniert) abgeglichen.
Wenn ich nun versuche eine Verbindung herzustellen scheint erstmal alles gut zu laufen, allerdings verabschiedet sich "ip route add" immer mit der Meldung "Cannot find device "ppp0" ". Obwohl pptpconfig behauptet, ich wäre connected, habe ich keine Verbindung, PING auf den Server schlägt fehl.
Ansonsten habe ich keinerlei Probleme mit Internetzugang etc; ich verbinde mich übrigens mit Netzwerkkarte->Router->DSL-Modem. Unter Windows (nicht schlagen...) hatte ich auch nie Probleme mit VPN.
Mein größtes Problem bei der Sache ist: ich benutze Linux noch nicht sehr lange, und wenn ich von einer Sache prinzipiell noch nie viel verstanden habe, dann waren es Netzwerke (und alles was dazu gehört )... 😳 Wer oder was ist also ppp0, wieso brauche ich das und habe es nicht? 😉 (wenn ich nach ppp0 google, finde ich fast auschließlich Beträge über Internetverbindung mit Modem...?) Ist mein Problem überhaupt ppp0...?
Ich weiß leider überhaupt nicht wie ich weiter vorgehen soll & bin für jeden Tipp dankbar...
Anbei habe ich mal das Log von PPTPclient gepostet, wobei XXX.XX.XX.XX für die Firmen-IP steht, YYY.YY.YYY.Y/YY für die Netzwerkroute und ZZZ.ZZ.ZZZ.ZZ für die lokale IP.
MfG & vielem Dank im Voraus,
Sober
pptpconfig: debug information dump begins
WARNING: security sensitive information follows
pptpconfig 1.12 2006/08/21 06:19:12
# pptp --version
pptp: unrecognized option `--version'
pptp version 1.7.0
Usage:
pptp <hostname> [<pptp options>] [[--] <pppd options>]
Or using pppd's pty option:
pppd pty "pptp <hostname> --nolaunchpppd <pptp options>"
Available pptp options:
--phone <number> Pass <number> to remote host as phone number
--nolaunchpppd Do not launch pppd, for use as a pppd pty
--quirks <quirk> Work around a buggy PPTP implementation
Currently recognised values are BEZEQ_ISRAEL only
--debug Run in foreground (for debugging with gdb)
--sync Enable Synchronous HDLC (pppd must use it too)
--timeout <secs> Time to wait for reordered packets (0.01 to 10 secs)
--nobuffer Disable packet buffering and reordering completely
--idle-wait Time to wait before sending echo request
--max-echo-wait Time to wait before giving up on lack of reply
--logstring <name> Use <name> instead of 'anon' in syslog messages
--localbind <addr> Bind to specified IP address instead of wildcard
--loglevel <level> Sets the debugging level (0=low, 1=default, 2=high)
# pppd --version
pppd version 2.4.4
# uname -a
Linux sober-desktop 2.6.17-10-generic #2 SMP Tue Dec 5 22:28:26 UTC 2006 i686 GNU/Linux
# modinfo ppp_mppe || modinfo ppp_mppe_mppc
filename: /lib/modules/2.6.17-10-generic/kernel/drivers/net/ppp_mppe.ko
author: Frank Cusack <fcusack@fcusack.com>
description: Point-to-Point Protocol Microsoft Point-to-Point Encryption support
license: Dual BSD/GPL
alias: ppp-compress-18
version: 1.0.2
vermagic: 2.6.17-10-generic SMP mod_unload 586 REGPARM gcc-4.1
depends: ppp_generic
srcversion: 6B88E623CA7C4D7FE2F11FA
# grep mppe /proc/modules
Array
(
[name] => MeineFirma
[server] => XXX.XX.XX.XX
[domain] => (hidden by pptpconfig)
[username] => MeinUser
[password] => (hidden by pptpconfig)
[pppd-options] =>
[pptp-options] =>
[resolv] =>
[dns-options] =>
[routing] => routing_lan_to_lan
[usepeerdns] =>
[require-mppe] => 1
[nomppe-40] =>
[nomppe-128] =>
[refuse-eap] =>
[mppe-stateful] =>
[autostart] =>
[iconify] =>
[persist] =>
[debug] => 1
[client-to-lan] => a:1:{s:15:"YYY.YY.YYY.Y/YY";s:0:"";}
)
# route -n (before pppd)
Kernel IP Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
pptpconfig: debug information dump ends, starting pppd
pppd options in effect:
debug # (from /etc/ppp/peers/MeineFirma)
updetach # (from command line)
idle 600 # (from /etc/ppp/options)
logfd 1 # (from command line)
linkname MeineFirma # (from /etc/ppp/peers/MeineFirma)
dump # (from /etc/ppp/peers/MeineFirma)
noauth # (from /etc/ppp/options.pptp)
refuse-chap # (from /etc/ppp/options.pptp)
refuse-eap # (from /etc/ppp/options.pptp)
name FirmaDomain\\MeinUser # (from /etc/ppp/peers/MeineFirma)
remotename MeineFirma # (from /etc/ppp/peers/MeineFirma)
# (from /etc/ppp/options.pptp)
pty pptp XXX.XX.XX.XX --nolaunchpppd # (from /etc/ppp/peers/MeineFirma)
crtscts # (from /etc/ppp/options)
# (from /etc/ppp/options)
asyncmap 0 # (from /etc/ppp/options)
lcp-echo-failure 4 # (from /etc/ppp/options)
lcp-echo-interval 30 # (from /etc/ppp/options)
lcp-restart 2 # (from /etc/ppp/options)
lcp-max-configure 60 # (from /etc/ppp/options)
ipparam MeineFirma # (from /etc/ppp/peers/MeineFirma)
noipdefault # (from /etc/ppp/options)
nobsdcomp # (from /etc/ppp/options.pptp)
nodeflate # (from /etc/ppp/options.pptp)
require-mppe # (from /etc/ppp/peers/MeineFirma)
require-mppe-128 # (from /etc/ppp/options.pptp)
noipx # (from /etc/ppp/options)
using channel 1
Using interface ppp0pptpconfig: monitoring interface ppp0
Connect: ppp0 <--> /dev/pts/1
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xc865822a> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <auth chap MS> <magic 0x4c3659d9>]
sent [LCP ConfAck id=0x1 <auth chap MS> <magic 0x4c3659d9>]
rcvd [LCP ConfRej id=0x1 <asyncmap 0x0> <pcomp> <accomp>]
sent [LCP ConfReq id=0x2 <magic 0xc865822a>]
rcvd [LCP ConfAck id=0x2 <magic 0xc865822a>]
sent [LCP EchoReq id=0x0 magic=0xc865822a]
rcvd [CHAP Challenge id=0x1 <85d06cf031ea3900>, name = ""]
sent [CHAP Response id=0x1 <0000000000000000000000000000000000000000000000008570e2afefb95076cf1618c1ef28644ee0b790c1a3efd09901>, name = "FirmaDomain\\MeinUser"]
rcvd [LCP EchoRep id=0x0 magic=0x4c3659d9]
rcvd [CHAP Success id=0x1 ""]
CHAP authentication succeeded
CHAP authentication succeeded
Disabling 40-bit MPPE; MS-CHAP LM not supported
sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]
sent [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
sent [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
rcvd [IPCP ConfReq id=0x1 <addr XXX.XX.XX.XX>]
sent [IPCP ConfAck id=0x1 <addr XXX.XX.XX.XX>]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [IPCP ConfNak id=0x2 <addr ZZZ.ZZ.ZZZ.ZZ>]
sent [IPCP ConfReq id=0x3 <addr ZZZ.ZZ.ZZZ.ZZ>]
rcvd [IPCP ConfAck id=0x3 <addr ZZZ.ZZ.ZZZ.ZZ>]
local IP address ZZZ.ZZ.ZZZ.ZZ
remote IP address XXX.XX.XX.XX
# route -n (after pppd exit)
Kernel IP Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
pptpconfig: pppd process exit status 0 (started)
ip route replace XXX.XX.XX.XX via 192.168.0.1 dev eth0 src 192.168.0.138
ip route add 'YYY.YY.YYY.Y/YY' dev 'ppp0'
Cannot find device "ppp0"
pptpconfig: command failed, exit code 255
ip route add 'YYY.YY.YYY.Y/YY' dev 'ppp0'
Cannot find device "ppp0"
pptpconfig: command failed, exit code 255
iptables --insert OUTPUT 1 --source 0.0.0.0/0.0.0.0 --destination YYY.YY.YYY.Y/YY --jump ACCEPT --out-interface 'ppp0'
iptables --insert INPUT 1 --source YYY.YY.YYY.Y/YY --destination 0.0.0.0/0.0.0.0 --jump ACCEPT --in-interface 'ppp0'
iptables --insert FORWARD 1 --source 0.0.0.0/0.0.0.0 --destination YYY.YY.YYY.Y/YY --jump ACCEPT --out-interface 'ppp0'
iptables --insert FORWARD 1 --source YYY.YY.YYY.Y/YY --destination 0.0.0.0/0.0.0.0 --jump ACCEPT
iptables --table nat --append POSTROUTING --out-interface 'ppp0' --jump MASQUERADE
iptables --append FORWARD --protocol tcp --tcp-flags SYN,RST SYN --jump TCPMSS --clamp-mss-to-pmtu
pptpconfig: connected
# route -n (after completion)
Kernel IP Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
XXX.XX.XX.XX 192.168.0.1 255.255.255.255 UGH 0 0 0 eth0
192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0
