Настройка vpn сервера (Не подключается vpn клиент)

[unload84]

Здравствуйте!
Настраиваю vpn сервер на Mandriva 2009. Прочитал всевозможные конфиги и все равно никак не получается подключиться к серверу (поключаюсь из внутренней сети).
В банке одна сетевая карта, на ней поднят ppp0, еще на ней крутится прокси сервер squid. В iptables нет никаких правил. Шифрование отключенно.

Вот конфиги:

pptpd.conf

option /etc/ppp/options.pptpd
debug
logwtmp
localip 10.52.34.128
remoteip 10.59.23.165,10.52.32.169

options.pptpd

name pptpd
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
lock

chap-secrets

12345 * 12345 *

[Ленивая Бестолочь]

В банке одна сетевая карта

в какой банке?

в файл /etc/ppp/options.pptpd добавьте:
require-mppe-128
proxyarp
nobsdcomp

если не заработает, показывайте логи.

[unload84]

в какой банке?

в той банке (системном блоке), на каторой поднимаю vpn сервер.
Ничего не изменилось...

Вот кусок лога:

Код: Выделить всё

Nov 27 23:50:30 localhost pptpd[19505]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: local address = 10.52.34.128
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: remote address = 10.59.23.165
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Client 10.52.32.169 control connection started
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Received PPTP Control Message (type: 1)
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Made a START CTRL CONN RPLY packet
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: I wrote 156 bytes to the client.
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Sent packet to client
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Received PPTP Control Message (type: 7)
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Made a OUT CALL RPLY packet
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Starting call (launching pppd, opening GRE)
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: pty_fd = 6
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: tty_fd = 8
Nov 27 23:50:30 localhost pptpd[19506]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 27 23:50:30 localhost pptpd[19506]: CTRL (PPPD Launcher): local address = 10.52.34.128
Nov 27 23:50:30 localhost pptpd[19506]: CTRL (PPPD Launcher): remote address = 10.59.23.165
Nov 27 23:50:30 localhost pppd[19506]: In file /etc/ppp/options.pptpd: unrecognized option 'require-mppe-128'
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: I wrote 32 bytes to the client.
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Sent packet to client
Nov 27 23:50:30 localhost pptpd[19505]: GRE: read(fd=6,buffer=8059f20,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: PTY read or GRE write failed (pty,gre)=(6,8)
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Reaping child PPP[19506]
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Client 10.52.32.169 control connection finished
Nov 27 23:50:30 localhost pptpd[19505]: CTRL: Exiting now
Nov 27 23:50:30 localhost pptpd[19482]: MGR: Reaped child 19505
Nov 27 23:50:32 localhost pptpd[19507]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: local address = 10.52.34.128
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: remote address = 10.59.23.165
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Client 10.52.32.169 control connection started
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Received PPTP Control Message (type: 1)
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Made a START CTRL CONN RPLY packet
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: I wrote 156 bytes to the client.
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Sent packet to client
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Received PPTP Control Message (type: 7)
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Made a OUT CALL RPLY packet
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Starting call (launching pppd, opening GRE)
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: pty_fd = 6
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: tty_fd = 8
Nov 27 23:50:32 localhost pptpd[19508]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 27 23:50:32 localhost pptpd[19508]: CTRL (PPPD Launcher): local address = 10.52.34.128
Nov 27 23:50:32 localhost pptpd[19508]: CTRL (PPPD Launcher): remote address = 10.59.23.165
Nov 27 23:50:32 localhost pppd[19508]: In file /etc/ppp/options.pptpd: unrecognized option 'require-mppe-128'
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: I wrote 32 bytes to the client.
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Sent packet to client
Nov 27 23:50:32 localhost pptpd[19507]: GRE: read(fd=6,buffer=8059f20,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: PTY read or GRE write failed (pty,gre)=(6,8)
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Reaping child PPP[19508]
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Client 10.52.32.169 control connection finished
Nov 27 23:50:32 localhost pptpd[19507]: CTRL: Exiting now
Nov 27 23:50:32 localhost pptpd[19482]: MGR: Reaped child 19507
Nov 27 23:50:33 localhost pptpd[19509]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: local address = 10.52.34.128
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: remote address = 10.59.23.165
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Client 10.52.32.169 control connection started
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Received PPTP Control Message (type: 1)
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Made a START CTRL CONN RPLY packet
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: I wrote 156 bytes to the client.
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Sent packet to client
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Received PPTP Control Message (type: 7)
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Made a OUT CALL RPLY packet
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Starting call (launching pppd, opening GRE)
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: pty_fd = 6
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: tty_fd = 8
Nov 27 23:50:33 localhost pptpd[19510]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 27 23:50:33 localhost pptpd[19510]: CTRL (PPPD Launcher): local address = 10.52.34.128
Nov 27 23:50:33 localhost pptpd[19510]: CTRL (PPPD Launcher): remote address = 10.59.23.165
Nov 27 23:50:33 localhost pppd[19510]: In file /etc/ppp/options.pptpd: unrecognized option 'require-mppe-128'
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: I wrote 32 bytes to the client.
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Sent packet to client
Nov 27 23:50:33 localhost pptpd[19509]: GRE: read(fd=6,buffer=8059f20,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: PTY read or GRE write failed (pty,gre)=(6,8)
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Reaping child PPP[19510]
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Client 10.52.32.169 control connection finished
Nov 27 23:50:33 localhost pptpd[19509]: CTRL: Exiting now
Nov 27 23:50:33 localhost pptpd[19482]: MGR: Reaped child 19509
Nov 27 23:50:34 localhost pptpd[19511]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: local address = 10.52.34.128
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: remote address = 10.59.23.165
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Client 10.52.32.169 control connection started
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Received PPTP Control Message (type: 1)
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Made a START CTRL CONN RPLY packet
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: I wrote 156 bytes to the client.
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Sent packet to client
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Received PPTP Control Message (type: 7)
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Made a OUT CALL RPLY packet
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Starting call (launching pppd, opening GRE)
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: pty_fd = 6
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: tty_fd = 8
Nov 27 23:50:34 localhost pptpd[19512]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 27 23:50:34 localhost pptpd[19512]: CTRL (PPPD Launcher): local address = 10.52.34.128
Nov 27 23:50:34 localhost pptpd[19512]: CTRL (PPPD Launcher): remote address = 10.59.23.165
Nov 27 23:50:34 localhost pppd[19512]: In file /etc/ppp/options.pptpd: unrecognized option 'require-mppe-128'
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: I wrote 32 bytes to the client.
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Sent packet to client
Nov 27 23:50:34 localhost pptpd[19511]: GRE: read(fd=6,buffer=8059f20,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: PTY read or GRE write failed (pty,gre)=(6,8)
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Reaping child PPP[19512]
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Client 10.52.32.169 control connection finished
Nov 27 23:50:34 localhost pptpd[19511]: CTRL: Exiting now
Nov 27 23:50:34 localhost pptpd[19482]: MGR: Reaped child 19511
Nov 27 23:50:35 localhost pptpd[19513]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: local address = 10.52.34.128
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: remote address = 10.59.23.165
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Client 10.52.32.169 control connection started
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Received PPTP Control Message (type: 1)
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Made a START CTRL CONN RPLY packet
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: I wrote 156 bytes to the client.
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Sent packet to client
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Received PPTP Control Message (type: 7)
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Made a OUT CALL RPLY packet
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Starting call (launching pppd, opening GRE)
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: pty_fd = 6
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: tty_fd = 8
Nov 27 23:50:35 localhost pptpd[19514]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 27 23:50:35 localhost pptpd[19514]: CTRL (PPPD Launcher): local address = 10.52.34.128
Nov 27 23:50:35 localhost pptpd[19514]: CTRL (PPPD Launcher): remote address = 10.59.23.165
Nov 27 23:50:35 localhost pppd[19514]: In file /etc/ppp/options.pptpd: unrecognized option 'require-mppe-128'
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: I wrote 32 bytes to the client.
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Sent packet to client
Nov 27 23:50:35 localhost pptpd[19513]: GRE: read(fd=6,buffer=8059f20,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: PTY read or GRE write failed (pty,gre)=(6,8)
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Reaping child PPP[19514]
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Client 10.52.32.169 control connection finished
Nov 27 23:50:35 localhost pptpd[19513]: CTRL: Exiting now
Nov 27 23:50:35 localhost pptpd[19482]: MGR: Reaped child 19513
Nov 27 23:50:35 localhost klogd: martian source 255.255.255.255 from 94.24.216.62, on dev eth0
Nov 27 23:50:35 localhost klogd: ll header: ff:ff:ff:ff:ff:ff:00:0f:ea:5c:a2:8a:08:00
Nov 27 23:50:35 localhost pptpd[19515]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: local address = 10.52.34.128
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: remote address = 10.59.23.165
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Client 10.52.32.169 control connection started
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Received PPTP Control Message (type: 1)
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Made a START CTRL CONN RPLY packet
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: I wrote 156 bytes to the client.
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Sent packet to client
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Received PPTP Control Message (type: 7)
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Made a OUT CALL RPLY packet
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Starting call (launching pppd, opening GRE)
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: pty_fd = 6
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: tty_fd = 8
Nov 27 23:50:35 localhost pptpd[19516]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Nov 27 23:50:35 localhost pptpd[19516]: CTRL (PPPD Launcher): local address = 10.52.34.128
Nov 27 23:50:35 localhost pptpd[19516]: CTRL (PPPD Launcher): remote address = 10.59.23.165
Nov 27 23:50:35 localhost pppd[19516]: In file /etc/ppp/options.pptpd: unrecognized option 'require-mppe-128'
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: I wrote 32 bytes to the client.
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Sent packet to client
Nov 27 23:50:35 localhost pptpd[19515]: GRE: read(fd=6,buffer=8059f20,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: PTY read or GRE write failed (pty,gre)=(6,8)
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Reaping child PPP[19516]
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Client 10.52.32.169 control connection finished
Nov 27 23:50:35 localhost pptpd[19515]: CTRL: Exiting now
Nov 27 23:50:35 localhost pptpd[19482]: MGR: Reaped child 19515

[Ленивая Бестолочь]

Nov 27 23:50:33 localhost pppd[19510]: In file /etc/ppp/options.pptpd: unrecognized option 'require-mppe-128'

либо у нас с вами разные версии pppd и разный синтаксис, либо у вас pppd без поддержки mppe.
попробуйте опцию поменять на просто "mppe-128".
а pppd как ставили?

[unload84]

ибо у нас с вами разные версии pppd и разный синтаксис, либо у вас pppd без поддержки mppe.
попробуйте опцию поменять на просто "mppe-128".
а pppd как ставили?

Вопщем такая ситуация получилась: pptpd v 1.8, ставил из репов, можэт быть и без поддержки mppe (затрудняюсь ответить на это вопрос, не знаю), так как когда закаментарил обе строки с require-mppe-128 и mppe-128 и клиент сразу подклчился к серверу без проблем. Но, при подключении к серверу на нем сразу же поднялось ppp1 (ppp0 у меня на это банке (сервере) всегда постоянно поднято) и на локальной машине все проги отвалились от прокси.

Почему поднялось еще одно ppp? Должно ли оно подниматься? Если да, то принцип действия таков: при подключении к vpn серверу появляется еще одно соединение ppp, которое должно быть смаршрутизированно на ppp0? Если я не прав объяните, пожалуйста, подробнее.

[Ленивая Бестолочь]

Почему поднялось еще одно ppp?

ppp0 у меня ...... всегда постоянно поднято

поэтому поднялось ppp1, что не так то?

на локальной машине все проги отвалились от прокси

это та, которой подключаетесь? нормальное поведение винды. там галочка есть, чтобы так не делать, но тогда маршруты руками писать на ней придется. (если конечно подключается винда)

[unload84]

Цитата(unload84 @ 28th November 2009 - в 21:50)
на локальной машине все проги отвалились от прокси

это та, которой подключаетесь? нормальное поведение винды. там галочка есть, чтобы так не делать, но тогда маршруты руками писать на ней придется. (если конечно подключается винда)

Я подключаюсь из ubuntu.

[unload84]

Я так понимаю что при подключении по vpn соединение ppp1 на сервере становится главным. При отключении vpn-клиента ppp0 остается, соединение с нетом не разрывается, но проги с локальной машины черз прокси уже интернет не могут найти. Понятно что нужно прописывать маршруты на сервере, но не понятно какие и как.

[unload84]

Дело в том, что после отключения ppp1 пропадает маршрут по-умолчанию. Вот таблицы маршрутизации до подключения клиентом, во время подключения и после отключения:

10.100.222.77 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
xxx.xxxx.xxx.xxx xxx.xxx.xxx.1 255.255.255.255 UGH 0 0 0 eth0
xxx.xxx.0.0 xxx.xxx.xxx.1 255.255.255.0 UG 0 0 0 eth0
xxx.xxx.xxx.0 0.0.0.0 255.255.252.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
10.0.0.0 xxx.xxx.xxx.1 255.0.0.0 UG 0 0 0 eth0
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0


192.168.0.25 0.0.0.0 255.255.255.255 UH 0 0 0 ppp1
10.100.222.77 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
xxx.xxx.xxx.xxx xxx.xxx.xxx.1 255.255.255.255 UGH 0 0 0 eth0
xxx.xxx.0.0 xxx.xxx.xxx.1 255.255.255.0 UG 0 0 0 eth0
xxx.xxx.xxx.0 0.0.0.0 255.255.252.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
10.0.0.0 xxx.xxx.xxx.1 255.0.0.0 UG 0 0 0 eth0
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0


10.100.222.3 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
xxx.xxx.xxx.xxx xxx.xxx.xxx.1 255.255.255.255 UGH 0 0 0 eth0
xxx.xxx.0.0 10.52.32.1 255.255.255.0 UG 0 0 0 eth0
xxx.xxx.xxx.0 0.0.0.0 255.255.252.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
10.0.0.0 xxx.xxx.xxx.1 255.0.0.0 UG 0 0 0 eth0
0.0.0.0 xxx.xxx.xxx.1 0.0.0.0 UG 0 0 0 eth0

Почему пропадает этот маршрут:
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0