在 FreeBSD 上設定 poptop 的問題

[shadow]

幾年前在 bsd 上安裝了 poptop 以 pptp 的方式提供給 windows 做 vpn 遠端登入
今天這幾器壞了
因為版本更新的關係
安裝的版本 pptpd v1.3.4

參考了
http://blog.xuite.net/efchang/network/6530882
http://www.pingle.org/2006/04/11/getting-poptop-to-run-under-freebsd-5-6
http://www.weithenn.idv.tw/cgi-bin/wiki.pl/Poptop-%E5%BB%BA%E7%AB%8BPPTP%E7%9A%84VPN%E9%80%A3%E7%B7%9A
寫的很簡單
卻一直沒辦法正常連線
拜託大家幫我看看問題出在哪裡好嗎

謝謝大家

/usr/local/etc/pptpd.conf

程式碼:

option /etc/ppp/ppp.conf
localip 主機對外IP
remoteip 192.168.0.1-100
pidfile /var/run/pptpd.pid
nobsdcomp
proxyarp
+chapms-v2
mppe-40
mppe-128
mppe-stateless
noipparam

/etc/ppp/ppp.conf

程式碼:

pptp:
 set timeout 0
 set log phase chat connect lcp ipcp
 set dial
 set login
 enable mssfixup
 set ifaddr 主機對外IP 192.168.0.1-192.168.0.100 255.255.255.0
 set server /tmp/loop "" 0177
 enable chap
 enable mschapv2
 disable pap
 #enable proxy
 accept dns
 set dns 168.95.1.1 168.95.192.1
 #set nbns 192.168.0.1
 set device !/etc/ppp/secure

ppp.log

程式碼:

Aug 14 14:12:59 aros ppp[1128]: Warning: Label /etc/ppp/ppp.conf rejected -direct connection: Configuration label not found

debug.log

程式碼:

Aug 14 14:12:59 aros pptpd[1127]: CTRL: Client 118.168.21.97 control connection started
Aug 14 14:12:59 aros pptpd[1127]: CTRL: Starting call (launching pppd, opening GRE)
Aug 14 14:12:59 aros ppp[1128]: Warning: Label /etc/ppp/ppp.conf rejected -direct connection: Configuration label not found
Aug 14 14:12:59 aros pptpd[1127]: GRE: read(fd=7,buffer=804d560,len=8196) from PTY failed: status = 0 error = No error
Aug 14 14:12:59 aros kernel: Aug 14 14:12:59 aros pptpd[1127]: GRE: read(fd=7,buffer=804d560,len=8196) from PTY failed: status = 0 error = No error
Aug 14 14:12:59 aros pptpd[1127]: CTRL: PTY read or GRE write failed (pty,gre)=(7,6)
Aug 14 14:12:59 aros kernel: Aug 14 14:12:59 aros pptpd[1127]: CTRL: PTY read or GRE write failed (pty,gre)=(7,6)
Aug 14 14:12:59 aros pptpd[1127]: CTRL: Reaping child PPP[1128]
Aug 14 14:12:59 aros pptpd[1127]: CTRL: Reaping child PPP[1128]
Aug 14 14:12:59 aros pptpd[1127]: CTRL: Client 118.168.21.97 control connection finished

[shadow]

剛剛參考了這篇文章
http://www.searchnetworking.com.cn/showContent_10286.htm
文章日期是 2008-06-30
感覺上比較接近我安裝的版本
但是錯誤訊息差不多是一樣的

ppp[1128]: Warning: Label /etc/ppp/ppp.conf rejected -direct connection: Configuration label not found
kernel: Aug 14 14:12:59 aros pptpd[1127]: CTRL: PTY read or GRE write failed (pty,gre)=(7,6)

[shadow]

請問一下
都沒有人遇過這個問題嗎？

昨天試著重灌一台機器來測試
結果也是不行～

[apage]

GRE...
我只有用 Linux 做過 pptp VPN
防火牆需要開啟 tcp 1723 與 GRE 通過
給你  iptables 的語法參考參考

程式碼:

/usr/local/sbin/iptables -t nat -A PREROUTING -d [your public ip] -p tcp --dport 1723 -j DNAT --to [your vpn server Lan IP]:1723
/usr/local/sbin/iptables -t nat -A PREROUTING -d [your public ip] -p GRE -j DNAT --to [your vpn server Lan IP]

另外，市面上有一些IP分享器也不支援 GRE通過! 亦即你設定正確，也會因為硬體不支援而無法使用，這點要注意一下。

[shadow]

謝謝 apage 的指點
我有檢查過 firewall 的設定
是有打通 1723 port
剛剛試了一下
我把 ppp.log 的錯誤訊息貼上來
有點長，請大家幫忙看一下，謝謝

程式碼:

Aug 24 23:45:43 aros ppp[24239]: Phase: Using interface: tun0
Aug 24 23:45:43 aros ppp[24239]: Phase: deflink: Created in closed state
Aug 24 23:45:43 aros ppp[24239]: Command: loop: set device localhost:pptp
Aug 24 23:45:43 aros ppp[24239]: Command: loop: set dial
Aug 24 23:45:43 aros ppp[24239]: Command: loop: set login
Aug 24 23:45:43 aros ppp[24239]: Command: loop: set ifaddr 192.168.10.1 192.168.10.100-192.168.10.200 255.255.255.0
Aug 24 23:45:43 aros ppp[24239]: IPCP: Selected IP address 192.168.10.117
Aug 24 23:45:43 aros ppp[24239]: Command: loop: set server /tmp/loop ******** 0177
Aug 24 23:45:43 aros ppp[24239]: Phase: Listening at local socket /tmp/loop.
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: enable chap
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: enable MSChapV2
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: disable deflate pred1
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: deny deflate pred1
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: set mppe * *
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: enable MPPE
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: accept MPPE
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: enable chap81
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: disable pap
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: enable proxy
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: nat enable yes
Aug 24 23:45:43 aros ppp[24239]: Command: pptp: set device !/etc/ppp/secure
Aug 24 23:45:43 aros ppp[24239]: Phase: PPP Started (direct mode).
Aug 24 23:45:43 aros ppp[24239]: Phase: bundle: Establish
Aug 24 23:45:43 aros ppp[24239]: Phase: deflink: closed -> opening
Aug 24 23:45:43 aros ppp[24239]: Phase: deflink: Connected!
Aug 24 23:45:43 aros ppp[24239]: Phase: deflink: opening -> carrier
Aug 24 23:45:43 aros ppp[24239]: Phase: deflink: carrier -> lcp
Aug 24 23:45:43 aros ppp[24239]: LCP: FSM: Using "deflink" as a transport
Aug 24 23:45:43 aros ppp[24239]: LCP: deflink: State change Initial --> Closed
Aug 24 23:45:43 aros ppp[24239]: LCP: deflink: State change Closed --> Stopped
Aug 24 23:45:44 aros ppp[24239]: LCP: deflink: LayerStart
Aug 24 23:45:44 aros ppp[24239]: LCP: deflink: SendConfigReq(1) state = Stopped
Aug 24 23:45:44 aros ppp[24239]: LCP:  ACFCOMP[2]
Aug 24 23:45:44 aros ppp[24239]: LCP:  PROTOCOMP[2]
Aug 24 23:45:44 aros ppp[24239]: LCP:  ACCMAP[6] 0x00000000
Aug 24 23:45:44 aros ppp[24239]: LCP:  MRU[4] 1500
Aug 24 23:45:44 aros ppp[24239]: LCP:  MAGICNUM[6] 0x2c88060a
Aug 24 23:45:44 aros ppp[24239]: LCP:  AUTHPROTO[5] 0xc223 (CHAP 0x05)
Aug 24 23:45:44 aros ppp[24239]: LCP: deflink: State change Stopped --> Req-Sent
Aug 24 23:45:47 aros ppp[24239]: LCP: deflink: SendConfigReq(1) state = Req-Sent
Aug 24 23:45:47 aros ppp[24239]: LCP:  ACFCOMP[2]
Aug 24 23:45:47 aros ppp[24239]: LCP:  PROTOCOMP[2]
Aug 24 23:45:47 aros ppp[24239]: LCP:  ACCMAP[6] 0x00000000
Aug 24 23:45:47 aros ppp[24239]: LCP:  MRU[4] 1500
Aug 24 23:45:47 aros ppp[24239]: LCP:  MAGICNUM[6] 0x2c88060a
Aug 24 23:45:47 aros ppp[24239]: LCP:  AUTHPROTO[5] 0xc223 (CHAP 0x05)
Aug 24 23:45:50 aros ppp[24239]: LCP: deflink: SendConfigReq(1) state = Req-Sent
Aug 24 23:45:50 aros ppp[24239]: LCP:  ACFCOMP[2]
Aug 24 23:45:50 aros ppp[24239]: LCP:  PROTOCOMP[2]
Aug 24 23:45:50 aros ppp[24239]: LCP:  ACCMAP[6] 0x00000000
Aug 24 23:45:50 aros ppp[24239]: LCP:  MRU[4] 1500
Aug 24 23:45:50 aros ppp[24239]: LCP:  MAGICNUM[6] 0x2c88060a
Aug 24 23:45:50 aros ppp[24239]: LCP:  AUTHPROTO[5] 0xc223 (CHAP 0x05)
Aug 24 23:45:53 aros ppp[24239]: LCP: deflink: SendConfigReq(1) state = Req-Sent
Aug 24 23:45:53 aros ppp[24239]: LCP:  ACFCOMP[2]
Aug 24 23:45:53 aros ppp[24239]: LCP:  PROTOCOMP[2]
Aug 24 23:45:53 aros ppp[24239]: LCP:  ACCMAP[6] 0x00000000
Aug 24 23:45:53 aros ppp[24239]: LCP:  MRU[4] 1500
Aug 24 23:45:53 aros ppp[24239]: LCP:  MAGICNUM[6] 0x2c88060a
Aug 24 23:45:53 aros ppp[24239]: LCP:  AUTHPROTO[5] 0xc223 (CHAP 0x05)
Aug 24 23:45:56 aros ppp[24239]: LCP: deflink: SendConfigReq(1) state = Req-Sent
Aug 24 23:45:56 aros ppp[24239]: LCP:  ACFCOMP[2]
Aug 24 23:45:56 aros ppp[24239]: LCP:  PROTOCOMP[2]
Aug 24 23:45:56 aros ppp[24239]: LCP:  ACCMAP[6] 0x00000000
Aug 24 23:45:56 aros ppp[24239]: LCP:  MRU[4] 1500
Aug 24 23:45:56 aros ppp[24239]: LCP:  MAGICNUM[6] 0x2c88060a
Aug 24 23:45:56 aros ppp[24239]: LCP:  AUTHPROTO[5] 0xc223 (CHAP 0x05)
Aug 24 23:45:59 aros ppp[24239]: LCP: deflink: LayerFinish
Aug 24 23:45:59 aros ppp[24239]: LCP: deflink: State change Req-Sent --> Stopped
Aug 24 23:45:59 aros ppp[24239]: LCP: deflink: State change Stopped --> Closed
Aug 24 23:45:59 aros ppp[24239]: LCP: deflink: State change Closed --> Initial
Aug 24 23:45:59 aros ppp[24239]: Phase: deflink: Disconnected!
Aug 24 23:45:59 aros ppp[24239]: Phase: deflink: Connect time: 16 secs: 0 octets in, 310 octets out
Aug 24 23:45:59 aros ppp[24239]: Phase: deflink: 0 packets in, 5 packets out
Aug 24 23:45:59 aros ppp[24239]: Phase:  total 19 bytes/sec, peak 24 bytes/sec on Sun Aug 24 23:45:47 2008
Aug 24 23:45:59 aros ppp[24239]: Phase: deflink: lcp -> closed
Aug 24 23:45:59 aros ppp[24239]: Phase: bundle: Dead
Aug 24 23:45:59 aros ppp[24239]: Phase: Caught signal 2, abort connection(s)
Aug 24 23:45:59 aros ppp[24239]: Phase: PPP Terminated (normal).
Aug 24 23:45:59 aros ppp[24239]: Warning: 192.168.10.117: Cannot determine ethernet address for proxy ARP