Íàñòðîéêà PPTP VPN (accel-pppd) íà ðîóòåðå Asus

Ïðåøèë äîìîé, ðåøèë ïîïðîáâàòü íà ñâî¸ì wl-500gP V1. Àäðåñ âïí ñåðâåðà ïðîïèñàë, ìàê óæå ñòîèò êàê ïîëîæåíî, PPTP Options: None, Additional pppd options: require-pap

Quote:

---

Jan 1 02:00:06 pptp[84]: Plugin pptp.so loaded.
Jan 1 02:00:06 pptp[84]: PPTP plugin version 0.8.4 compiled for pppd-2.4.5, linux-2.4.37.6
Jan 1 02:00:06 pptp[84]: The remote system is required to authenticate itself
Jan 1 02:00:06 pptp[84]: but I couldn't find any suitable secret (password) for it to use to do so.

---

Ïîä Debian ñ òàêèì êîíôèãîì âïí ïîäíèìàåòñÿ áåç ïðîáëåì:

Quote:

---

lock noauth nobsdcomp nodeflate
user 'my_login'
password 'my_pass'
sync pty 'pptp --idle-wait 0 172.25.254.254 --nolaunchpppd --nobuffer --sync'
demand
maxfail 0
persist
ktune
ipcp-accept-remote ipcp-accept-local noipdefault
default-asyncmap nopcomp noaccomp
novj nobsdcomp nodeflate
lcp-echo-interval 10
lcp-echo-failure 6
nodefaultroute
unit 999

---

Quote:

---

Originally Posted by OperVil

Ïðåøèë äîìîé, ðåøèë ïîïðîáâàòü íà ñâî¸ì wl-500gP V1. Àäðåñ âïí ñåðâåðà ïðîïèñàë, ìàê óæå ñòîèò êàê ïîëîæåíî, PPTP Options: None, Additional pppd options: require-pap

---

Íóæíî äîáàâèòü noauth â êîíöå

Code:

---

require-pap noauth

---

êàê ÿ ïèñàë âûøå require-pap âïèñûâàë, è îíî âûäàâàëî îøèáêó, ïîä äåáèàíîì ñ ýòèì æå ïàðàìåòðîì âûäà¸ò òó æå îøèáêó. À noauth è òàê ñòîèò ïî óìîë÷àíèþ.

Quote:

---

Originally Posted by OperVil

êàê ÿ ïèñàë âûøå require-pap âïèñûâàë, è îíî âûäàâàëî îøèáêó, ïîä äåáèàíîì ñ ýòèì æå ïàðàìåòðîì âûäà¸ò òó æå îøèáêó. À noauth è òàê ñòîèò ïî óìîë÷àíèþ.

---

ïîâòîðÿþ åùå ðàç, noauth íóæíî äîáàâëÿòü ïîñëå require-pap
èëè æå à additional ïðîïèñàòü refuse-chap refuse-mschap

×òî áû áûëî ÿñíåå ïðèâîæó êîíôèãè/
Ýòî êîíôèã ñ ðîóòåðà:

Quote:

---

noauth refuse-eap
user 'my_login'
password 'my_pass'
plugin pptp.so
pptp_server 172.25.254.254
nomppe-stateful -mppc mtu 1400
maxfail 0
persist
ipcp-accept-remote ipcp-accept-local noipdefault
ktune
default-asyncmap nopcomp noaccomp
novj nobsdcomp nodeflate
lcp-echo-interval 10
lcp-echo-failure 6
unit 0
nodefaultroute

---

Âîò ëîãè:

Quote:

---

Nov 9 15:13:51 pptp[86]: route_add: not adding existing route
Nov 9 15:13:52 pptp[86]: Using interface ppp0
Nov 9 15:13:52 pptp[86]: Connect: ppp0 <--> pptp (172.25.254.254)
Nov 9 15:14:22 pptp[86]: LCP: timeout sending Config-Requests
Nov 9 15:14:22 pptp[86]: Connection terminated.
Nov 9 15:14:22 pptp[86]: Modem hangup
Nov 9 15:14:52 pptp[86]: route_add: not adding existing route
Nov 9 15:14:53 pptp[86]: Using interface ppp0
Nov 9 15:14:53 pptp[86]: Connect: ppp0 <--> pptp (172.25.254.254)
Nov 9 15:15:23 pptp[86]: LCP: timeout sending Config-Requests
Nov 9 15:15:23 pptp[86]: Connection terminated.
Nov 9 15:15:23 pptp[86]: Modem hangup

---

È òàê ïî êðóãó.

Êîïèðóþ ýòîò êîíôèã ñ ìåëêèìè èçìåíåíèÿìè (îìå÷åíî æèðíûì) â äåáèàí, ïîñëå ÷åãî ïîä äåáèàíîì âïí ïîäðóáàåòñÿ, âûäàþòñÿ àéïèøíèêè.

Quote:

---

noauth refuse-eap
user 'my_login'
password 'my_pass'
sync pty 'pptp --idle-wait 0 172.25.254.254 --nolaunchpppd --nobuffer --sync'
nomppe-stateful mtu 1400
maxfail 0
persist
ipcp-accept-remote ipcp-accept-local noipdefault
ktune
default-asyncmap nopcomp noaccomp
novj nobsdcomp nodeflate
lcp-echo-interval 10
lcp-echo-failure 6
unit 777
nodefaultroute

---

Åñëè äîáàâèòü require-pap, òî äåáèàí âûäà¸ò ýòî:

Quote:

---

/usr/sbin/pppd: The remote system is required to authenticate itself
/usr/sbin/pppd: but I couldn't find any suitable secret (password) for it to use to do so.

---

Ïîä ðîóòåðîì òî æå ñîîáùåíèå.

Ñêðèí íàñòðîéêè âïí ïîä âèíäîé:

http://pic.ipicture.ru/uploads/091109/ACnx4qS4mG.png

Quote:

---

Originally Posted by theMIROn

ïîâòîðÿþ åùå ðàç, noauth íóæíî äîáàâëÿòü ïîñëå require-pap
èëè æå à additional ïðîïèñàòü refuse-chap refuse-mschap

---

Ïðîïèñûâàþ â Additional pppd options:

Quote:

---

refuse-chap refuse-mschap require-pap noauth

---

Ëîã:

Quote:

---

Nov 9 15:30:42 pptp[86]: Using interface ppp0
Nov 9 15:30:42 pptp[86]: Connect: ppp0 <--> pptp (172.25.254.254)
Nov 9 15:31:09 pptp[86]: LCP: timeout sending Config-Requests
Nov 9 15:31:09 pptp[86]: Connection terminated.
Nov 9 15:31:09 pptp[86]: Modem hangup

---

Quote:

---

Originally Posted by OperVil

Ïðîïèñûâàþ â Additional pppd options:

---

èëè refuse-chap refuse-mschap èëè require-pap noauth

äëÿ äåòàëüíûõ ëîãîâ - åùå íóæíî äîáàâèòü debug

ïðîïèñàë require-pap noauth debug. Ëîã òîò æå, ÷òî è âûøå.

Èçâåíÿþñü çà øóìèõó, ïðîáëåìà áûëà â äðóãîì.
Çíàþ æ ÷òî ïðîïèñûâàë ðîóò 172.25.0.0/16 ÷òî áû øåë ÷åðåç 172.25.103.1, íî â ïðîøèâêà îêàçàëàñü óìíåå è ïóñêàëà àäðåñ âïí ñåðâåðà 172.25.254.254 ÷åðåç ãåéòâåé, óêàçàííûé â âýá ìîðäå, à òàì ñòîÿë äðóãîé. Ïìåíÿë íà 103.1 âñ¸ ïîäêëþ÷èëîñü.

Ñïàñèáî çà òåðïåíèå è äåëüíûå ñîâåòû.

Quote:

---

Originally Posted by OperVil

Èçâåíÿþñü çà øóìèõó, ïðîáëåìà áûëà â äðóãîì.
Çíàþ æ ÷òî ïðîïèñûâàë ðîóò 172.25.0.0/16 ÷òî áû øåë ÷åðåç 172.25.103.1, íî â ïðîøèâêà îêàçàëàñü óìíåå è ïóñêàëà àäðåñ âïí ñåðâåðà 172.25.254.254 ÷åðåç ãåéòâåé, óêàçàííûé â âýá ìîðäå, à òàì ñòîÿë äðóãîé. Ïìåíÿë íà 103.1 âñ¸ ïîäêëþ÷èëîñü.

---

ïðè ïîäúåìå ñîåäèíåíèÿ àâòîìàòè÷åñêè ïðîïèñûâàåòñÿ ìàðøðóò äî vpn ñåðâåðà ÷åðåç äåôîëòíûé øëþç.

Quote:

---

Originally Posted by OperVil

Ñïàñèáî çà òåðïåíèå è äåëüíûå ñîâåòû.

---

â èòîãå, ñ êàêèìè ïàðàìåòðàìè çàðàáîòàëî òîëüêî pap ïîäêëþ÷åíèå?

require-pap noauth - ðàáîòàåò
Ñ ïóñòîé ñòðîêîé òàê æå ðàáîòàåò. Ãëàâíîå ÷òî áû ãåéòâåé ñòîÿë ÷åðåç êîòîðûé åìó íóæíî èäòè.
Åù¸ ó ñîñåäà ñáèâàëà íàäïèñü îá îøèáêå CHAP àâòîðèçàöèè(ïðè òîì ÷òî áûëî ïðîïèñàíî require-pap noauth). À ïðè÷èíîé òîìó áûë íå ïðàâèëüíî ââåäåííûé ïàðîëü íà âïí.

Quote:

---

Originally Posted by theMIROn

ïðè ïîäúåìå ñîåäèíåíèÿ àâòîìàòè÷åñêè ïðîïèñûâàåòñÿ ìàðøðóò äî vpn ñåðâåðà ÷åðåç äåôîëòíûé øëþç.

---

õì.. ïîä äåáèàíîì íè íà îäíîé èç ñåòåâûõ íå óêàçàí ãåéòâåé, òîëüêî ðîóòàìè óêàçàíû äèàïàçîíû ëîêëàüíûõ àéïè, íî òåì íå ìåíåå àâòîìàòîì ïðîïèñûâàåòñÿ ìàðøðóò ê âïí ñåðâàêó ÷åðåç øëþç òîé ñåòåâîé êàðòû, ÷åðåç êîòîðóþ îí äîëæåí ïîäêëþ÷àòüñÿ. Ò.î. äåôîëò ðîóò ïîÿâëÿåòñÿ ïîñëå ïîäêëþ÷åíèÿ âïí.

Ïðîáëåìà ðåøåíà.
Êîñÿê áûë íà ñòîðîíå ïðîâàéäåðà.

Âîîáùåì ðåáÿò òàêàÿ ïðîáëåìà

Ëîêàëêà, èíåò ÷åðåç VPN

Ñäåëàë âîò ýòî

Code:

---

#!/bin/sh
iptables -t nat -nvL POSTROUTING | grep MASQUERADE | awk '{
    "ifconfig "$7" | grep Mask" | getline ip;
    split(ip,ip,":"); split(ip[2],ip," ");
    split($8,src,"!");
    if (src[1]=="") {src="! -s "src[2]} else {src="-s "src[1]};
    if ($9=="0.0.0.0/0") {dst=""} else {dst="-d "$9};
    system("iptables -t nat -A POSTROUTING -o "$7" "src" "dst" -j SNAT --to-source "ip[1]);
    system("iptables -t nat -D POSTROUTING -o "$7" "src" "dst" -j MASQUERADE");

---

Âñå çàðàáîòàëî ïðîâåðèë, íî ñêîðîñòü vpn áîëüøå 10-15ìåãàáèò íå ïîäíèìàåòñÿ, êîãäà ÷åðåç ëîêàëêó èäåò 40-50

Ïîäñêàæèòå ÷òî ìîæíî åùå ñäåëàòü

Òàðèô 100 ìåãàáèò, ïðîñòî åñëè ïîäêëþ÷àòü ê êîìïó íàïðÿìóþ ñêîðîñòü â ðàçû âûøå

Product ID: WL500gpv2
Firmware Version: 1.9.2.7
Firmware Release: 1.9.2.7-10

óñòàíîâèòü ïðîøèâêó èç ïîäïèñè, è òî, ÷òî ñäåëàëè - äåëàòü ñòàíåò íå îáÿçàòåëüíî.

Íó òàê ðàçíèöû æå ïîëó÷èòñÿ íå áóäåò ?

Quote:

---

Originally Posted by P@R@D!SE

Íó òàê ðàçíèöû æå ïîëó÷èòñÿ íå áóäåò ?

---

áóäåò. åùå ðàçîê: ïðîøèâêó ñìåíèòå íà òó, êîòîðàÿ ó ìåíÿ â ïîäïèñè.