Проблема такая: есть машина под XP выдающая инет через VPN и несколько машин которым нужно обеспечить выход в инет, используя одно лишь это соединение. Для этого поднята машинка под freeBSD 6.1. Все это дело находится в одной сети 10.x.x.x . В качестве vpn-клиента - mpd4. И вроде бы mpd работает - коннектится и все ок, но что-то я намудрил с таблицей маршрутизации и пинги до инета не идут ни в какую... помогите, пожалуйста, разобраться что именно нужно добавить в таблицу маршрутизации чтобы все наконец заработало...
вот что при выдает при запуске mpd:
Код: Выделить всё
[root@server39 /home/nagliyvred]# mpd4 -f mpd4.conf
Multi-link PPP daemon for FreeBSD
process 733 started, version 4.2.2 (root@ 02:01 7-Aug-2007)
web: listening on 127.0.0.1 5006
PPTP: waiting for connection on 10.4.39.4
[vpn] using interface ng0
[vpn] link: OPEN event
[vpn] LCP: Open event
[vpn] LCP: state change Initial --> Starting
[vpn] LCP: LayerStart
pptp0: connecting to 10.1.129.10 1723
pptp0: connected to 10.1.129.10 1723
pptp0: attached to connection with 10.1.129.10 1723
pptp0-0: outgoing call connected at 14808325 bps
[vpn] PPTP call successful
[vpn] link: UP event
[vpn] link: origination is local
[vpn] LCP: Up event
[vpn] LCP: state change Starting --> Req-Sent
[vpn] LCP: SendConfigReq #1
ACFCOMP
PROTOCOMP
ACCMAP 0x000a0000
MRU 1500
MAGICNUM 0a260029
[vpn] LCP: rec'd Configure Request #0 (Req-Sent)
MRU 1400
AUTHPROTO CHAP MSOFTv2
MAGICNUM 78de2dd5
PROTOCOMP
ACFCOMP
CALLBACK 6
MP MRRU 1614
ENDPOINTDISC [LOCAL] e3 35 5a bf 36 04 4d a9 b3 0c 1e 9e f0 9e 23 c1 00 00 0
BACP
Not supported
[vpn] LCP: SendConfigRej #0
CALLBACK 6
MP MRRU 1614
BACP
[vpn] LCP: rec'd Configure Ack #1 (Req-Sent)
ACFCOMP
PROTOCOMP
ACCMAP 0x000a0000
MRU 1500
MAGICNUM 0a260029
[vpn] LCP: state change Req-Sent --> Ack-Rcvd
[vpn] LCP: rec'd Configure Request #1 (Ack-Rcvd)
MRU 1400
AUTHPROTO CHAP MSOFTv2
MAGICNUM 78de2dd5
PROTOCOMP
ACFCOMP
ENDPOINTDISC [LOCAL] e3 35 5a bf 36 04 4d a9 b3 0c 1e 9e f0 9e 23 c1 00 00 0
[vpn] LCP: SendConfigAck #1
MRU 1400
AUTHPROTO CHAP MSOFTv2
MAGICNUM 78de2dd5
PROTOCOMP
ACFCOMP
ENDPOINTDISC [LOCAL] e3 35 5a bf 36 04 4d a9 b3 0c 1e 9e f0 9e 23 c1 00 00 0
[vpn] LCP: state change Ack-Rcvd --> Opened
[vpn] LCP: auth: peer wants CHAP, I want nothing
[vpn] LCP: LayerUp
[vpn] CHAP: rec'd CHALLENGE #0
Name: "ADVIS"
Using authname "XXXXXX"
[vpn] CHAP: sending RESPONSE len:59
pptp0: CID 0x7abe in SetLinkInfo not found
[vpn] CHAP: rec'd SUCCESS #0
MESG: S=FB20EE4751A49AEDF947CD2DEFD4E74A0BA9A90F
[vpn] LCP: authorization successful
[vpn] Bundle up: 1 link, total bandwidth 64000 bps
[vpn] IPCP: Open event
[vpn] IPCP: state change Initial --> Starting
[vpn] IPCP: LayerStart
[vpn] CCP: Open event
[vpn] CCP: state change Initial --> Starting
[vpn] CCP: LayerStart
[vpn] IPCP: Up event
[vpn] IPCP: state change Starting --> Req-Sent
[vpn] IPCP: SendConfigReq #1
IPADDR 0.0.0.0
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] CCP: Up event
[vpn] CCP: state change Starting --> Req-Sent
[vpn] CCP: SendConfigReq #1
MPPC
0x01000060:MPPE(40, 128 bits), stateless
[vpn] CCP: rec'd Configure Request #3 (Req-Sent)
MPPC
0x010000e1:MPPC, MPPE(40, 56, 128 bits), stateless
[vpn] CCP: SendConfigNak #3
MPPC
0x01000040:MPPE(128 bits), stateless
[vpn] IPCP: rec'd Configure Request #4 (Req-Sent)
IPADDR 192.168.1.1
192.168.1.1 is OK
[vpn] IPCP: SendConfigAck #4
IPADDR 192.168.1.1
[vpn] IPCP: state change Req-Sent --> Ack-Sent
[vpn] IPCP: rec'd Configure Reject #1 (Ack-Sent)
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] IPCP: SendConfigReq #2
IPADDR 0.0.0.0
[vpn] CCP: rec'd Configure Nak #1 (Req-Sent)
MPPC
0x01000040:MPPE(128 bits), stateless
[vpn] CCP: SendConfigReq #2
MPPC
0x01000040:MPPE(128 bits), stateless
[vpn] CCP: rec'd Configure Request #5 (Req-Sent)
MPPC
0x01000040:MPPE(128 bits), stateless
[vpn] CCP: SendConfigAck #5
MPPC
0x01000040:MPPE(128 bits), stateless
[vpn] CCP: state change Req-Sent --> Ack-Sent
[vpn] IPCP: rec'd Configure Nak #2 (Ack-Sent)
IPADDR 192.168.1.79
192.168.1.79 is OK
[vpn] IPCP: SendConfigReq #3
IPADDR 192.168.1.79
[vpn] CCP: rec'd Configure Ack #2 (Ack-Sent)
MPPC
0x01000040:MPPE(128 bits), stateless
[vpn] CCP: state change Ack-Sent --> Opened
[vpn] CCP: LayerUp
Compress using: mppc (MPPE(128 bits), stateless)
Decompress using: mppc (MPPE(128 bits), stateless)
[vpn] IPCP: rec'd Configure Ack #3 (Ack-Sent)
IPADDR 192.168.1.79
[vpn] IPCP: state change Ack-Sent --> Opened
[vpn] IPCP: LayerUp
192.168.1.79 -> 192.168.1.1
[vpn] IFACE: Up event
вывод ifconfig
Код: Выделить всё
[root@server39 /usr/local/etc/mpd4]# ifconfig
my0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet6 fe80::202:44ff:fe74:3784%my0 prefixlen 64 scopeid 0x1
inet 10.4.39.4 netmask 0xffffff00 broadcast 10.4.39.255
ether 00:02:44:74:37:84
media: Ethernet 100baseTX <full-duplex>
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff000000
скрипты:
Код: Выделить всё
[root@server39 /usr/local/etc/mpd4]# more io-up.sh
#!/bin/sh
vpn_ip=10.1.129.10
ip_def_gw=192.168.1.79
/sbin/route delete $vpn_ip
/sbin/route add $vpn_ip $ip_def_gw
/sbin/route delete default
/sbin/route add default -interface ng0
[root@server39 /usr/local/etc/mpd4]# more io-down.sh
#!/bin/sh
vpn_ip=10.1.129.10
ip_def_gw=192.168.1.79
/sbin/route delete default
/sbin/route add default $ip_def_gw
/dbin/route delete $vpn_ip
и наконец сама таблица
Код: Выделить всё
[root@server39 /usr/local/etc/mpd4]# netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default link#1 UCS 0 0 my0
10/24 link#1 UCS 0 0 my0
10.4.39/24 link#1 UC 0 0 my0
10.4.39.3 00:14:22:ac:c1:fe UHLW 1 4740 my0 1058
10.4.39.4 00:02:44:74:37:84 UHLW 1 1216 lo0
10.4.39.5 00:1a:4d:65:31:d2 UHLW 1 2003 my0 1194
10.10.10.100 00:30:48:22:08:80 UHLW 1 1 my0 1198
127.0.0.1 127.0.0.1 UH 0 0 lo0
192.168.1.79 00:02:44:58:f0:5d UHLW 1 1 my0 1076
Internet6:
Destination Gateway Flags Netif Expire
::1 ::1 UH lo0
fe80::%my0/64 link#1 UC my0
fe80::202:44ff:fe74:3784%my0 00:02:44:74:37:84 UHL lo0
fe80::%lo0/64 fe80::1%lo0 U lo0
fe80::1%lo0 link#3 UHL lo0
ff01:1::/32 link#1 UC my0
ff01:3::/32 ::1 UC lo0
ff02::%my0/32 link#1 UC my0
ff02::%lo0/32 ::1 UC lo0
P.S. просьба не отсылать к чтению мануалов, ибо перечитал кучу форумов - mpd таки настроил а вот с route что-то наколбасил и сам уже не разберусь что...