Íàñòðîéêà PPTP VPN (accel-pppd) íà WL-500gP

[OperVil]

Ïðåøèë äîìîé, ðåøèë ïîïðîáâàòü íà ñâî¸ì wl-500gP V1. Àäðåñ âïí ñåðâåðà ïðîïèñàë, ìàê óæå ñòîèò êàê ïîëîæåíî, PPTP Options: None, Additional pppd options: require-pap

Jan 1 02:00:06 pptp[84]: Plugin pptp.so loaded.
Jan 1 02:00:06 pptp[84]: PPTP plugin version 0.8.4 compiled for pppd-2.4.5, linux-2.4.37.6
Jan 1 02:00:06 pptp[84]: The remote system is required to authenticate itself
Jan 1 02:00:06 pptp[84]: but I couldn't find any suitable secret (password) for it to use to do so.

Ïîä Debian ñ òàêèì êîíôèãîì âïí ïîäíèìàåòñÿ áåç ïðîáëåì:

lock noauth nobsdcomp nodeflate
user 'my_login'
password 'my_pass'
sync pty 'pptp --idle-wait 0 172.25.254.254 --nolaunchpppd --nobuffer --sync'
demand
maxfail 0
persist
ktune
ipcp-accept-remote ipcp-accept-local noipdefault
default-asyncmap nopcomp noaccomp
novj nobsdcomp nodeflate
lcp-echo-interval 10
lcp-echo-failure 6
nodefaultroute
unit 999

[theMIROn]

Ïðåøèë äîìîé, ðåøèë ïîïðîáâàòü íà ñâî¸ì wl-500gP V1. Àäðåñ âïí ñåðâåðà ïðîïèñàë, ìàê óæå ñòîèò êàê ïîëîæåíî, PPTP Options: None, Additional pppd options: require-pap

Íóæíî äîáàâèòü noauth â êîíöå

require-pap noauth

[OperVil]

êàê ÿ ïèñàë âûøå require-pap âïèñûâàë, è îíî âûäàâàëî îøèáêó, ïîä äåáèàíîì ñ ýòèì æå ïàðàìåòðîì âûäà¸ò òó æå îøèáêó. À noauth è òàê ñòîèò ïî óìîë÷àíèþ.

[theMIROn]

êàê ÿ ïèñàë âûøå require-pap âïèñûâàë, è îíî âûäàâàëî îøèáêó, ïîä äåáèàíîì ñ ýòèì æå ïàðàìåòðîì âûäà¸ò òó æå îøèáêó. À noauth è òàê ñòîèò ïî óìîë÷àíèþ.

ïîâòîðÿþ åùå ðàç, noauth íóæíî äîáàâëÿòü ïîñëå require-pap
èëè æå à additional ïðîïèñàòü refuse-chap refuse-mschap

[OperVil]

×òî áû áûëî ÿñíåå ïðèâîæó êîíôèãè/
Ýòî êîíôèã ñ ðîóòåðà:

noauth refuse-eap
user 'my_login'
password 'my_pass'
plugin pptp.so
pptp_server 172.25.254.254
nomppe-stateful -mppc mtu 1400
maxfail 0
persist
ipcp-accept-remote ipcp-accept-local noipdefault
ktune
default-asyncmap nopcomp noaccomp
novj nobsdcomp nodeflate
lcp-echo-interval 10
lcp-echo-failure 6
unit 0
nodefaultroute

Âîò ëîãè:

Nov 9 15:13:51 pptp[86]: route_add: not adding existing route
Nov 9 15:13:52 pptp[86]: Using interface ppp0
Nov 9 15:13:52 pptp[86]: Connect: ppp0 <--> pptp (172.25.254.254)
Nov 9 15:14:22 pptp[86]: LCP: timeout sending Config-Requests
Nov 9 15:14:22 pptp[86]: Connection terminated.
Nov 9 15:14:22 pptp[86]: Modem hangup
Nov 9 15:14:52 pptp[86]: route_add: not adding existing route
Nov 9 15:14:53 pptp[86]: Using interface ppp0
Nov 9 15:14:53 pptp[86]: Connect: ppp0 <--> pptp (172.25.254.254)
Nov 9 15:15:23 pptp[86]: LCP: timeout sending Config-Requests
Nov 9 15:15:23 pptp[86]: Connection terminated.
Nov 9 15:15:23 pptp[86]: Modem hangup

È òàê ïî êðóãó.

Êîïèðóþ ýòîò êîíôèã ñ ìåëêèìè èçìåíåíèÿìè (îìå÷åíî æèðíûì) â äåáèàí, ïîñëå ÷åãî ïîä äåáèàíîì âïí ïîäðóáàåòñÿ, âûäàþòñÿ àéïèøíèêè.

noauth refuse-eap
user 'my_login'
password 'my_pass'
sync pty 'pptp --idle-wait 0 172.25.254.254 --nolaunchpppd --nobuffer --sync'
nomppe-stateful mtu 1400
maxfail 0
persist
ipcp-accept-remote ipcp-accept-local noipdefault
ktune
default-asyncmap nopcomp noaccomp
novj nobsdcomp nodeflate
lcp-echo-interval 10
lcp-echo-failure 6
unit 777
nodefaultroute

Åñëè äîáàâèòü require-pap, òî äåáèàí âûäà¸ò ýòî:

/usr/sbin/pppd: The remote system is required to authenticate itself
/usr/sbin/pppd: but I couldn't find any suitable secret (password) for it to use to do so.

Ïîä ðîóòåðîì òî æå ñîîáùåíèå.

Ñêðèí íàñòðîéêè âïí ïîä âèíäîé:

[OperVil]

ïîâòîðÿþ åùå ðàç, noauth íóæíî äîáàâëÿòü ïîñëå require-pap
èëè æå à additional ïðîïèñàòü refuse-chap refuse-mschap

Ïðîïèñûâàþ â Additional pppd options:

refuse-chap refuse-mschap require-pap noauth

Ëîã:

Nov 9 15:30:42 pptp[86]: Using interface ppp0
Nov 9 15:30:42 pptp[86]: Connect: ppp0 <--> pptp (172.25.254.254)
Nov 9 15:31:09 pptp[86]: LCP: timeout sending Config-Requests
Nov 9 15:31:09 pptp[86]: Connection terminated.
Nov 9 15:31:09 pptp[86]: Modem hangup

[theMIROn]

Ïðîïèñûâàþ â Additional pppd options:

èëè refuse-chap refuse-mschap èëè require-pap noauth

äëÿ äåòàëüíûõ ëîãîâ - åùå íóæíî äîáàâèòü debug

[OperVil]

ïðîïèñàë require-pap noauth debug. Ëîã òîò æå, ÷òî è âûøå.

Èçâåíÿþñü çà øóìèõó, ïðîáëåìà áûëà â äðóãîì.
Çíàþ æ ÷òî ïðîïèñûâàë ðîóò 172.25.0.0/16 ÷òî áû øåë ÷åðåç 172.25.103.1, íî â ïðîøèâêà îêàçàëàñü óìíåå è ïóñêàëà àäðåñ âïí ñåðâåðà 172.25.254.254 ÷åðåç ãåéòâåé, óêàçàííûé â âýá ìîðäå, à òàì ñòîÿë äðóãîé. Ïìåíÿë íà 103.1 âñ¸ ïîäêëþ÷èëîñü.

Ñïàñèáî çà òåðïåíèå è äåëüíûå ñîâåòû.

[theMIROn]

Èçâåíÿþñü çà øóìèõó, ïðîáëåìà áûëà â äðóãîì.
Çíàþ æ ÷òî ïðîïèñûâàë ðîóò 172.25.0.0/16 ÷òî áû øåë ÷åðåç 172.25.103.1, íî â ïðîøèâêà îêàçàëàñü óìíåå è ïóñêàëà àäðåñ âïí ñåðâåðà 172.25.254.254 ÷åðåç ãåéòâåé, óêàçàííûé â âýá ìîðäå, à òàì ñòîÿë äðóãîé. Ïìåíÿë íà 103.1 âñ¸ ïîäêëþ÷èëîñü.

ïðè ïîäúåìå ñîåäèíåíèÿ àâòîìàòè÷åñêè ïðîïèñûâàåòñÿ ìàðøðóò äî vpn ñåðâåðà ÷åðåç äåôîëòíûé øëþç.

Ñïàñèáî çà òåðïåíèå è äåëüíûå ñîâåòû.

â èòîãå, ñ êàêèìè ïàðàìåòðàìè çàðàáîòàëî òîëüêî pap ïîäêëþ÷åíèå?

[OperVil]

require-pap noauth - ðàáîòàåò
Ñ ïóñòîé ñòðîêîé òàê æå ðàáîòàåò. Ãëàâíîå ÷òî áû ãåéòâåé ñòîÿë ÷åðåç êîòîðûé åìó íóæíî èäòè.
Åù¸ ó ñîñåäà ñáèâàëà íàäïèñü îá îøèáêå CHAP àâòîðèçàöèè(ïðè òîì ÷òî áûëî ïðîïèñàíî require-pap noauth). À ïðè÷èíîé òîìó áûë íå ïðàâèëüíî ââåäåííûé ïàðîëü íà âïí.

ïðè ïîäúåìå ñîåäèíåíèÿ àâòîìàòè÷åñêè ïðîïèñûâàåòñÿ ìàðøðóò äî vpn ñåðâåðà ÷åðåç äåôîëòíûé øëþç.

õì.. ïîä äåáèàíîì íè íà îäíîé èç ñåòåâûõ íå óêàçàí ãåéòâåé, òîëüêî ðîóòàìè óêàçàíû äèàïàçîíû ëîêëàüíûõ àéïè, íî òåì íå ìåíåå àâòîìàòîì ïðîïèñûâàåòñÿ ìàðøðóò ê âïí ñåðâàêó ÷åðåç øëþç òîé ñåòåâîé êàðòû, ÷åðåç êîòîðóþ îí äîëæåí ïîäêëþ÷àòüñÿ. Ò.î. äåôîëò ðîóò ïîÿâëÿåòñÿ ïîñëå ïîäêëþ÷åíèÿ âïí.

[chikanok]

Ïðîáëåìà ðåøåíà.
Êîñÿê áûë íà ñòîðîíå ïðîâàéäåðà.

[P@R@D!SE]

Âîîáùåì ðåáÿò òàêàÿ ïðîáëåìà

Ëîêàëêà, èíåò ÷åðåç VPN

Ñäåëàë âîò ýòî

#!/bin/sh
iptables -t nat -nvL POSTROUTING | grep MASQUERADE | awk '{
    "ifconfig "$7" | grep Mask" | getline ip;
    split(ip,ip,":"); split(ip[2],ip," ");
    split($8,src,"!");
    if (src[1]=="") {src="! -s "src[2]} else {src="-s "src[1]};
    if ($9=="0.0.0.0/0") {dst=""} else {dst="-d "$9};
    system("iptables -t nat -A POSTROUTING -o "$7" "src" "dst" -j SNAT --to-source "ip[1]);
    system("iptables -t nat -D POSTROUTING -o "$7" "src" "dst" -j MASQUERADE");

Âñå çàðàáîòàëî ïðîâåðèë, íî ñêîðîñòü vpn áîëüøå 10-15ìåãàáèò íå ïîäíèìàåòñÿ, êîãäà ÷åðåç ëîêàëêó èäåò 40-50

Ïîäñêàæèòå ÷òî ìîæíî åùå ñäåëàòü

Òàðèô 100 ìåãàáèò, ïðîñòî åñëè ïîäêëþ÷àòü ê êîìïó íàïðÿìóþ ñêîðîñòü â ðàçû âûøå

Product ID: WL500gpv2
Firmware Version: 1.9.2.7
Firmware Release: 1.9.2.7-10

[theMIROn]

óñòàíîâèòü ïðîøèâêó èç ïîäïèñè, è òî, ÷òî ñäåëàëè - äåëàòü ñòàíåò íå îáÿçàòåëüíî.

[P@R@D!SE]

Íó òàê ðàçíèöû æå ïîëó÷èòñÿ íå áóäåò ?

[theMIROn]

Íó òàê ðàçíèöû æå ïîëó÷èòñÿ íå áóäåò ?

áóäåò. åùå ðàçîê: ïðîøèâêó ñìåíèòå íà òó, êîòîðàÿ ó ìåíÿ â ïîäïèñè.