Íàñòðîéêà PPTP VPN (accel-pppd) íà ðîóòåðå Asus

[theMIROn]

âû õîòÿ á â äåôîëò êîíôèãå òîãäà ñäåëàéòå /opt/lib âìåñòî /opt/lib/modules, ÷òîáû íîâûå ëþäè íå íàòûêàëèñü íà ýòè ãðàáëè...

ïî ìíå òàê ýòî êîñÿê âñå ðàâíî, íóæíûå ëèáû, ñïåöèôè÷íûå äëÿ accel-pppd äîëæíû áûòü â /opt/lib/accel-pppd, â ïðåäûäóùåé âåðñèè âñå òàê ðàáîòàëî.

âñå ñìåøàëîñü, ëþäè, êîíè :)
/opt/lib/modules þçàåòñÿ ïðè modprobe, ñïåöèàëüíî, ÷òîáû âíåøíèå ìîäóëè ÿäðà òàì õðàíèòü, îòñóòñòâóþùèå â /lib
áèáëèîòåêè accel - â /opt/lib/accel-pppd, ÷òî è óêàçàíî MODULE_PATH = CMAKE_INSTALL_PREFIX/lib/accel-pppd
íî, åñëè áèáëèîòåêà çàâèñèò îò äðóãîé, ïîèñê áóäåò ïî /opt/etc/ld.conf, ïîýòîìó ïðîáëåìà äîëæíà ðåøàòüñÿ ïîðÿäêîì.
ñíà÷àëà sigchild, ïîòîì pppd_compat

[staticroute]

âñå ñìåøàëîñü, ëþäè, êîíè :)
/opt/lib/modules þçàåòñÿ ïðè modprobe, ñïåöèàëüíî, ÷òîáû âíåøíèå ìîäóëè ÿäðà òàì õðàíèòü, îòñóòñòâóþùèå â /lib
áèáëèîòåêè accel - â /opt/lib/accel-pppd, ÷òî è óêàçàíî MODULE_PATH = CMAKE_INSTALL_PREFIX/lib/accel-pppd
íî, åñëè áèáëèîòåêà çàâèñèò îò äðóãîé, ïîèñê áóäåò ïî /opt/etc/ld.conf, ïîýòîìó ïðîáëåìà äîëæíà ðåøàòüñÿ ïîðÿäêîì.
ñíà÷àëà sigchild, ïîòîì pppd_compat

ñïàñèáî çà äåòàëüíîå îáúÿñíåíèå, íî ýòî íå îòìåíÿåò ôàêòà, ÷òî íîâûå þçåðû, êîòîðûõ çäåñü íåò, ïûòàþùèåñÿ íàñòðîèòü ñ äåôîëòíûì êîíôèãîì - íàòêíóòñÿ íà ãðàáëè ñ çàêðûâàþùèìñÿ accel-pppd, ÿ èñïðàâèë ïîñò ñâîé, îïå÷àòàëñÿ.


Òàê âûÿñíèëè æå, ÷òî ýòî êîñÿê íàñòðîéêè. Åñëè äåëàòü ïàêåòû äëÿ "ñàìûõ íåñìûøë¸íûõ", òî íóæíî âîîáùå âñå ôàéëû â îäíó ïàïêó âûâàëèòü.
Çàãëÿíèòå â /opt/lib/accel-pppd. Êîãäà âñÿ ýòà êîìïàíèÿ ïåðåìåñòèòñÿ â /opt/lib, êòî ïîòîì áóäåò îòëàâëèâàòü ãëþêè, êîãäà êàêóþ-íèáóäü èç ýòèõ áèáëèîòåê "ïîäõâàòèò" äðóãîé ñîôò?

Ïîñìîòðèòå èñòîðèþ accel-pppd â SVN (http://code.google.com/p/wl500g-repo/source/browse/#svn%2Ffeeds%2Frtndev%2Faccel-pppd), ñ ìîìåíòà (http://wl500g.info/showthread.php?28036-%CF%E5%F0%E5%F5%EE%E4-%ED%E0-%ED%EE%E2%FB%E9-%F0%E5%EF%EE%E7%E8%F2%EE%F0%E8%E9-Entware-%F1-Optware&p=247752#post247752) ñîçäàíèÿ ïàêåòà ìåíÿëèñü òîëüêî íîìåðà âåðñèé, êîä íå òðîãàëñÿ.

Ïî ïîâîäó ñàìûõ "íåñìûøëåííûõ" - ïàêåò äîëæåí ðàáîòàòü ñ êîíôèãîì, êîòîðûé ïðèëàãàåòñÿ. Â äàííûé ìîìåíò ýòîãî íå ïðîèñõîäèò, íóæíî èëè ìåíÿòü modules äèðåêòèâó èëè äåëàòü symlink, ïî ìíå òàê ýòî "êîñòûëü". Èñïðàâüòå èëè 1-îå èëè 2-îå íà âàøå óñìîòðåíèå.

[theMIROn]

ñïàñèáî çà äåòàëüíîå îáúÿñíåíèå, íî ýòî íå îòìåíÿåò ôàêòà, ÷òî íîâûå þçåðû, êîòîðûõ çäåñü íåò, ïûòàþùèåñÿ íàñòðîèòü ñ äåôîëòíûì êîíôèãîì - íàòêíóòñÿ íà ãðàáëè ñ çàêðûâàþùèìñÿ accel-pppd, ÿ èñïðàâèë ïîñò ñâîé, îïå÷àòàëñÿ.

Ïî ïîâîäó ñàìûõ "íåñìûøëåííûõ" - ïàêåò äîëæåí ðàáîòàòü ñ êîíôèãîì, êîòîðûé ïðèëàãàåòñÿ. Â äàííûé ìîìåíò ýòîãî íå ïðîèñõîäèò, íóæíî èëè ìåíÿòü modules äèðåêòèâó èëè äåëàòü symlink, ïî ìíå òàê ýòî "êîñòûëü". Èñïðàâüòå èëè 1-îå èëè 2-îå íà âàøå óñìîòðåíèå.

ìåíÿ âîîáùå ÷èòàëè? åñëè äà, òî ïðîøó åùå ðàç.

[staticroute]

ìåíÿ âîîáùå ÷èòàëè? åñëè äà, òî ïðîøó åùå ðàç.

sigchild è pppd_compat âõîäÿò â ñîñòàâ accel-pppd, îòäåëüíî ÿ èõ íå âèäåë.

Ìîæåòå îáúÿñíèòü, ïî÷åìó äî ýòîãî îí ðàáîòàë è íå íóæíî áûëî äåëàòü èçâðàòà ñ ñèìëèíêîì èëè ïóòåì äî /opt/lib â êîíôèãå accel-pppd (çíà÷èò ÷òî-òî â ñîðñå ïîëîìàëè?)

[theMIROn]

ïîýòîìó ïðîáëåìà äîëæíà ðåøàòüñÿ ïîðÿäêîì [ìîäóëåé â conf ôàéëå]
ñíà÷àëà sigchild, ïîòîì pppd_compat

òðåòèé ðàç ÷èòàåì, è îòâå÷àåì ïîñëå ïðîâåðêè.

[demps]

òðåòèé ðàç ÷èòàåì, è îòâå÷àåì ïîñëå ïðîâåðêè.
Ïîðÿäîê ïåðå÷èñëåíèÿ ìîäóëåé â êîíôèãå íå ïîìîãàåò.


[modules]
path=/opt/lib/accel-ppp
log_syslog
l2tp
auth_mschap_v2
auth_mschap_v1
auth_chap_md5
auth_pap
sigchld
pppd_compat
chap-secrets

[evgeny73]

çàðàáîòàëî, ïðèìåðíî â 2-2.5 ðàçà áûñòðåå ÷åì poptop.

Óðà! À ìîæíî ñäåëàòü äëÿ ëàìåðîâ èíñòðóêöèþ (êàê âû äåëàëè äëÿ poptop)? Please Please Please!

[agros]

Óðà! À ìîæíî ñäåëàòü äëÿ ëàìåðîâ èíñòðóêöèþ (êàê âû äåëàëè äëÿ poptop)? Please Please Please!

ÿ ñäåëàë ïî àíàëîãèè ñ poptop, è èñïîëüçîâàë åãî ñêðèïòû, â àâòîçàïóñêå âíåñ ñîîòâ. ìîäèôèêàöèè:

cat /opt/etc/init.d/S21accel-pppd


#!/bin/sh
#
# Start the Accel-pppd (PPTP server) daemon
#

start() {
echo -n "Starting accel-pppd server: "
if [ -n "`pidof accel-pppd`" ]; then
echo "Already running"
return
fi
/opt/sbin/accel-pppd -d -c /opt/etc/accel-ppp.conf -p /opt/var/run/accel-pppd.pid
echo "Done!"
return
}
stop() {
echo -n "Shutting down accel-pppd server: "
/bin/kill `cat /opt/var/run/accel-pppd.pid` 2>/dev/null
sleep 1
if [ -n "`pidof accel-pppd`" ]; then
echo "Failed to stop accel-pppd"
fi
echo "Done!"
return
}
restart() {
stop
start
}

case "$1" in
start)
start
;;
stop)
stop
;;
restart|reload)
restart
;;
condrestart)
[ -r /opt/var/run/accel-pppd.pid ] && restart
;;
*)
echo "Usage: $0 {start|stop|restart|condrestart}"
exit 1
esac
exit $?

êîíôèã accel-pppd ïðèìåðíî òàê:

egrep -vi '^#|^$' /opt/etc/accel-ppp.conf


[modules]
log_syslog
pptp
auth_mschap_v2
ippool
sigchld
pppd_compat
chap-secrets
[core]
thread-count=4
[ppp]
verbose=1
min-mtu=1280
mtu=1400
mru=1400
mppe=require
ipv4=require
ipv6=deny
lcp-echo-interval=20
lcp-echo-timeout=120
[auth]
[pptp]
echo-interval=30
verbose=1
[dns]
[client-ip-range]
0.0.0.0/0
[ip-pool]
gw-ip-address=IP ñåðâåðà îòäàâàåìûé êëèåíòó
attr=Framed-Pool
192.168.x.y-y+z
[log]
syslog=accel-pppd,daemon
copy=1
level=3
[pppd-compat]
ip-up=/opt/etc/ppp/ip-up
ip-down=/opt/etc/ppp/ip-down
verbose=1
[chap-secrets]
gw-ip-address=IP ñåðâåðà îòäàâàåìûé êëèåíòó
chap-secrets=/opt/etc/ppp/chap-secrets

â /tmp/local/sbin/post-mount äîáàâèë:

insmod pppox
insmod pptp

íå çàáóäüòå ñîçäàòü ñîîòâåòñòâóþùèé /opt/etc/ppp/chap-secrets
íó è

chmod ga-r /opt/etc/ppp/chap-secrets

âðîäå âñå, õîòÿ êîå-÷òî, íàâåðíîå ìîæíî âûêèíóòü èëè äîáàâèòü, íî ó ìåíÿ ðàáîòàåò áåç íàðåêàíèé, ðàçâå ÷òî, ïðè ïåðåïðîøèâêå, ïðè ïîäêëþ÷åíèè ÷åðåç accel-pppd, ïðîøèâêà íå çàâåðøàåòñÿ, ïðè ýòîì, ïîõîæå ñðàáàòûâàåò pre-shutdown, ÷åðåç poptop òàêîãî çàìå÷åíî íå áûëî.

P. S.

ïðîâåðüòå íàëè÷èå è èñïîëíÿåìîñòü

cat /opt/etc/ppp/ip-up


#!/bin/sh
iptables -I INPUT -i $1 -s $5 -j ACCEPT
iptables -I FORWARD -i $1 -s $5 -j ACCEPT

è

cat /opt/etc/ppp/ip-down


#!/bin/sh
iptables -D INPUT -i $1 -s $5 -j ACCEPT
iptables -D FORWARD -i $1 -s $5 -j ACCEPT


cat /tmp/local/sbin/post-firewall

#!/bin/sh
iptables -I INPUT -p 47 -j ACCEPT
iptables -I INPUT -p tcp --dport 1723 -j ACCEPT

[Pulse]

íåìíîãî íå ïîíÿòíî

gw-ip-address=IP ñåðâåðà îòäàâàåìûé êëèåíòó
÷òî ñþäà âïèñûâàòü åñëè IP äèíàìè÷åñêèé, íî ðàáîòàåò íà ðîóòåðå ñåðâèñ dyndns?
è ãäå õðàíÿòñÿ ëîãèí è ïàðîëè äëÿ ïîäêëþ÷åíèÿ?
ñêîëüêî êëèåíòîâ ìîæåò áûòü ïîäêëþ÷åíî îäíîâðåìåííî?

[agros]

íåìíîãî íå ïîíÿòíî

gw-ip-address=IP ñåðâåðà îòäàâàåìûé êëèåíòó
÷òî ñþäà âïèñûâàòü åñëè IP äèíàìè÷åñêèé, íî ðàáîòàåò íà ðîóòåðå ñåðâèñ dyndns?
è ãäå õðàíÿòñÿ ëîãèí è ïàðîëè äëÿ ïîäêëþ÷åíèÿ?
ñêîëüêî êëèåíòîâ ìîæåò áûòü ïîäêëþ÷åíî îäíîâðåìåííî?

1.äà íåò, òàì àäðåñ êîíöà òîííåëÿ pptp. (192.168.x.*)
2. chap-secrets
3. ñòîëüêî, ñêîëüêî â àäðåñ-ïóëå èï àäðåñîâ äàäèòå. ò.å z, â ôîðìóëå.

[evgeny73]

ÿ ñäåëàë ïî àíàëîãèè ñ poptop, è èñïîëüçîâàë åãî ñêðèïòû, â àâòîçàïóñêå âíåñ ñîîòâ. ìîäèôèêàöèè:


Ñïàñèáî îãðîìíîå! Â öåëîì âñå ïîíÿòíî, îñòàëîñü òîëüêî ïîíÿòü êàê óñòàíîâèòü accel-pppd è âëåçåòëè îí â 8mb ôëåøà ÷òî íà wnr3500l.
Poptop âåäü â ñâîå âðåìÿ óðåçàëè, ÷òî íà dir-320 âñòàë, ìîæíî è òóò âûëîæèòü ïîäîáíûé àðõèâ ÷òîáû ðàñïàêîâàòü è ïîëüçîâàòñÿ?

[tempik]

Äåëàë íà äíÿõ çíàêîìîìó ... ìîæåò êîìó-íèòü ïðèãîäèòñÿ.
Çàäà÷à áûëà òàêàÿ:
Ñåòü îôèñà (192.168.18.0) ïîäêëþ÷åíà ê èíåòó ÷åðåç 500gP v.1 (192.168.18.100) (áåç VPN/PPoE, àäðåñ "áåëûé"), â ñåòè åñòü ñåðâåð 1Ñ (192.168.18.200) (òåðìèíàëüíûé ðåæèì). Íàäî îáåñïå÷èòü ïîäêëþ÷åíèå ê íåìó èçâíå äâóõ áóõîâ è àäìèíà ïî VPN. Æåëàòåëüíî êàê ìîæíî áîëåå áåçîïàñíî äëÿ ñåòè.

Ðåøåíèå:
Ñòàâèì accel-pppd

opkg install accel-pppd
ln -s /opt/lib/accel-ppp/libsigchld.so /opt/lib/libsigchld.so
áåç ñèìâîëüíîé ññûëêè íå ðàáîòàåò ïðè ëþáîé ïîñëåäîâàòåëüíîñòè ìîäóëåé sigchild, pppd_compat â êîíôèãå.
Òàê êàê áûëî æåëàíèå ðàçãðàíè÷èòü äîñòóï äëÿ àäìèíà è áóõîâ (àäìèíó âñå, áóõàì êàïåëüêó), òî àäðåñà áóäåì âûäàâàòü íå äèíàìè÷åñêè, à â çàâèñèìîñòè îò ëîãèíà.

Íàñòðàèâàåì accel-pppd:


$ cat /opt/etc/accel-ppp.conf
[modules]
log_syslog
pptp
auth_mschap_v2
sigchld
pppd_compat
chap-secrets

[core]
log-error=/opt/var/log/accel-ppp/core.log
thread-count=4

[ppp]
verbose=1
min-mtu=1280
mtu=1400
mru=1400
mppe=require
ipv4=require
ipv6=deny
lcp-echo-interval=20
lcp-echo-timeout=120

[pptp]
echo-interval=30
verbose=1

[client-ip-range]
0.0.0.0/0

[log]
syslog=accel-pppd,daemon
copy=1
level=3

[pppd-compat]
ip-up=/opt/etc/ppp/ip-up
ip-down=/opt/etc/ppp/ip-down
verbose=1

[chap-secrets]
gw-ip-address=192.168.18.100
chap-secrets=/opt/etc/ppp/chap-secrets

Ñîçäàåì ëîãèíû:


$ cat /opt/etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client server secret IP addresses
admin * 54321 192.168.18.10
buh1 * 12345 192.168.18.11
buh2 * 09876 192.168.18.12

Ñîçäàåì ñêðèïòû:


$ cat /opt/etc/ppp/ip-up
#!/bin/sh

if [ $5 == "192.168.18.10" ]; then
iptables -I INPUT -i $1 -s $5 -j ACCEPT
iptables -I FORWARD -i $1 -s $5 -j ACCEPT
else
iptables -I FORWARD -i $1 -s $5 -d 192.168.18.200 -p tcp -m tcp --dport 3389 -j ACCEPT
fi

$ cat /opt/etc/ppp/ip-down
#!/bin/sh

if [ $5 == "192.168.18.10" ]; then
iptables -D INPUT -i $1 -s $5 -j ACCEPT
iptables -D FORWARD -i $1 -s $5 -j ACCEPT
else
iptables -D FORWARD -i $1 -s $5 -d 192.168.18.200 -p tcp -m tcp --dport 3389 -j ACCEPT
fi

Ýòè ñêðèïòû äîáàâëÿþò/óäàëÿþò ïðàâèëà iptables, â çàâèñèìîñòè îò òîãî ïîä êàêèì ëîãèíîì ïîäêëþ÷èëñÿ (êàêîé àäðåñ ïîëó÷èë). Åñëè çàøåë "Àäìèí" èìååò ïðàâî íà âñþ ñåòêó è ðîóòåð èçíóòðè, à åñëè "Áóõè" òî òîëüêî òåðìèíàëîì â ñåðâàê çàéòè (ìàëî ëè ÷òî ó íèõ òàì íà ìàøèíàõ "çëîâðåäíîãî" ñèäèò ;) ). Áåçîïàñíîñòü ñàìîãî òåðìèíàëüíîãî ñåðâåðà âûõîäèò çà ðàìêè äàííîãî ôîðóìà, äàì ëèøü îäèí ñîâåò â "Ïðîôèëü -> Ñðåäà" ó áóõîâ ïðîïèñàòü çàïóñê 1Ñ.
Íó è ðàçðåøàåì äîñòóï ê íàøåìó ñåðâåðó èçâíå

$ cat /usr/local/sbin/post-firewall
#!/bin/sh
iptables -I INPUT -p 47 -j ACCEPT
iptables -I INPUT -p tcp --dport 1723 -j ACCEPT

Íó è íàïîñëåäîê ÷òî-áû ó êëèåíòîâ íå ïðîïàë èíåò ïîñëå ïîäíÿòèÿ VPN ñåññèè â íàñòðîéêàõ ñîåäèíåíèÿ (äëÿ âèíäû) óáðàòü ãàëêó "Ñåòü -> Ïðîòîêîë TCP/IP -> Ñâîéñòâà -> Äîïîëíèòåëüíî -> Èñïîëüçîâàòü îñíîâíîé øëþç â óäàëåííîé ñåòè".
Íó îáùèé ñìûñë ïîíÿòåí, à äàëüøå ïîäñòðàèâàéòå ïîä ñâîè íóæäû ... Óäà÷è!

[theMIROn]

ln -s /opt/lib/accel-ppp/libsigchld.so /opt/lib/libsigchld.so
áåç ñèìâîëüíîé ññûëêè íå ðàáîòàåò ïðè ëþáîé ïîñëåäîâàòåëüíîñòè ìîäóëåé sigchild, pppd_compat â êîíôèãå.

ïîïðàâëåíî â 1.7.2-3. îáíîâëÿåìñÿ.

[staticroute]

Ïåðåñîáåðèòå ñ ïîääåðæêîé shaper, íå õâàòàåò ýòîãî ôóíêöèîíàëà.

Ó êîãî-íèáóäü çàðàáîòàëè íåñêîëüêî ïóëîâ è ÷òîáû êëèåíòû ïîëó÷àëè òå IP, êîòîðûå óêàçàíû â chap-secrets ôàéëå?

1) Ó ìåíÿ âñå êëèåíòû ïîëó÷àþò ïîñëåäîâàòåëüíî ñâîáîäíûå IP-àäðåñà.

2) Ïðè÷åì åñëè îòêëþ÷èòü êëèåíòà ïðèíóäèòåëüíî, IP-îñòàåòñÿ ïî-ïðåæíåìó çàíÿò íà äîâîëüíî-ïðîäîëæèòåëüíîå âðåìÿ (èíà÷å ãîâîðÿ, åñëè âû âûäåëèëè ïóë â 4 àäðåñà, òî åñëè 4 ðàçà ðåêîííåêòíóòü - ïîñëå ýòîãî ïåðåñòàåò ñîåäèíÿòüñÿ).

EDIT: ïðîáëåìà ñ IP-àäðåñàìè êëèåíòîâ (1) ðåøèëàñü êîììåíòèðîâàíèåì ippool è äèàïàçîíîâ, âûäåëÿåìûõ äëÿ ïóëîâ..

EDIT2: ïðîáëåìà (2) äî ñèõ ïîð àêòóàëüíà.

EDIT2: áûëî áû íåïëîõî âíåñòè ñòàðòîâûé ñêðèïò â ïàêåò òàêæå..


#!/bin/sh
#
# Start the Accel-pppd (PPTP server) daemon
#

start() {
echo -n "Starting accel-pppd server: "
if [ -n "`pidof accel-pppd`" ]; then
echo "Already running"
return
fi
/opt/sbin/accel-pppd -d -c /opt/etc/accel-ppp.conf -p /opt/var/run/accel-pppd.pid
echo "Done!"
return
}
stop() {
echo -n "Shutting down accel-pppd server: "
/bin/kill `cat /opt/var/run/accel-pppd.pid` 2>/dev/null
sleep 1
if [ -n "`pidof accel-pppd`" ]; then
echo "Failed to stop accel-pppd"
fi
echo "Done!"
return
}
restart() {
stop
start
}

case "$1" in
start)
start
;;
stop)
stop
;;
restart|reload)
restart
;;
condrestart)
[ -r /opt/var/run/accel-pppd.pid ] && restart
;;
*)
echo "Usage: $0 {start|stop|restart|condrestart}"
exit 1
esac
exit $?

[theMIROn]

2) Ïðè÷åì åñëè îòêëþ÷èòü êëèåíòà ïðèíóäèòåëüíî, IP-îñòàåòñÿ ïî-ïðåæíåìó çàíÿò íà äîâîëüíî-ïðîäîëæèòåëüíîå âðåìÿ (èíà÷å ãîâîðÿ, åñëè âû âûäåëèëè ïóë â 4 àäðåñà, òî åñëè 4 ðàçà ðåêîííåêòíóòü - ïîñëå ýòîãî ïåðåñòàåò ñîåäèíÿòüñÿ).
÷òî â ëîãàõ? ïðèíóäèòåëüíî - ýòî êàê? êàêîé òèï ïîäêëþ÷åíèÿ?



EDIT2: áûëî áû íåïëîõî âíåñòè ñòàðòîâûé ñêðèïò â ïàêåò òàêæå..

ìíå ìîé S60accel-pppd áîëüøå íðàâèòñÿ


#!/bin/sh

ENABLED=yes
PROCS=accel-pppd
ARGS="-c /opt/etc/accel-ppp.conf"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

. /opt/etc/init.d/rc.func

[staticroute]

÷òî â ëîãàõ? ïðèíóäèòåëüíî - ýòî êàê? êàêîé òèï ïîäêëþ÷åíèÿ?

Òèï ïîäêëþ÷åíèÿ PPTP c MPPE128.

 ëîãàõ òàêîå:


Nov 10 00:59:14 accel-pppd: ppp1:: connect: ppp1 <--> pptp(x.x.x.x)
Nov 10 00:59:14 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 519b500d> <mru 1400>]
Nov 10 00:59:14 accel-pppd: ppp1:: recv [LCP ConfReq id=2 <magic 1fc15408>]
Nov 10 00:59:14 accel-pppd: ppp1:: send [LCP ConfAck id=2 ]
Nov 10 00:59:14 accel-pppd: ppp1:: recv [LCP ConfAck id=1 <auth MSCHAP-v2> <magic 519b500d> <mru 1400>]
Nov 10 00:59:14 accel-pppd: ppp1:: send [MSCHAP-v2 Challenge id=1 <d854347a2b8663470ea22adb24957df>]
Nov 10 00:59:14 accel-pppd: ppp1:: recv [MSCHAP-v2 Response id=1 <94a9d2c7bca1aeb798f55c409a5f1b98>, <e718da1dcfa672d71c7ebb2c0c1e284e28553122ef2986d>, F=0, name="login1"]
Nov 10 00:59:14 accel-pppd: ppp1:login1: send [MSCHAP-v2 Success id=1 "S=9D03E408839993A89F17CDEE2716775F32F31518 M=Authentication succeeded"]
Nov 10 00:59:14 accel-pppd: ppp1:login1: send [IPCP ConfReq id=1 <addr 192.168.52.1>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: login1: authentication succeeded
Nov 10 00:59:14 accel-pppd: ppp1:login1: recv [CCP ConfReq id=1 <mppe +H -M +S -L -D +C>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: send [CCP ConfReq id=1 <mppe +H -M +S -L -D -C>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: send [CCP ConfNak id=1 <mppe +H -M +S -L -D -C>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: recv [IPCP ConfReq id=1 <addr 0.0.0.0>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: send [IPCP ConfNak id=1 <addr 192.168.51.3>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: recv [IPCP ConfAck id=1 <addr 192.168.52.1>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: recv [CCP ConfAck id=1 <mppe +H -M +S -L -D -C>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: recv [CCP ConfReq id=2 <mppe +H -M +S -L -D -C> (mppe enabled)]
Nov 10 00:59:14 accel-pppd: ppp1:login1: send [CCP ConfAck id=2]
Nov 10 00:59:14 accel-pppd: ppp1:login1: recv [IPCP ConfReq id=2 <addr 192.168.51.3>]
Nov 10 00:59:14 accel-pppd: ppp1:login1: send [IPCP ConfAck id=2]
Nov 10 00:59:14 accel-pppd: ppp1:login1: pppd_compat: ip-up started (pid 4578)
Nov 10 00:59:14 accel-pppd: ppp1:login1: pppd_compat: ip-up finished (0)
Nov 10 00:59:50 accel-pppd: ppp1:login1: recv [PPTP Call-Clear-Request <Call-ID ae75>]
Nov 10 00:59:50 accel-pppd: ppp1:login1: pppd_compat: ip-down started (pid 4584)
Nov 10 00:59:50 accel-pppd: ppp1:login1: pppd_compat: ip-down finished (0)
Nov 10 00:59:50 accel-pppd: ppp1:: send [PPTP Call-Disconnect-Notify <Call-ID 75ae> <Result 4> <Error 0> <Cause 0>]
Nov 10 00:59:50 accel-pppd: ppp1:: pptp: disconnect by peer
Nov 10 00:59:50 accel-pppd: ppp1:: disconnected
Nov 10 00:59:52 accel-pppd: pptp: new connection from x.x.x.x
Nov 10 00:59:52 accel-pppd: :: recv [PPTP Start-Ctrl-Conn-Request <Version 1> <Framing 3> <Bearer 3> <Max-Chan 65535>]
Nov 10 00:59:52 accel-pppd: :: send [PPTP Start-Ctrl-Conn-Reply <Version 1> <Result 1> <Error 0> <Framing 3> <Bearer 3> <Max-Chan 1>]
Nov 10 00:59:53 accel-pppd: :: recv [PPTP Outgoing-Call-Request <Call-ID d98b> <Call-Serial 0> <Min-BPS 2400> <Max-BPS 1000000000> <Bearer 3> <Framing 3> <Window-Size 50> <Delay 0>]
Nov 10 00:59:53 accel-pppd: :: send [PPTP Outgoing-Call-Reply <Call-ID 24b> <Peer-Call-ID d98b> <Result 1> <Error 0> <Cause 0> <Speed 1000000000> <Window-Size 50> <Delay 0> <Channel 0>]
Nov 10 00:59:53 accel-pppd: ppp1:: connect: ppp1 <--> pptp(x.x.x.x)
Nov 10 00:59:53 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 257130a3> <mru 1400>]
Nov 10 00:59:56 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 257130a3> <mru 1400>]
Nov 10 00:59:56 accel-pppd: ppp1:: recv [LCP ConfReq id=1 <magic 18983e0f>]
Nov 10 00:59:56 accel-pppd: ppp1:: send [LCP ConfAck id=1 ]
Nov 10 00:59:59 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 257130a3> <mru 1400>]
Nov 10 00:59:59 accel-pppd: ppp1:: recv [LCP ConfReq id=1 <magic 18983e0f>]
Nov 10 00:59:59 accel-pppd: ppp1:: send [LCP ConfAck id=1 ]
Nov 10 01:00:02 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 257130a3> <mru 1400>]
Nov 10 01:00:02 accel-pppd: ppp1:: recv [LCP ConfReq id=1 <magic 18983e0f>]
Nov 10 01:00:02 accel-pppd: ppp1:: send [LCP ConfAck id=1 ]
Nov 10 01:00:23 accel-pppd: ppp1:: send [PPTP Call-Disconnect-Notify <Call-ID 8bd9> <Result 3> <Error 0> <Cause 0>]
Nov 10 01:00:23 accel-pppd: ppp1:: send [PPTP Stop-Ctrl-Conn-Request <Reason 0>]
Nov 10 01:00:23 accel-pppd: ppp1:: pptp: disconnect by peer
Nov 10 01:00:23 accel-pppd: ppp1:: disconnected


È òàê ïîñòîÿííî ïîñëå ðåêîííåêòîâ, ïîêà íå ñìåíèøü IP â /opt/etc/ppp/chap-secrets íà äðóãîé.

Íà êëèåíòå:



Nov 10 00:00:54 pptp[1204]: Connect: ppp0 <--> pptp (x.x.x.x)
Nov 10 00:01:24 pptp[1204]: LCP: timeout sending Config-Requests
Nov 10 00:01:24 pptp[1204]: Connection terminated.
Nov 10 00:01:24 pptp[1204]: Modem hangup


õîòÿ âîò ñåé÷àñ ñ 5-îãî ðàçà ïîäñîåäèíèëñÿ, íî âîîáùå ïîìîéìó ñðàçó äîëæåí, íå? íà ïîïòîïå òàêîãî ãëþêà ÿ íå íàáëþäàë.

êëèåíò ïðèáèâàëñÿ ÷åðåç killall pppd íà ñòîðîíå êëèåíòà (òàì òîæå ðîóòåð).


È íå ðàáîòàåò, åñëè óêàçàòü â /opt/etc/ppp/chap-secrets ïîäñåòü âìåñòî ôèêñèðîâàííîãî IP-àäðåñà, íàïðèìåð 192.168.51.0/24.
 ëîãàõ (íà ñåðâåðå):


Nov 10 01:09:26 accel-pppd: ppp1:: connect: ppp1 <--> pptp(x.x.x.x)
Nov 10 01:09:26 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 4b588f54> <mru 1400>]
Nov 10 01:09:26 accel-pppd: ppp1:: recv [LCP ConfReq id=1 <magic b45c1cc0>]
Nov 10 01:09:26 accel-pppd: ppp1:: send [LCP ConfAck id=1 ]
Nov 10 01:09:26 accel-pppd: ppp1:: recv [LCP ConfAck id=1 <auth MSCHAP-v2> <magic 4b588f54> <mru 1400>]
Nov 10 01:09:26 accel-pppd: ppp1:: send [MSCHAP-v2 Challenge id=1 <2390ecec27573e125fc5839317c72e4b>]
Nov 10 01:09:26 accel-pppd: ppp1:: recv [MSCHAP-v2 Response id=1 <d5b7ad74555f269619a94e5a817c235>, <f1c7aa60d2b2c18c45c023d8d664d920304ad53ccc2e986f>, F=0, name="login1"]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [MSCHAP-v2 Success id=1 "S=D764A21DD3B24D991AA4F9822774FE883359A98A M=Authentication succeeded"]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [IPCP ConfReq id=1 <addr 192.168.52.1>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: login1: authentication succeeded
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [CCP ConfReq id=1 <mppe +H -M +S -L -D +C>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [CCP ConfReq id=1 <mppe +H -M +S -L -D -C>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [CCP ConfNak id=1 <mppe +H -M +S -L -D -C>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [IPCP ConfReq id=1 <addr 0.0.0.0>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [IPCP ConfNak id=1 <addr 255.255.255.255>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [IPCP ConfAck id=1 <addr 192.168.52.1>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [CCP ConfAck id=1 <mppe +H -M +S -L -D -C>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [CCP ConfReq id=2 <mppe +H -M +S -L -D -C> (mppe enabled)]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [CCP ConfAck id=2]
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [IPCP ConfReq id=2 <addr 255.255.255.255>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [IPCP ConfAck id=2]
Nov 10 01:09:26 accel-pppd: ppp1:login1: ppp: failed to set peer IPv4 address: Invalid argument
Nov 10 01:09:26 accel-pppd: ppp1:login1: pppd_compat: ip-up started (pid 4619)
Nov 10 01:09:26 accel-pppd: ppp1:login1: pppd_compat: ip-up finished (0)
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [IPCP TermReq id=3]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [IPCP TermReq id=3]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [IPCP TermAck id=3]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [LCP TermReq id=3]
Nov 10 01:09:26 accel-pppd: ppp1:login1: IPCP: discarding packet
Nov 10 01:09:26 accel-pppd: ppp1:login1: recv [LCP TermAck id=3]
Nov 10 01:09:26 accel-pppd: ppp1:login1: pppd_compat: ip-down started (pid 4620)
Nov 10 01:09:26 accel-pppd: ppp1:login1: pppd_compat: ip-down finished (0)
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [PPTP Call-Disconnect-Notify <Call-ID 52c9> <Result 3> <Error 0> <Cause 0>]
Nov 10 01:09:26 accel-pppd: ppp1:login1: send [PPTP Stop-Ctrl-Conn-Request <Reason 0>]
Nov 10 01:09:26 accel-pppd: ppp1:: pptp: disconnect by peer
Nov 10 01:09:26 accel-pppd: ppp1:: disconnected





ìíå ìîé S60accel-pppd áîëüøå íðàâèòñÿ


#!/bin/sh

ENABLED=yes
PROCS=accel-pppd
ARGS="-c /opt/etc/accel-pppd.conf"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

. /opt/etc/init.d/rc.func


íå áóäó ñïîðèòü, ïóñòü áóäåò òàêîé âàðèàíò

ó ìåíÿ îí íå çàðàáîòàë:

# accel-pppd -c /opt/etc/accel-ppp.conf
modprobe: chdir(/opt/lib/modules): No such file or directory
#sh S60accel-pppd start
Starting accel-pppd...
failed.


â îáùåì-òî âñå ðàáîòàåò, íî îøèáêó ýòó ïèøåò, òàê êàê ïûòàåòñÿ ïîäãðóçèòü ìîäóëü äëÿ pptp, òîãäà êîãäà îí âêîìïèëåí óæå â ÿäðî ïðè ýòîì âûäàâàÿ îøèáêó. ñîîòâåòñòâåííî init script íå îòðàáàòûâàåò âåðíî.

âñå ýòî ïðîèñõîäèò èç-çà level=5 ÿ òàê ïîíèìàþ..

EDIT:
÷òîáû ïîáîðîòü âîðíèíã ýòîò ïðèäåòñÿ ñîçäàòü /opt/lib/modules/2.6.22.19/modules.dep

EDIT2:
â îáùåì îøèáêà áûëà íàéäåíà, èñïîëüçîâàëñÿ /opt/etc/accel-pppd.conf âìåñòî äåôîëòíîãî (ïîñòàâëÿåìîãî ñ ïàêåòîì) /opt/etc/accel-ppp.conf

åùå íåïëîõî áûëî áû äîáàâèòü "-d" îïöèþ, ÷òîáû îí äåìîíîì ñòàðòîâàë..

[Nolik]

Ñåãîäíÿ âåñü âå÷åð ïûòàëñÿ íàñòðîèòü ðîóòåð äëÿ union online, âñå âðåìÿ âûäàâàëî îøèáêó...

MS-CHAP Authorization failed ^AE=691 R=1 M=Authorization failed.

Ïàðîëü ïðàâèëüíûé, íà êîìïå âñå ðàáîòàåò, ìàê àäðåñ ñ êîìïà ïðîïèñûâàëè â ðîóòåð... ðåçóëüòàòà òàêîéæå ((

Íà êîìïüþòåðå íàñòðàèâàåòñÿ ïî ýòîé êàðòèíêå

9329

Ìîæåò íóæíû êàêèå òî äîïîëíèòåëüíûå îïöèè â ïîëå Additional pppd options?

Ïðîøèâêà RT-N-1.9.2.7-rtn-r4667.

Ìîæåò äðóãóþ âåðñèþ ïðîøèâêó ïîïðîáîâàòü?

[theMIROn]

 ëîãàõ òàêîå:



Nov 10 00:59:14 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 519b500d> <mru 1400>]
Nov 10 00:59:14 accel-pppd: ppp1:: recv [LCP ConfReq id=2 <magic 1fc15408>]
Nov 10 00:59:14 accel-pppd: ppp1:: send [LCP ConfAck id=2 ]
Nov 10 00:59:14 accel-pppd: ppp1:: recv [LCP ConfAck id=1 <auth MSCHAP-v2> <magic 519b500d> <mru 1400>]

äðóã äðóãà óñëûøàëè, äîãîâîðèëèñü



Nov 10 00:59:56 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 257130a3> <mru 1400>]
Nov 10 00:59:56 accel-pppd: ppp1:: recv [LCP ConfReq id=1 <magic 18983e0f>]
Nov 10 00:59:56 accel-pppd: ppp1:: send [LCP ConfAck id=1 ]
... 3 ñåêóíä îæèäàíèÿ ...
Nov 10 00:59:59 accel-pppd: ppp1:: send [LCP ConfReq id=1 <auth MSCHAP-v2> <magic 257130a3> <mru 1400>]
Nov 10 00:59:59 accel-pppd: ppp1:: recv [LCP ConfReq id=1 <magic 18983e0f>]
Nov 10 00:59:59 accel-pppd: ppp1:: send [LCP ConfAck id=1 ]
...

êëèåíò èëè íå ïîëó÷àåò confreq, èëè ïî êàêèì-òî ïðè÷èíàì íå îòâå÷àåò íà íåãî confack, êàê âûøå.



È òàê ïîñòîÿííî ïîñëå ðåêîííåêòîâ, ïîêà íå ñìåíèøü IP â /opt/etc/ppp/chap-secrets íà äðóãîé.

äàæå åñëè ïåðåçàïóñòèòü êëèåíòà? êñòàòè, ÷òî çà êëèåíò? ìîäåëè, âåðñèè, etc.



È íå ðàáîòàåò, åñëè óêàçàòü â /opt/etc/ppp/chap-secrets ïîäñåòü âìåñòî ôèêñèðîâàííîãî IP-àäðåñà, íàïðèìåð 192.168.51.0/24.

è íå äîëæíî.
èñïîëüçóåòñÿ ñëåäóþùèé àäðåñ èç ippool, èëè èç chap-secrets, èëè radius.



íå áóäó ñïîðèòü, ïóñòü áóäåò òàêîé âàðèàíò
åùå íåïëîõî áûëî áû äîáàâèòü "-d" îïöèþ, ÷òîáû îí äåìîíîì ñòàðòîâàë..

òåïåðü ïàêåò íàçûâàåòñÿ accel-ppp, ñêðèïò âêëþ÷åí â ñîñòàâ, çàîäíî äîáàâèë ïîääåðæêó wins (nbns).
íóæíî ðó÷íîå îáíîâëåíèå, êîíôèã îñòàíåòñÿ íà ìåñòå.


opkg update
opkg remove accel-pppd
opkg install accel-ppp

[staticroute]

êëèåíò èëè íå ïîëó÷àåò confreq, èëè ïî êàêèì-òî ïðè÷èíàì íå îòâå÷àåò íà íåãî confack, êàê âûøå.
äàæå åñëè ïåðåçàïóñòèòü êëèåíòà? êñòàòè, ÷òî çà êëèåíò? ìîäåëè, âåðñèè, etc.

r3497 äâà ðîóòåðà ASUS RT-N16, ñêîðåå âñåãî áàã â êëèåíòå, òàê êàê ðåáóò ðîóòåðà íå ïîìîãàåò èëè ðåñòàðò accel-pppd, âñå ðàâíî ñîåäèíÿåò òîëüêî ñ 3åãî èëè 4îãî ðàçà.

òî, ÷òî ýòî êëèåíò 100%, òàê êàê ñ âèíäû âñå êîííåêòèòñÿ, äèñêîííåêòèòñÿ êàê íàäî.

àïðãåéäèòü íå õî÷åòñÿ ïðîøèâêó - ïîòîìó êàê òàì ãëþêè ñ dnsmasq è ïðî÷èì â íîâûõ ðåâèçèÿõ - óæå áîÿçíî ñòàâèòü.



è íå äîëæíî.
èñïîëüçóåòñÿ ñëåäóþùèé àäðåñ èç ippool, èëè èç chap-secrets, èëè radius.

ippool ó ìåíÿ âîîáùå íå çàðàáîòàë êàê íàäî â êîìáèíàöèè ñ chap-secrets. (ò.å. ÷òîáû èç íóæíûõ ïóëîâ âûäàâàëèñü èïû íóæíûì êëèåíòàì).

ippool òóïî âûäàåò ñëåäóþùèé ñâîáîäíûé IP-àäðåñ.

radius íå íàñòðàèâàë



òåïåðü ïàêåò íàçûâàåòñÿ accel-ppp, ñêðèïò âêëþ÷åí â ñîñòàâ, çàîäíî äîáàâèë ïîääåðæêó wins (nbns).
íóæíî ðó÷íîå îáíîâëåíèå, êîíôèã îñòàíåòñÿ íà ìåñòå.

Ñïàñèáî, à ÷òî íàñ÷åò shaper-a ? Áûëî áû íåïëîõî åãî âêëþ÷èòü òîæå, à òî tc ëåíèâî êîâûðÿòü..

Êñòàòè åùå ïîïóòíûé âîïðîñ ó êîãî ïîëó÷àëîñü çàñòàâèòü samba'û ñèíêàòü ÷åðåç PPTP/OpenVPN òóííåëü ñïèñêè õîñòîâ ñ ïîìîùüþ WINS? Ãîâîðÿò ýòà ïîääåðæêà åñòü òîëüêî â âåðñèè 4. (÷òîáû èç îáåèõ ñåòåé áûëè âèäíû êîìïüþòåðû çà ðîóòåðàìè â ñåòåâîì îêðóæåíèè).

Ìåæäó ðîóòåðàìè ïî÷åìó-òî íè â êàêóþ íå ðàáîòàåò. Äåëàë ñ ñåðâàêîì è ïèõàë çà ñåðâàê åùå ñàìáó - âñå âèäåëîñü è îáå ñåòè âèäåëè êîìïüþòåðû äðóã äðóãà.

Ïî IP åñòåñòâåííî âñå ïèíãóåòñÿ è çàõîäèò äðóã íà äðóæêó.

 êîíôèãå âòîðîé ñàìáû ÿ óêàçûâàë:


; wins support = yes
wins server = 192.168.1.1
wins proxy = yes


Íî ÷òî-òî îíî íèôèãà íå ïðîêñèðóåò êàê íàäî, åñòåñòâåííî allowed è ïðî÷åå âñå ïîäñåòè äîáàâëåíû.

[theMIROn]

r3497 äâà ðîóòåðà ASUS RT-N16
àïðãåéäèòü íå õî÷åòñÿ ïðîøèâêó - ïîòîìó êàê òàì ãëþêè ñ dnsmasq è ïðî÷èì â íîâûõ ðåâèçèÿõ - óæå áîÿçíî ñòàâèòü.

ëîæü. íåò íèêàêèõ ãëþêîâ íà N16 ñ dnsmasq, êàê ìèíèìóì íà r4691.



ippool ó ìåíÿ âîîáùå íå çàðàáîòàë êàê íàäî â êîìáèíàöèè ñ chap-secrets. (ò.å. ÷òîáû èç íóæíûõ ïóëîâ âûäàâàëèñü èïû íóæíûì êëèåíòàì).
ippool òóïî âûäàåò ñëåäóþùèé ñâîáîäíûé IP-àäðåñ.

õî÷åòñÿ ñòðàííîãî? âñå òàê è çàäóìàíî, ÷èòàé ìàí.
ïóëû ïîääåðæèâàþòñÿ per proto è ñ ðàäèóñîì.



Ñïàñèáî, à ÷òî íàñ÷åò shaper-a ? Áûëî áû íåïëîõî åãî âêëþ÷èòü òîæå, à òî tc ëåíèâî êîâûðÿòü..

íà 2.6.22 - íè÷åãî.



 êîíôèãå âòîðîé ñàìáû ÿ óêàçûâàë:

ïðîáëåìû â íàñòðîéêå è îïÿòü ñ ÷òåíèåì ìàíîâ.
äëÿ âñòðîåííîé ñàìáû:


[global]
wins support = yes
local master = yes
domain master = yes
preferred master = yes

[staticroute]

ëîæü. íåò íèêàêèõ ãëþêîâ íà N16 ñ dnsmasq, êàê ìèíèìóì íà r4691.

÷åñòíî ãîâîðÿ íå õî÷åòñÿ ïðîâåðÿòü íà ïðîäàêøåíå, ïîêà ïóñòü áóäåò r3497, 3 ðåêîííåêòà ýòî íå ñìåðòåëüíî.



õî÷åòñÿ ñòðàííîãî? âñå òàê è çàäóìàíî, ÷èòàé ìàí.
ïóëû ïîääåðæèâàþòñÿ per proto è ñ ðàäèóñîì.


ìîæíî ïîäðîáíåå, ðàäèóñ íå íóæåí ñîâñåì - ëèøíÿÿ íàãðóçêà òîëüêî íà ðîóòåð.



íà 2.6.22 - íè÷åãî.

â ÷åì ïðîáëåìà ñîáðàòü libnl2 èëè ÷òî òàì íóæíî äëÿ øåéïåðà â accel-ppp èëè òàì ÿäðî çàäåéñòâîâàíî?



ïðîáëåìû â íàñòðîéêå è îïÿòü ñ ÷òåíèåì ìàíîâ.
äëÿ âñòðîåííîé ñàìáû:


[global]
wins support = yes
local master = yes
domain master = yes
preferred master = yes


ñëóøàé, ïðîáëåì íèêàêèõ íåòó, íà îñíîâíîé ñàìáå âñå èìåííî òàê è óêàçàíî, íà äîïîëíèòåëüíîé local master = yes, domain master = no

âñå ñäåëàíî êàê íàäî, íî íå ðàáîòàåò.

[theMIROn]

ìîæíî ïîäðîáíåå, ðàäèóñ íå íóæåí ñîâñåì - ëèøíÿÿ íàãðóçêà òîëüêî íà ðîóòåð.
îòêóäà áóäóò âûäàâàòüñÿ àäðåñà - çàâèñèò îò ïîðÿäêà çàãðóçêè radius, chap-secrets, ippool


â ÷åì ïðîáëåìà ñîáðàòü libnl2 èëè ÷òî òàì íóæíî äëÿ øåéïåðà â accel-ppp èëè òàì ÿäðî çàäåéñòâîâàíî?
â ò.÷. ÿäðî


âñå ñäåëàíî êàê íàäî, íî íå ðàáîòàåò.
âðÿä ëè ïîëíîñòüþ êàê íàäî, 10 ñåê. ãóãëåíèÿ http://randombio.com/linuxsetup38.html

[staticroute]

âðÿä ëè ïîëíîñòüþ êàê íàäî, 10 ñåê. ãóãëåíèÿ http://randombio.com/linuxsetup38.html

Ðàáîòàåò òîëüêî â òîì ñëó÷àå, åñëè ïîäíÿò åäèíñòâåííûé WINS ñåðâåð â ñåòè 192.168.1.1.

 ñåòè 192.168.2.0/24 äîëæåí áûòü ïðîïèñàí òîò æå ñàìûé WINS íà êëèåíòàõ, èíà÷å îíè íå âèäÿò äðóãèå êîìïüþòåðû è íå ìîãóò íà íèõ çàéòè, òàê êàê WINS-ðåïëèêàöèÿ äî ñèõ ïîð íå ñäåëàíà.

Êðîìå òîãî, ñòîèò îòìåòèòü, ÷òî remote announce è remote browse ðàáîòàþò êðàéíå ïëîõî (êàê ðàç âûøåîïèñàííûé ãëþê), ïîýòîìó ñòîèò äåëàòü íà âèíäîâûõ êëèåíòàõ ïîñëå îêîí÷àòåëüíîé íàñòðîéêè:

netsh winsock reset

 îáùåì-òî ïðîáëåìà çàêëþ÷àåòñÿ â òîì, ÷òî â ñàìáå3 äî ñèõ ïîð íåòó WINS Replication:


As of Samba-3, WINS replication is being worked on. The bulk of the code has been committed, but it still needs maturation. This is not a supported feature of the Samba-3.0.20 release. Hopefully, this will become a supported feature of one of the Samba-3 release series. The delay is caused by the fact that this feature has not been of sufficient significance to inspire someone to pay a developer to complete it.

Right now Samba WINS does not support MS-WINS replication. This means that when setting up Samba as a WINS server, there must only be one nmbd configured as a WINS server on the network. Some sites have used multiple Samba WINS servers for redundancy (one server per subnet) and then used remote browse sync and remote announce to effect browse list collation across all segments. Note that this means clients will only resolve local names and must be configured to use DNS to resolve names on other subnets in order to resolve the IP addresses of the servers they can see on other subnets. This setup is not recommended but is mentioned as a practical consideration (i.e., an “if all else fails” scenario). NetBIOS over TCP/IP is an ugly and difficult to manage protocol. Its replacement, NetBIOSless SMB over TCP/IP is not without its own manageability concerns. NetBIOS based networking is a life of compromise and trade-offs. WINS stores information that cannot be stored in DNS; consequently, DNS is a poor substitute for WINS given that when NetBIOS over TCP/IP is used, Windows clients are designed to use WINS.

ß êàê ðàç-òàêè õîòåë ñäåëàòü ïî-âòîðîìó ìåòîäó, ÷òîáû â êàæäîé ïîäñåòè áûë ñâîé WINS-ñåðâåð (íà ñëó÷àé ïàäåíèÿ ëèíêà ìåæäó ñåòÿìè èëè îäíîãî èç WINS-ñåðâåðîâ).

ß äóìàþ ñòîèò åùå ïðèñìîòðåòüñÿ ê http://www.enterprisesamba.org/samba4wins/

ñîðñ òàì ïðèñóòñòâóåò, òîëüêî íåèçâåñòíî çàâåäåòñÿ îíî íà MIPS è âîîáùå áóäåò ëè ðàáîòàòü êîððåêòíî ðåïëèêàöèÿ ìåæäó WINS ñåðâåðàìè.

Ýòî âñå íåìíîãî îôôòîïèê, íî ñòîèò îòìåòèòü, ÷òî ñåòè áûëè îáúåäèíåíû ïîñðåäñòâîì PPTP-òîííåëÿ, ïîñòðîåííîãî íà accel-pppd.

[KAM-]

Ëþäè, ïîäñêàæèòå - åñòü ëè â àëüòåðíàòèâíîé ïðîøèâêå PPTP êëèåíò. Íàäî ïîäêëþ÷èòüñÿ ïî PPTP ê óäàëåííîìó îôèñó. Òðåáóåòñÿ ëè ñòàâèòü ÷òî òî äîïîëíèòåëüíî èëè âåñü ôóíêöèîíàë ðåàëèçîâàí øòàòíî ?

[evgeny73]

Ñïàñèáî îãðîìíîå! Â öåëîì âñå ïîíÿòíî, îñòàëîñü òîëüêî ïîíÿòü êàê óñòàíîâèòü accel-pppd è âëåçåòëè îí â 8mb ôëåøà ÷òî íà wnr3500l.
Poptop âåäü â ñâîå âðåìÿ óðåçàëè, ÷òî íà dir-320 âñòàë, ìîæíî è òóò âûëîæèòü ïîäîáíûé àðõèâ ÷òîáû ðàñïàêîâàòü è ïîëüçîâàòñÿ?

Ïî ñëó÷àþ ïðèîáðåòåíèÿ rt-n16 ïîïðîáîâàë ïîñòàâèòü optware è accel-ppp çàíèìàåò 7 ìåòðîâ, óæèìàåòñÿ äî 2.4mb ïðè ñîõðàíåíèè. Òàê÷òî ìîæåò è íà ôëåø ïàìÿòü 3500l âëåçåò, òåìáîëåå ïîñëå óñòàíîâêè accel-ppp ìîæíî ïîïðîáîâàòü óäàëèòü opkg
Äëÿ çàïóñêà èñïîëüçîâàë ñêðèïò èç êîìïëåêòà /opt/etc/init.d/S60accel-ppp, íî ïðè ñòàðòå ðóãàåòñÿ
Jan 1 04:00:11 accel-pppd: failed to load pptp kernel module

Ïðèøëîñü ïðîïèñûâàòü insmod pptp â post-boot, åñëè ïðîïèñàòü êàê ðåêîìåíäîâàë Agros â post-mount òî íå çàïóñêàåòñÿ, íàâåðíîå ïîòîìó ÷òî ÿ íèêàêèõ âíåøíèõ íàêîïèòåëåé íå ïîäêëþ÷àë, íó à ðàç íè÷åãî íå ìîíòèðóåòñÿ, òî êàê ÿ ïîíÿë è post-mount íå çàïóñêàåòñÿ. À âîò insmod pppox çàïóñêàòü ñàìîìó íå íàäî, âèäàòü ïîñëå óñòàíîâêè accel-ppp ïðîïèñàëñÿ åãî çàïóñê ãäå íàäî.
Ðàáîòàåò ðàçà â 4 áûñòðåå ÷åì poptop, åäèíñòâåííî çàìå÷åííûé ïîêà êîñÿê íå ïèíãóþòñÿ ñ ñåðâåðà êëèåíòû è ñîîòâåòñâåííî íå îòêðûâàþòñÿ, ïðè÷åì ñ êëèåíòà ïèíãóåòñÿ/îòêðûâàåòñÿ è ñåðâåð è êëèåíòû

[Gaku]

Çäðàâñòâóéòå!

Åñòü êàêàÿ-òî ñòðàííîñòü ñ SSH-ñåðâåðîì. ÁðîñüÌåäâåäü èíîãäà ïåðåñòà¸ò îòâå÷àòü èçâíå - ìîæåò áûòü èç-çà òîãî ÷òî èç Òóðöèè êòî-òî äîëáèò è âêëþ÷àåòñÿ ñòàíäàðòíûé àíòè-áðóòôîðñ, à ìîæåò - íàñòðîéêè ñáèâàþòñÿ. Ïîäñêàæèòå, êòî ñòàëêèâàëñÿ ñ òàêîé ïðîáëåìîé â ïîñëåäíåé ïðîøèâêå, ñ ÷åì òàêèå äåëà ìîãóò áûòü ñâÿçàíû?

Ïîäñêàæèòå ïîæàëóéñòà ñàìûé ïðîñòîé è ìåíåå-æðóùèé ðåñóðñû ñïîñîá óñòàíîâèòü íà ðîóòåð PPTP-ñåðâåð?

Ïîäñêàæèòå ïîæàëóéñòà ïëàíèðóåòñÿ ëè âñòðàèâàíèå rdtool (http://wl500g.info/showthread.php?8998) â ïðîøèâêó, ïîäîáíî DropBear'ó?

[Anfalov]

Apr 10 22:18:28 accel-pppd: failed to load pptp kernel module
Apr 10 22:18:28 accel-pppd: accel-ppp version 1.7.3

lsmod ãîâîðèò, ÷òî pptp çàãðóæåí, íî òàêîå ïîäîçðåíèå, ÷òî îí ðîäíîé îò ïðîøèâêè (êëèåíò), à íå îò accel-ppp

Ïðî÷èå ëîãè îò accel-ppp ïóñòûå.

 accel-ppp.conf óêàçàíèå íà èñïîëüçîâàíèå pptp åñòü è ëîãå óñòàíîâëåííûõ ôàéëîâ ñ opkg åñòü ìîäóëü libpptp.so

Êóäà êîïàòü? Ìàíîâ íåòó...

[Gaku]

òîæå òàêèå ïðîáëåìû:


accel-pppd: failed to load pptp kernel module
accel-pppd: accel-ppp version 1.7.3
admin: Started accel-pppd from .
accel-pppd: :: failed to create PPTP socket (Protocol not supported)
accel-pppd: :: disconnected


áóäó î÷åíü áëàãîäàðåí ëþáûì íàì¸êàì íà ðåøåíèå.

[Gaku]

Âíåçàïíî ïîÿâèëîñü äâå ïðîáëåìû:
1. Çàïóñê busybox_httpd â post-boot (ñðàçó ïîñëå insmod pptp) íå çàïóñêàåò http-ñåðâåð. Åñëè ñòðîêó çàïóñêà âûïîëíèòü âðó÷íóþ - îòðàáàòûâàåò.
2. Ïîïûòêà ïîäêëþ÷èòüñÿ ê accel-ppp èç Win7 âûçûâàåò îøèáêó 734 ïðè ðåãèñòðàöèè êîìüïüþòåðà â ñåòè (òî åñòü, ïîñëå ïðîâåðêè ëîãèíà è ïàðîëÿ).

opkg update
opkg upgrade
âûïîëíèë.

Ïîäñêàæèòå ïîæàëóéñòà êóäà êîïàòü?

[Gaku]

Ïðîöåññ "accel-pppd -d -c /opt/etc/accel-ppp.conf" ñòðàííûì îáðàçîì ïîòðåáëÿåò 70-90% CPU, ïðè ýòîì ïîäêëþ÷èòüñÿ ê íåìó íå ïîëó÷àåòñÿ.
Êòî-òî îáíîâëÿëñÿ äî ïîñëåäíåé âåðñèè accel-ppp, äîñòóïíîé â EntWare?

[rrunner]

Åñòü rt-n16 c ñåðûì àéïèøíèêîì. (íàò ïðîâàéäåðà.)
Åñòü öèñêà ñ ïóëîì ïóáëè÷íûõ àéïèøíèêîâ, íàòîì âî âíóòðåííþþ ñåòü 10.1.0.0/16 è ãëàâíîå ïîäíÿòûì pptp ñåðâåðîì 10.1.3.0/32.
Çàäà÷à: õî÷ó äî rt-nà cíàðóæè äîáðàòüñÿ.
Ïîäíèìàþ íà rt-n pptp êëèåíòà äåëàþ åãî ãåéòîì ïî óìîë÷àíèþ, ãîâîðþ öèñêå ÷òî-á äàâàëà åìó ñòàòè÷åñêèé 10.1.3.100, è
ip nat inside source static 10.1.3.100 õõõ.õõõ.õõõ.õõõ
Âðîäå âñå Îê, âñå ðàáîòàåò êàê íàäî, rt-n âèäåí è èç âíóòðåííèõ ñåòåé öèñêè è êàê õõõ.õõõ.õõõ.õõõ. Íî ãíàòü âåñü òðàôèê ÷åðåç òóíåëü è òåì áîëåå ÷åðåç êàíàë öèñêè íå êîøåðíî, ïîýòîìó ãîâîðþ rt-nó ÷òî çà ÐÐÐ èíòåðôåéñîì òîëüêî 10.1.0.0/16, è âîò òóò ïðîèñõîäèò çàòûê. Èç âíóòðåííèõ ñåòåé rt-n âèäåí, à èç èíåòà - öèñêà ôîðâàðäèò ïàêåò, rt-n åãî ïîëó÷àåò, íî ò.ê. îòïðàâèòåëü ñ ïóáëè÷íûì IP, rt-n îòâåò øëåò ÷åðåç îñíîâíîé ãåéò (ñåðûé èï ïðîâàéäåðà) ðàçóìååòñÿ íè÷åãî íå ðàáîòàåò.
Êàê ñäåëàòü òàê ÷òî-áû öèñêà â ïîëå èñòî÷íèê ñòàâèëà âíóòðåííèé ÈÏ à â îòâåòíîì ïàêåòå ìåíÿëà åãî îáðàòíî íà ïóáëè÷íûé?
Èëè ìîæåò íàäî êàê-òî îáúÿñíèòü rt-nó, ÷òî âñå ÷òî ïðèøëî ñ ÐÐÐ èíòåðôåéñà, îáðàòíî â íåãî-æå è îòïðàâëÿòü?

[flamekiller]

Ïîäñêàæèòå, ïîæàëóéñòà, êàê ïðîâåðèòü ðàáîòàåò ëè accel-ppp èëè íåò è ÷òî ñ íèì ïðîèñõîäèò. Ïðè accel-pppd -c /opt/etc/accel-ppp.conf íè÷åãî íå ïðîèñõîäèò, ëîãè òîæå îòñóòñòâóþò. Ñòàíäàðòíûì ñêðèïòîì S60accel-ppp çàïóñêàåòñÿ è â ñèñòåìíîì ëîãå ðîóòåðà ïîÿâëÿåòñÿ çàïèñü "Started accel-pppd from ." Êîíôèã ñòàíäàðòíûé, ïðè ïîïûòêå êîííåêòà ñ âèí7 îøèáêà 807, ïûòàþñü ïîäêëþ÷èòüñÿ íà 192.168.1.1 ïî pptp. Ôàéë chap-secrets ñîçäàë è çàïîëíèë. Åùå ãðóçèò ïðîö íà 100%. Âåðñèÿ accel-ppp 1.8.0 ×òî åùå ìîæíî ñäåëàòü äëÿ äèàãíîñòèêè ïðîáëåìû?


[modules]
log_file
log_syslog
log_tcp
log_pgsql
pptp
#l2tp
#pppoe
#ipoe
auth_mschap_v2
auth_mschap_v1
auth_chap_md5
auth_pap
#ippool
chap-secrets
#net-snmp
logwtmp
#connlimit
#ipv6_nd
#ipv6_dhcp
#ipv6pool

[core]
log-error=/opt/var/log/accel-ppp/core.log
thread-count=4

[common]
#single-session=replace
#sid-case=upper
#sid-source=seq

[ppp]
verbose=1
min-mtu=1280
mtu=1400
mru=1400
#ccp=0
#check-ip=0
#mppe=require
ipv4=require
ipv6=deny
ipv6-intf-id=0:0:0:1
ipv6-peer-intf-id=0:0:0:2
ipv6-accept-peer-intf-id=1
lcp-echo-interval=20
#lcp-echo-failure=3
lcp-echo-timeout=120
#unit-cache=1000

[auth]
#any-login=0
#noauth=0

[pptp]
verbose=1
echo-interval=30
echo-failure=15

[pppoe]
#verbose=1
#ac-name=xxx
#service-name=yyy
#pado-delay=0
#pado-delay=0,100:100,200:200,-1:500
#ifname-in-sid=called-sid
#tr101=1
#padi-limit=0
#ip-pool=pppoe
#interface=eth1,padi-limit=1000
#interface=eth0

[l2tp]
#verbose=1
#dictionary=/opt/share/accel-ppp/l2tp/dictionary
#hello-interval=60
#timeout=60
#rtimeout=5
#retransmit=5
#host-name=accel-ppp
#dir300_quirk=0
#secret=
#dataseq=allow
#reorder-timeout=0
#ip-pool=l2tp

[ipoe]
#verbose=1
#username=ifname
#password=username
#lease-time=600
#max-lease-time=3600
#unit-cache=1000
#l4-redirect-table=4
#l4-redirect-ipset=l4
#l4-redirect-on-reject=300
#shared=0
#ifcfg=1
#mode=L2
#start=dhcpv4
#proxy-arp=0
#nat=0
#proto=100
#relay=10.10.10.10
#attr-dhcp-client-ip=DHCP-Client-IP-Address
#attr-dhcp-router-ip=DHCP-Router-IP-Address
#attr-dhcp-mask=DHCP-Mask
#attr-l4-redirect=L4-Redirect
#local-net=192.168.0.0/16
#lua-file=/etc/accel-ppp.lua
#offer-delay=0,100:100,200:200,-1:1000
#vlan-mon=eth0,10-200
#vlan-timeout=60
#vlan-name=%I.%N
#ip-pool=ipoe
#interface=eth0

[dns]
#dns1=8.8.8.8
#dns2=192.168.1.1

[wins]
#wins1=172.16.0.1
#wins2=172.16.1.1

[radius]
#dictionary=/opt/share/accel-ppp/radius/dictionary
#nas-identifier=accel-ppp
#nas-ip-address=127.0.0.1
#gw-ip-address=192.168.100.1
#auth-server=127.0.0.1:1812,testing123 (obsolete)
#acct-server=127.0.0.1:1813,testing123 (obsolete)
#server=127.0.0.1,testing123 (obsolete)
#server=127.0.0.1,testing123,auth-port=1812,acct-port=1813,req-limit=0,fail-time=0
#dae-server=127.0.0.1:3799,testing123
#verbose=1
#timeout=3
#max-try=3
#acct-timeout=120
#acct-delay-time=0
#acct-on=0

[client-ip-range]
#0.0.0.0/0

[ip-pool]
#gw-ip-address=192.168.5.1
#vendor=Cisco
#attr=Cisco-AVPair
#attr=Framed-Pool
#192.168.5.2-255

[log]
log-file=/opt/var/log/accel-ppp/accel-ppp.log
log-emerg=/opt/var/log/accel-ppp/emerg.log
log-fail-file=/opt/var/log/accel-ppp/auth-fail.log
#log-debug=/dev/stdout
syslog=accel-pppd,daemon
log-tcp=127.0.0.1:3000
copy=1
#color=1
#per-user-dir=per_user
#per-session-dir=per_session
#per-session=1
level=5
[log-pgsql]
conninfo=user=log
log-table=log

[pppd-compat]
#ip-pre-up=/opt/etc/ppp/ip-pre-up
#ip-up=/opt/etc/ppp/ip-up
#ip-down=/opt/etc/ppp/ip-down
#ip-change=/opt/etc/ppp/ip-change
#radattr-prefix=/opt/var/run/radattr
#verbose=1

[chap-secrets]
gw-ip-address=192.168.1.1
chap-secrets=/opt/etc/ppp/chap-secrets
#encrypted=0
#username-hash=md5

[shaper]
#attr=Filter-Id
#down-burst-factor=0.1
#up-burst-factor=1.0
#latency=50
#mpu=0
#mtu=0
#r2q=10
#quantum=1500
#cburst=1534
#ifb=ifb0
#up-limiter=police
#down-limiter=tbf
#leaf-qdisc=sfq perturb 10
#rate-multiplier=1
#verbose=1

[cli]
telnet=192.168.1.1:2000
tcp=192.168.1.1:2001
#password=123

[snmp]
master=0
agent-name=accel-ppp

[connlimit]
limit=10/min
burst=3
timeout=60

[ipv6-pool]
fc00:0:1::/48,64
delegate=fc00:1::/36,48

[ipv6-dns]
#fc00:1::1
#fc00:1::2
#fc00:1::3
#dnssl=suffix1.local.net
#dnssl=suffix2.local.net.

[ipv6-dhcp]
verbose=1
pref-lifetime=604800
valid-lifetime=2592000
route-via-gw=1


Áóäó ðàä ëþáîé ïîìîùè. Ñïàñèáî.

[Gaku]

flamekiller, òîæå ñàìîå áûëî. Èñêàë íà ýòîì ôîðóìå ðåøåíèÿ, íå íàø¸ë. Âû÷èñëèë, ÷òî ïîñëåäíÿÿ ðàáî÷àÿ âåðñèÿ 1.7.2-3. Îòêàòèëñÿ íà íå¸.

[flamekiller]

flamekiller, òîæå ñàìîå áûëî. Èñêàë íà ýòîì ôîðóìå ðåøåíèÿ, íå íàø¸ë. Âû÷èñëèë, ÷òî ïîñëåäíÿÿ ðàáî÷àÿ âåðñèÿ 1.7.2-3. Îòêàòèëñÿ íà íå¸.

Ïîäñêàæèòå ïîæàëóéñòà ãäå åå âçÿòü è êàê çàëèòü íà ðîóòåð, ñ Entware ñòàâèòñÿ òîëüêî 1.8

[Gaku]

Ïîäñêàæèòå ïîæàëóéñòà ãäå åå âçÿòü è êàê çàëèòü íà ðîóòåð, ñ Entware ñòàâèòñÿ òîëüêî 1.8
Ëó÷øå ïîèñêîì ïîôîðóìó.
Âîò, íàïðèìåð, çäåñü îòâåò íà òàêîé æå âîïðîñ (êîòîðûé çàäàâàë ÿ): http://wl500g.info/showthread.php?28036-Entware-%ED%EE%E2%FB%E9-%F0%E5%EF%EE%E7%E8%F2%EE%F0%E8%E9-%E4%EB%FF-%F0%EE%F3%F2%E5%F0%EE%E2-(MIPS)&p=264713#post264713

[theMIROn]

Ïîäñêàæèòå, ïîæàëóéñòà, êàê ïðîâåðèòü ðàáîòàåò ëè accel-ppp èëè íåò è ÷òî ñ íèì ïðîèñõîäèò. Ïðè accel-pppd -c /opt/etc/accel-ppp.conf íè÷åãî íå ïðîèñõîäèò, ëîãè òîæå îòñóòñòâóþò. Ñòàíäàðòíûì ñêðèïòîì S60accel-ppp çàïóñêàåòñÿ è â ñèñòåìíîì ëîãå ðîóòåðà ïîÿâëÿåòñÿ çàïèñü "Started accel-pppd from ." Êîíôèã ñòàíäàðòíûé, ïðè ïîïûòêå êîííåêòà ñ âèí7 îøèáêà 807, ïûòàþñü ïîäêëþ÷èòüñÿ íà 192.168.1.1 ïî pptp. Ôàéë chap-secrets ñîçäàë è çàïîëíèë. Åùå ãðóçèò ïðîö íà 100%. Âåðñèÿ accel-ppp 1.8.0 ×òî åùå ìîæíî ñäåëàòü äëÿ äèàãíîñòèêè ïðîáëåìû?
Áóäó ðàä ëþáîé ïîìîùè. Ñïàñèáî.

î÷åíü íåêîððåêòíûé êîíôèã, íåíóæíûå ìîäóëè ðàçðåøåíû, íóæíûå - çàêîììåíòèðîâàíû.
âåðîÿòíî ïðîáëåìà â ýòîì

[Ultras]

ñ íåäàâíèõ ïîð accel-pppd ñòàë êóøàòü 99% ïðîöåññîðà, ïðè ýòîì íè÷åãî íå ðàáîòàåò, è íå ìîãó íèêàê ïîáåäèòü.... ìîæåò ó êîãî áûëî? ïðîøèâêà ïîñëåäíÿÿ, opkg update/upgrade äåëàë.

Äîëãî íå íóæåí áûë VPN, à òóò ïîíàäîáèëîñü è íå ïîäêëþ÷àåòñÿ ê ðîóòåðó, ïîëåç ñìîòðåòü, à òàì ïðîö íà âñþ ôèãà÷èò óæå íå èçâåñòíî ñêîëüêî âðåìåíè. Ïðèòîì â ëîãàõ àáñîëþòíî íè÷åãî íåò, òàêîå îùóùåíèå ÷òî çàâèñàåò ñðàçó æå ïîñëå ÷òåíèÿ êîíôèãà. Ïðè ýòîì â êà÷åñòâå êîíôèãà ìîæíî ïîäñóíóòü àáñîëþòíî ëþáîé ôàéë, íèêàêèõ îøèáîê, ïðîñòî ïðîö íà 99% è âñ¸.

Update: õîðîøî ÷òî áûë backup ôëåøêè, îòêàòèëñÿ íà íåãî, âñ¸ ðàáîòàåò, accel-ppp 1.7.3-1. Âèäèìî â 1.8 êàêèå-òî ïðîáëåìû.

P.S.: êñòàòè åñëè èíòåðíåò ïðèõîäèò ïî PPPoE, òî accel íå ðàáîòàåò, ïðîöåññ âèñíåò, è íèêàê íå óáèâàåòñÿ, õîòü è íå êóøàåò ïðîöåññîðíîå âðåìÿ, ÿ ó ñåáÿ èñïðàâèë ýòî òàê (íåäàâíî ïîìåíÿëñÿ ïðîòîêîë ó ïðîâàéäåðà íà PPPoE):
â ôàéëå /opt/etc/init.d/S60accel-ppp, äîáàâèë â íà÷àëî:

MOD="modprobe pptp"
$MOD

[zzzzzzz]

Äîáðîãî âðåìåíè ñóòîê!

Ïîìîãèòå ëþäè äîáðûå, íåäåëþ áüþñü, ïðîñâåòà íå âèäíî :(

Èìååòñÿ RTN-16 (1.9.2.7-rtn-r5284)
Ïîäêëþ÷åí ê ñåòè, òàì êó÷à âñÿêèõ (10.0.0.0, 172..., 192.168...)
IP ñòàòè÷åñêèé
 èíåò âûõîäèò ÷åðåç VPN (ppp0 inet addr:192.168.75.õ P-t-P:192.168.75.1 Mask:255.255.255.255)
Ëîêàëüíàÿ ñåòü - 172.20.1.1/24
Internet Firewall îòêëþ÷åí.

Íóæåí òóíåëü ñíàðóæè(âîîáùå äðóãàÿ ñåòü, èç íå¸ åñòü äîðîãà òîëüêî îò êîíêðåòíîãî õîñòà ê òîìó ñàìîìó RTN-16), ÷òîáû áûë äîñòóï è â ëîêàëêó, è â ppp0 è âî âíåøíþþ ñåòü.

Óñòàíîâèë accel-ppp version 1.7.3.
òóíåëü ïîäíèìàåòñÿ, íî ïàêåòû äàëüøå ðîóòåðà íå èäóò íèâêàêóþ. :(
Íåäåëþ ýòè rout-û è ipttables-û ïî âñÿêîìó âûêðó÷èâàþ, íè÷åãî íå ïîìîãàåò. :(

êîíôèãè, è ëèñòèíãè âî âëîæåíèè.

[Dr.Norfolk]

Çäðàâñòâóéòå!
(âîïðîñ íåìíîãî íå â ýòó òåìó, íî íàäåþñü ïîõîæóþ)
Ïîäñêàæèòå, ïîæàëóéñòà, èìååò ëè pptp-êëèåíò äëÿ ðîóòåðà (WL500gp, ïðîøèâêà 1.9.2.7-rtn-r5450)? â ðåïîçèòîðèè entware.wl500g.info íàøåë òîëüêî pptpd - ñåðâåð.
Ñèòóàöèÿ òàêàÿ: èìååòñÿ èíòåðíåò îò ïðîâàéäåð (îáû÷íûé Ethernet), ðîóòåð, íà ðàáîòàõ 2 vpn-ñåðâåðà ïîä Windows (Isa server). Õîòåëîñü áû èìåòü ïîñòîÿííîå ïîäêëþ÷åíèå ïî vpn ñ ðîóòåðà äî ýòèõ ñåðâåðîâ (è ñåòåé çà íèìè), à êëèåíòà äëÿ ýòîãî ïîäêëþ÷åíèÿ ñûñêàòü íå ìîãó.

Ñïàñèáî!

[pressure4014]

Ïûòàþñü íàñòðîèòü accel-ppp â ñòðîãîì ñîîòâåòñòâèè ñ èíñòðóêöèåé (http://wl500g.info/showthread.php?23739-%CD%E0%F1%F2%F0%EE%E9%EA%E0-PPTP-VPN-(accel-pppd)-%ED%E0-%F0%EE%F3%F2%E5%F0%E5&p=255290#post255290). Êîíôèã ðîâíî òîò æå, òîëüêî äðóãîé ïóë. Ïðè çàïóñêå ïðîö ãðóçèòüñÿ íà 90-100% è... áîëüøå íè÷åãî íå ïðîèñõîäèò. Ïîðò íå îòêðûâàåòñÿ, íèêàêèå îøèáêè íèêóäà íå ïèøóòñÿ - "Started accel-pppd from ." è óñå.

Ðîóòåð ASUS RT-N16, ïðîøèâêà 1.9.2.7-rtn-r5450. Ïîìîãèòå ëîêàëèçîâàòü ïðîáëåìó.

[AndreyPopov]

à ïî÷åìó áû íå âçÿòü ðîäíóþ ïðîøèâêó èëè óæ òåì áîëåå îò Ìåðëèíà, ãäå PPTP ñåðâåð âêëþ÷åí ïî óìîë÷àíèþ?

[pressure4014]

à ïî÷åìó áû íå âçÿòü ðîäíóþ ïðîøèâêó èëè óæ òåì áîëåå îò Ìåðëèíà, ãäå PPTP ñåðâåð âêëþ÷åí ïî óìîë÷àíèþ?
Ðîäíóþ, ïðîñòèòå, äëÿ êîãî? Êòî òàêîé Ìåðëèí?) ß òîëüêî ÷òî DD-WRT ñíåñ, ò.ê. òàì nginx èç entware íå çàâîäèòñÿ. Ïîñîâåòîâàëè ïðîøèâêó îò ýíòóçèàñòîâ, áëèí)... ×òî äàëüøå?)

[AndreyPopov]

Ðîäíóþ, ïðîñòèòå, äëÿ êîãî? Êòî òàêîé Ìåðëèí?) ß òîëüêî ÷òî DD-WRT ñíåñ, ò.ê. òàì nginx èç entware íå çàâîäèòñÿ. Ïîñîâåòîâàëè ïðîøèâêó îò ýíòóçèàñòîâ, áëèí)... ×òî äàëüøå?)

â ðîäíîé çàâîäñêîé ïðîøèâêå ASUSWRT åñòü PPTP VPN server
Merlin - Asuswrt-Merlin https://github.com/RMerl/asuswrt-merlin/blob/master/README-merlin.txt

ðàñøèðåíèå âîçìîæíîñòåé çàâîäñêîé ïðîøèâêè

â òîì ÷èñëå ñ ïîääåðæêîé entware.

èëè â êîíöå-êîíöîâ ìîé êëîí Asuswrt-Merlin http://wl500g.info/showthread.php?33255-DualWAN-â-ïðîøèâêå-AsusWRT-äëÿ-Asus-RT-N10U-N12*1-N14UHP-N15U-N16-N53

[tsynik]

åñëè entware èñïîëüçóåòñÿ, òî ëó÷øå ïîñòàâèòü èç íåãî accel-ppp è íàñòðîèòü íà íåì ëþáîå pppoe/pptp/l2tp
Äåíü äîáðûé! ß êàê ðàç íàîáîðîò ïîñòóïèë. Ïîñòàèë accel-ppp èç Entware íà N16 ñ Merlin Build, ïðîáåæàëñÿ ïî êîíôèãó è çàêîììåíòèðîâàë âðîäå âñå ëèøíåå, íàñòðîèë ïóòè ê ëîãàì, ñîçäàë ôàéëû ip up etc. Ñòàðòóþ ñåðâèñ, îí çàïóñêàåòñÿ è ìîë÷èò: êàê â êîíñîëè áåç ôîðêà, òàê è äåìîíîì â ñâîèõ ëîãàõ (èç ïðîñòî íåò ïî ïóòè â êîíôèãå). Ïðè ýòîì äðóæíî âèñèò â ïðîöåññàõ è õëåáà íå ïðîñèò (alive òèïà). Ïåðåçàïóñêàåòñÿ áåç îøèáîê è ò.ä.
Áåç ëîãîâ è îøèáîê êàê-òî ñîâñåì ñëîæíî áûëî äåáàã óñòðîèòü, íî óâèäåë âàøå ñîîáùåíèå â òåìå ïðî l2tpd, ðåøèë ïîïðîáîâàòü è âñå íàñòðîèë çà 5 ìèíóò. Ñ ôàåðâîëîì ðàçîáðàëñÿ, äîáàâèë çàîäíî îòêðûòèå ïîðòà ñåðâåðà (ñ ïðîâåðêîé) â init-ñêðèïòå â /opt.  îáùåì - âñå çàìå÷àòåëüíî ðàáîòàåò, ñêîðîñòü - ñàìîëåò (áûñòðåå âñòðîåííîãî PPTP òàê òî÷íî). Îñòàëàñü íåïîíÿòíàÿ ñòðàííîñòü: ñ êîìïüþòåðà (êëèåíò) íà N16 (ñåðâåð) âñå ðàáîòàåò, êîãäà ïûòàþñü òî æå ñîåäèíåíèå ïîäíÿòü ñ äðóãîãî ðîóòåðà (DD-WRT, êàê êëèåíò), îí (DD-WRT) âõîäèò â ñòóïîð. Ïðè òîì, ÷òî ñ òîãî DD-WRT ðîâíî òàê æå ñêîíôèãóðèðîâàííîå L2TP ñîåäèíåíèå íî ñ ïðîâàéäåðîì (òî åñòü ìåíÿåòñÿ òîëüêî àäðåñ ñåðâåðà) óñòàíàâëèâàåò íà óðà. Ïðè ýòîì â ëîãàõ Àñóñà âîò òàêàÿ åðóíäà: M bit not set on message-type AVP. Íå çíàåòå, ÷òî áû ýòî çíà÷èëî?
È ÷åì accel-ppp ëó÷øå? Îí òàê æå áûñòð, êàê øòàòíûé l2tpd?
Ìîæíî ëè âêëþ÷àòü Hardware NAT Acceleration? Ñî øòàòíûì PPTP ñåðâåðîì îò Asus ýòîò ôîêóñ íå ïðîõîäèò - ïàêåòû ïåðåñòàþò ÷åðåç íåãî õîäèòü, õîòÿ âñÿ ñåòü ïèíãóåòñÿ è ñàéòû òèïà îòêðûâàþòñÿ, íå çàâèñèìî îò ðàçìåðà MTU

[tsynik]

Ðîäíóþ, ïðîñòèòå, äëÿ êîãî? Êòî òàêîé Ìåðëèí?) ß òîëüêî ÷òî DD-WRT ñíåñ, ò.ê. òàì nginx èç entware íå çàâîäèòñÿ. Ïîñîâåòîâàëè ïðîøèâêó îò ýíòóçèàñòîâ, áëèí)... ×òî äàëüøå?)
ß òîæå òàê ñíà÷àëà ïîäóìàë. Íî âñå îêàçàëîñü ýëåìåíòàðíî: íóæíî a) âûáèðàòü ïðàâèëüíûé Entware (èõ 2 øòóêè äëÿ Hard Float è Soft Float ðîóòåðîâ). Íó è ïðîïèñàòü LD_LIBRARY_PATH òàê, ÷òîáû îíà íà÷èíàëàñü ñ /opt/lib/ à íå çàêàí÷èâàëàñü èìè â èíèò/ñêðèïòàõ (äîñòàòî÷íî rc.func / rc.unslug â ñàìîì entware). È âñå! Ðàáîòàåò íà ëþáîé dd-wrt è ëþáîì mips ðîóòåðå ñ ëþáîé ïðîøèâêîé )))

[eldarxef]

ñêàæèòå ïîæàëóéñòà, à ãäå ìîæíî ñêà÷àòü accel-ppp âåðñèè 1.7.3 ?

[ryzhov_al]

ñêàæèòå ïîæàëóéñòà, à ãäå ìîæíî ñêà÷àòü accel-ppp âåðñèè 1.7.3 ?Åñëè ðå÷ü îá Entware, òî â àðõèâå (http://entware.wl500g.info/binaries/entware/archive/).

[slashi]

Äîáðûé äåíü!
Íà ðîóòåðå RT-n16 óñòàíîâëåíà ïðîøèâêà îò ýíòóçèàñòîâ(r5066).
WAN èñïîëüçóåò PPTP ñîåäèíåíèå (ñêîíôèãóðèðîâàíî ÷åðåç âåá èíòåðôåéñ).

Íåîáõîäèìî ñîçäàòü åùå îäíî pptp ñîåäèíåíèå. Êàêèì îáðàçîì âîçìîæíî ýòî ðåàëèçîâàòü?
Âîçìîæíî ëè èñïîëüçîâàòü âñòðîåííûå â ïðîøèâêó ñêðèïòû?

Ïîäåëèòåñü ïîæàëóéñòà îïûòîì è ôàéëàìè êîíôèãóðàöèè, åñëè ýòî âîçìîæíî.

[Ultras]

Ïîñëå óñòàíîâêè íå çàïóñêàåòñÿ ÷åðåç ñêðèïò â init.d: Ïîïðîáîâàë ðóêàìè, ïîëó÷èë:


# opkg update
# opkg install accel-ppp
# accel-pppd
accel-pppd: can't load library 'libtriton.so'

Updated: óñòàíîâèë accel-ppp_1.7.3-1 (ïðàâäà ïðèøëîñü èñïîëüçîâàòü libpcre.0.0.1 èç archive) - âñ¸ ðàáîòàåò.
P.S.: 1.8 æð¸ò ïðîö íà 100%, 1.9 - íå çàïóñêàåòñÿ, èç-çà îøèáêè, ïðèâåäåííîé âûøå.

[ryzhov_al]

Ïîñëå óñòàíîâêè íå çàïóñêàåòñÿ ÷åðåç ñêðèïò â init.d: Ïîïðîáîâàë ðóêàìè, ïîëó÷èë:


# opkg update
# opkg install accel-ppp
# accel-pppd
accel-pppd: can't load library 'libtriton.so'

Updated: óñòàíîâèë accel-ppp_1.7.3-1 (ïðàâäà ïðèøëîñü èñïîëüçîâàòü libpcre.0.0.1 èç archive) - âñ¸ ðàáîòàåò.
P.S.: 1.8 æð¸ò ïðîö íà 100%, 1.9 - íå çàïóñêàåòñÿ, èç-çà îøèáêè, ïðèâåäåííîé âûøå.Îáíîâèë ïàêåò äî ïîñëåäíåé äîñòóïíîé ðåâèçèè. Îøèáêó ñ ïîäãðóçêîé libtriton ïîïðàâèë, à íàñ÷¸ò æðàòâû ïðîöåññîðà íàäî ïðîâåðÿòü. Áèíàðíèêè áóäóò äîñòóïíû çàâòðà.

[mar1boro]

Çäðàâñòâóéòå. Íà ðîóòåðå íàñòðîåí PPTP êëèåíò è êîãäà ñîåäèíåíèå ïîäíèìàåòñÿ, òî âåñü âíåøíèé òðàôèê íà÷èíàåò èäòè ÷åðåç óäàëåííûé VPN-ñåðâåð. À íóæíî ÷òîáû ïî ýòîìó ïóòè øåë òîëüêî òðàôèê íà àäðåñà 192.168.1.0 mask 255.255.255.0.

Ïîìîãèòå ïîæàëóéñòà ýòî ðåàëèçîâàòü. Â èíòåðôåéñå ïðîøèâêè â ìàðøðóòàõ ìîæíî óêàçûâàòü òîëüêî èíòåðôåéñû wan man lan, íèêàêèõ ppp íåò :(
Âîò òàáëèöà ìàðøðóòèçàöèè:

10180

íóæíî ÷òîáû ïðèîðèòåò áûë ó WAN à íå PPP5

[mkisel]

Âñåì ïðèâåò.

Ñòàâëþ ÷åðåç opkg accel-ppp (1.9.0-20151130-1)
Ïðàâëþ êîíôèã ïîä ñåáÿ
Çàïóñêàþ, ïîäêëþ÷àþñü - â ëîãå âûëàçèò:
Jan 2 12:18:47 pptpd[4619]: MGR: Failed to exec /opt/sbin/pptpctrl!

Ïî óêàçàííîìó ïóòè ýòîãî ôàéëà íåò. Ýòî áàã ïàêåòà? Ãäå âçÿòü èñêîìûé ôàéë?

[mkisel]

Âñåì ïðèâåò.

Ñòàâëþ ÷åðåç opkg accel-ppp (1.9.0-20151130-1)
Ïðàâëþ êîíôèã ïîä ñåáÿ
Çàïóñêàþ, ïîäêëþ÷àþñü - â ëîãå âûëàçèò:
Jan 2 12:18:47 pptpd[4619]: MGR: Failed to exec /opt/sbin/pptpctrl!

Ïî óêàçàííîìó ïóòè ýòîãî ôàéëà íåò. Ýòî áàã ïàêåòà? Ãäå âçÿòü èñêîìûé ôàéë?

Ñïàñèáî Themiron, accel-ppp íå âûçûâàåò pptpctrl, âûçîâ îñòàëñÿ ñêîðåå âñåãî ãäå-òî ïîñëå êîãäà-òî óñòàíîâëåííîãî poptop. Ïåðåóñòàíîâêà accel-ppp ïîìîãëà.

[Almair]

Äîáðûé äåíü.
Íå ìîãó ðåøèòü çàäà÷ó.
Åñòü ëîêàëüíàÿ ñåòü â êâàðòèðå, ñîñòîÿùàÿ èç:
1. âõîäíîãî ðîóòåðà HG8245H ñ ëîêàëüíûì IP - 192.168.100.1 (ðîóòåð õîçÿéñêèé, çàïðÿòàí â øêàôó â êîðèäîðå, ê íåìó èäåò òîëüêî îïòèêà, ïðîâîäà ïîäêëþ÷èòü âîçìîæíîñòè íåò, âêëþ÷åí wifi íà ðàçäà÷ó).
2. RT-N16 íà ïðîøèâêå 378.50 AsusWRT Merlin â ðåæèìå ïîâòîðèòåëÿ, ïîäêëþ÷åí ïî wifi ê âõîäíîìó ðîóòåðó. Ê íåìó ïîäêëþ÷åíû âñå ëîêàëüíûå óñòðîéñòâà ïî lan è wifi. IP - 192.168.100.200
3. Ñåòåâîé æåñòêèé äèñê. IP - 192.168.100.2
4. Ïðèíòåð. IP - 192.168.100.8
Çàäà÷à - îáåñïå÷èòü äîñòóï èç èíòåðíåòà ê ëîêàëüíûì ðåñóðñàì (è æåëàòåëüíî ê èíòåðíåòó) ïîñðåäñòâîì accel-pptp íà RT-N16. Ó HG8245H äàííîé âîçìîæíîñòè íåò.
×òî ñäåëàíî.
1. Ïðîáðîøåí ïîðò äëÿ pptp íà HG8245H.
2. Íàñòðîåí accel-pptp äëÿ ïîäêëþ÷åíèÿ è çàïóùåí. Ïðîáîâàëñÿ è ÷åðåç nvram è â ðó÷íóþ.
Ðåçóëüòàò: Ïîäêëþ÷åíèå èç èíòåðíåò ïîñðåäñòâîì PPTP ïðîèñõîäèò. Ïèíãóþ RT-N16. ïîäêëþ÷àþñü ê íåìó ÷åðåç putty è äàëüøå ñ íåãî ïèíãóþ âñåõ îñòàëüíûõ.
Íî ñ êëèåíòà PPTP ïèíãà íà ðåñóðñû è òåì áîëåå èíòåðíåò íåò. IP ïðèñâàèâàåò - 192.168.100.130. Ïîÿâëÿåòñÿ èíòåðôåéñ ppp10, ppp11 è ò. ä.
Ïðîøó ïîìî÷ü íàñòðîèòü äî êîíöà.
Ñïàñèáî.

pptpd.conf


localip 192.168.100.200
remoteip 192.168.100.130-139
bcrelay br0,ppp1[0-9].*


options.pptpd


logfile /var/log/pptpd-pppd.log
lock
name *
proxyarp
lcp-echo-failure 10
lcp-echo-interval 6
deflate 0
auth
-chap
nomppe-stateful
+mschap
+mschap-v2
require-mppe-128
nomppe-56
require-mppe-40
chapms-strip-domain
chap-secrets /tmp/pptpd/chap-secrets
ip-up-script /tmp/pptpd/ip-up
ip-down-script /tmp/pptpd/ip-down
mtu 1450
mru 1450
ms-wins 192.168.100.200
ms-dns 192.168.100.200
minunit 10


ip-up


#!/bin/sh
startservice set_routes
echo $PPPD_PID $1 $5 $6 $PEERNAME >> /tmp/pptp_connected
iptables -I INPUT -i $1 -j ACCEPT
iptables -I FORWARD -i $1 -j ACCEPT
iptables -I FORWARD -i $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-t
o-pmtu
iptables -t nat -I PREROUTING -i $1 -p udp -m udp --sport 9 -j DNAT --to-destina
tion 192.168.100.255


ip-down


#!/bin/sh
grep -v $1 /tmp/pptp_connected > /tmp/pptp_connected.new
mv /tmp/pptp_connected.new /tmp/pptp_connected
iptables -D FORWARD -i $1 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-t
o-pmtu
iptables -D INPUT -i $1 -j ACCEPT
iptables -D FORWARD -i $1 -j ACCEPT
iptables -t nat -D PREROUTING -i $1 -p udp -m udp --sport 9 -j DNAT --to-destina
tion 192.168.100.255


ifconfig


br0 Link encap:Ethernet HWaddr E0:CB:4E:C0:18:D8
inet addr:192.168.100.200 Bcast:192.168.100.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:9871 errors:0 dropped:0 overruns:0 frame:0
TX packets:13018 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1484048 (1.4 MiB) TX bytes:9248098 (8.8 MiB)

eth0 Link encap:Ethernet HWaddr E0:CB:4E:C0:18:D8
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:17399 errors:24 dropped:0 overruns:0 frame:12
TX packets:17937 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4374808 (4.1 MiB) TX bytes:7850969 (7.4 MiB)
Interrupt:4 Base address:0x2000

eth1 Link encap:Ethernet HWaddr E0:CB:4E:C0:18:D8
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:14391 errors:0 dropped:0 overruns:0 frame:265903
TX packets:15512 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3630295 (3.4 MiB) TX bytes:7921427 (7.5 MiB)
Interrupt:3 Base address:0x1000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MULTICAST MTU:16436 Metric:1
RX packets:39 errors:0 dropped:0 overruns:0 frame:0
TX packets:39 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:6716 (6.5 KiB) TX bytes:6716 (6.5 KiB)

ppp10 Link encap:Point-to-Point Protocol
inet addr:192.168.100.200 P-t-P:192.168.100.130 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1400 Metric:1
RX packets:1694 errors:0 dropped:0 overruns:0 frame:0
TX packets:3119 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:90797 (88.6 KiB) TX bytes:4174635 (3.9 MiB)

vlan1 Link encap:Ethernet HWaddr E0:CB:4E:C0:18:D8
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:17399 errors:0 dropped:0 overruns:0 frame:0
TX packets:17937 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4061626 (3.8 MiB) TX bytes:7850969 (7.4 MiB)

wl0.1 Link encap:Ethernet HWaddr E0:CB:4E:C0:18:D8
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:274 errors:0 dropped:0 overruns:0 frame:265903
TX packets:581 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:50836 (49.6 KiB) TX bytes:164702 (160.8 KiB)


route


Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.100.130 * 255.255.255.255 UH 0 0 0 ppp10
192.168.100.0 * 255.255.255.0 U 0 0 0 br0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 192.168.100.1 0.0.0.0 UG 0 0 0 br0


iptables -L -v


Chain INPUT (policy ACCEPT 16414 packets, 2405K bytes)
pkts bytes target prot opt in out source destination
89 11458 ACCEPT all -- ppp10 any anywhere anywhere

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 TCPMSS tcp -- ppp10 any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
0 0 ACCEPT all -- ppp10 any anywhere anywhere

Chain OUTPUT (policy ACCEPT 16736 packets, 15M bytes)
pkts bytes target prot opt in out source destination



iptables -L -v -t nat


Chain PREROUTING (policy ACCEPT 4962 packets, 740K bytes)
pkts bytes target prot opt in out source destination
0 0 DNAT udp -- ppp10 any anywhere anywhere udp spt:discard to:192.168.100.255
92 5520 DNAT tcp -- any any anywhere 10.0.0.1 tcp dpt:www to:192.168.100.200:80
0 0 DNAT tcp -- any any anywhere 192.168.1.1 tcp dpt:www to:192.168.100.200:80
477 32226 DNAT udp -- any any anywhere anywhere udp dpt:domain to:192.168.100.200:18018

Chain POSTROUTING (policy ACCEPT 206 packets, 39140 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 206 packets, 39140 bytes)
pkts bytes target prot opt in out source destination

[a.matrosoff]

Çäðàâñòâóéòå!

Èìåþòñÿ äâà ìàðøðóòèçàòîðà (zyxel keenetic, wl500gpv2), keenetic èìååò ïîäêëþ÷åíèå ê èíòåðíåò ñ ïóáëè÷íûì ip, wl500gpv2 ïîäêëþ÷åí ê èíòåðíåòó ÷åðåç 3g ìîäåì (ppp0), ïóáëè÷íîãî ip íå èìååò. Ñåòè ïîñòðîåíû ïî ñëåäóþùåé ñõåìå:

10254

Íà wl500gpv2 òóííåëü ïîäíèìàåòñÿ èç post-boot:

insmod pppox
insmod pptp
pppd file /tmp/local/sbin/options_vpn_pppd

Ñîäåðæèìîå post-firewall:

ip route add 192.168.0.0/24 dev ppp3
iptables --insert OUTPUT 1 --source 0.0.0.0/0.0.0.0 --destination 192.168.0.0/24 --jump ACCEPT --out-interface ppp3
iptables --insert INPUT 1 --source 192.168.0.0/24 --destination 0.0.0.0/0.0.0.0 --jump ACCEPT --in-interface ppp3
iptables --insert FORWARD 1 --source 0.0.0.0/0.0.0.0 --destination 192.168.0.0/24 --jump ACCEPT --out-interface ppp3
iptables --insert FORWARD 1 --source 192.168.0.0/24 --destination 0.0.0.0/0.0.0.0 --jump ACCEPT
iptables --table nat --append POSTROUTING --out-interface ppp3 --jump MASQUERADE
iptables --append FORWARD --protocol tcp --tcp-flags SYN,RST SYN --jump TCPMSS --clamp-mss-to-pmtu

Ñî ñòîðîíû êëèåíòà â ñåòü ñåðâåðà ïèíã ïðîõîäèò íà àäðåñ ñåðâåðà (192.168.0.1) è íà A2 (192.168.0.100), traceroute òîæå îòðàáàòûâàåò.
À ñî ñòîðîíû ñåðâåðà â ñåòü êëèåíòà - ïèíã ïðîõîäèò òîëüêî íà 10.0.0.1, à íà A1 èëè B1 íå ïðîõîäèò, traceroute íå ðàáîòàåò, îñòàíàâëèâàåòñÿ íà 10.0.0.1.

×òî çàáûë èëè ñäåëàë íåâåðíî? Çàðàíåå îãðîìíîå ñïàñèáî.

ps: âûíåñ â îòäåëüíóþ òåìó, ò.ê. îáñóæäàþ pptp, à íå openvpn.

[Zatravka]

Ê ïðîâàéäåðó ïîäêëþ÷àþñü ïî PPTP
Ê òåðìèíàëüíîìó ñåðâåðó èçâíå ïîäêëþ÷èòüñÿ íåëüçÿ, òîëüêî ÷åðåç VPN (òîæå PPTP).
Íàñòðàèâàòü íà êàæäîì êîìïå PPTP - íå âàðèàíò
Âîçìîæíî ëè íà óêàçàííîì äåâàéñå ïîäíÿòü åùå îäèí PPTP, è åñëè âîçìîæíî, òî íà êàêîé ïðîøèâêå è êàê?