[BSD] IPSec

[Gabor Illo]

2010. szeptember 2. 15:21 Gabor Illo írta, <stageline at gmail.com>:

> Nem ennyi, itthon 8, szerveren 100 Mbit/s van. Visszatérve egy a PPTP-re
> megy az auth. megy a felcsatlakozás, de nem lehet pingelni a szerver "belső"
> ip címét a kliensről.
>
> PPP adapter VPN Connection:
>
>    Connection-specific DNS Suffix  . :
>    Description . . . . . . . . . . . : VPN Connection
>    Physical Address. . . . . . . . . :
>    DHCP Enabled. . . . . . . . . . . : No
>    Autoconfiguration Enabled . . . . : Yes
>    IPv4 Address. . . . . . . . . . . : 172.16.0.243(Preferred)
>    Subnet Mask . . . . . . . . . . . : 255.255.255.255
>    Default Gateway . . . . . . . . . : 0.0.0.0
>    DNS Servers . . . . . . . . . . . : 172.16.0.1
>    NetBIOS over Tcpip. . . . . . . . : Enabled
>
> Az átjáró nem tudom miért 0.0.0.0
>
> Szerver
>
> /etc/ppp/ppp.conf
>
> loop:
>     set timeout 0
>     set log phase chat connect lcp ipcp command
>     set device localhost:pptp
>     set dial
>     set login
>     set ifaddr 172.16.0.1 172.16.0.1-172.16.0.254 255.255.0.0
>     set server /tmp/loop "" 0177
>
> loop-in:
>     set timeout 0
>     set log phase lcp ipcp command
>     allow mode direct
>
> pptp:
>     load loop
>     disable pap
>     disable passwdauth
>     disable ipv6cp
>     enable proxy
>     accept dns
>     enable MSChapV2
>     enable mppe
>     disable deflate pred1
>     deny deflate pred1
>     set dns 172.16.0.1
>     set device !/etc/ppp/secure
>
> /usr/local/etc/pptpd.conf
>
> debug
> nobsdcomp
> proxyarp
> localip 172.16.0.1
> remoteip 172.16.0.1-254
> pidfile /var/run/pptpd.pid
> +chapms-v2
> mppe-128
> mppe-stateless
>
> Ha láttok hibát benne hibát szóljatok légyszi. Kb. ez szerint csináltam a
> configot: http://www.linux-bsd-central.com/index.php/content/view/8/
>

Közben próbálkoztam, már lehet pingelni az átjárót, de internet továbbra
sincs, ahogy névfeloldás sem.

/etc/ppp/ppp.conf

loop:
    set timeout 0
    set log phase chat connect lcp ipcp command
    set device localhost:pptp
    set dial
    set login
    set ifaddr 172.16.0.254 172.16.0.1-172.16.0.254 255.255.255.255
    set server /tmp/loop "" 0177

loop-in:
    set timeout 0
    set log phase lcp ipcp command
    allow mode direct

pptp:
    load loop
    disable pap
    disable passwdauth
    disable ipv6cp
    enable proxy
    accept dns
    enable MSChapV2
    enable mppe
    disable deflate pred1
    deny deflate pred1
    set dns 172.16.0.254
    set device !/etc/ppp/secure

/usr/local/etc/pptpd.conf

debug
nobsdcomp
proxyarp
pidfile /var/run/pptpd.pid
+chapms-v2
mppe-128
mppe-stateless

tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1398
        options=80000<LINKSTATE>
        inet 172.16.0.254 --> 172.16.0.107 netmask 0xffffffff
        Opened by PID 35927
tun1: flags=8010<POINTOPOINT,MULTICAST> metric 0 mtu 1500
        options=80000<LINKSTATE>

C:\Users\PC>ping 172.16.0.254

Pinging 172.16.0.254 with 32 bytes of data:
Reply from 172.16.0.254: bytes=32 time=27ms TTL=64
Reply from 172.16.0.254: bytes=32 time=27ms TTL=64
Reply from 172.16.0.254: bytes=32 time=26ms TTL=64
Reply from 172.16.0.254: bytes=32 time=27ms TTL=64

C:\Users\PC>nslookup index.hu
DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown
Address:  172.16.0.254

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
*** Request to UnKnown timed-out

Szóval a 172.16.0.1 cserélődött 172.16.0.254-re és a maszk
255.255.255.255-re

PPP adapter VPN Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VPN Connection
   Physical Address. . . . . . . . . :
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 172.16.0.107(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . : 0.0.0.0
   DNS Servers . . . . . . . . . . . : 172.16.0.254
   NetBIOS over Tcpip. . . . . . . . : Enabled
--------- következő rész ---------
Egy csatolt HTML állomány át lett konvertálva...
URL: <http://datacast.hu/pipermail/bsd/attachments/20100902/bc695746/attachment.html>