|
|
Subject: VPN connection won't work: it connects, but it is not used
From: Clifford Kite
Date: 12/6/2007 8:05:24 PM
Ricardo <ricardo@hasst-spam.de> wrote:
> I want to use VPN Connections, but this doesn't work.
> I tested KVpnc, and it could connect, and I see a symbol in the task
> from the connection, but it is not used by Iceweasel or Opera.
> Then I made this file at /etc/ppp/peers/swiss:
> emotename swiss
> linkname swiss
> ipparam swiss
> pty "pptp --loglevel 1 connect.swissvpn.net --nolaunchppp$
I would use the IP address for connect.swissvpn.net to avoid any problem
that might be associated with DNS lookup.
> # domain and username, used to select lines in secrets fi$
> name swissvpntest
> # **dns von swiss**
> usepeerdns
Be aware that the usepeerdns option may get DNS server addresses but pppd
puts them in the file /etc/ppp/resolv.conf, not in /etc/resolv.conf .
However, some distributions put scripting (or a call to another script) in
/etc/ppp/ip-up that writes a new /etc/resolv.conf with the addresses.
> # **oder eigender dns**
> #ms-dns 10.21.5.1
> # use MPPE encryption
> require-mppe
> nomppe-stateful
> # require the use of MPPE, with 128-bit encryption
> require-mppe-128
> # we do not require the peer to authenticate itself
> noauth
> # we want to see what happen
> nodetach
> # lock the device
> lock
> # Use BSD compression
> bsdcomp 9,15
> # Use deflate method
> deflate 9,15
IMHO you shouldn't try to use bsdcomp or deflate compression even if the
swiss site is not using M$. In fact it would be better to use nobsdcomp
and nodeflate as in the tunneling example found in man pptp.
> # userdefined MTU
> mtu 1300
> # **gateway von swiss nutzen?**
> defaultroute
Do you really want a default route through the PPP interface? If so then
should a default route already exist it will have to be removed, otherwise
pppd won't set a default route even with the defaultroute option.
> and my /etc/ppp/chap-secrets looks like this:
> Secrets for authentication using CHAP
> # client server secret IP addres$
> swissvpntest swiss swissvpntest *
> (You may test it with this data, it is only a public test account from
> SwissVPN.net)
> If I start it now with
> pppd defaultroute call swiss
> Again I see a connection at the task, but I does not work :(!
That really doesn't help much in determining what causes the problem.
When you "see" that what does "route -n" show? Can you ping the IP
address of connect.swissvpn.net ?
Is there a firewall to contend with? If so then this link may help:
http://pptpclient.sourceforge.net/routing.phtml
> Can you help me to solve this problem?
To be honest, probably not - I've never actually used PPTP. But if
nothing I've said here helps then you can add the pppd "debug" option
and the pptp "--loglevel 2" option, and then look in the logs for clues.
And even post any log lines that appear related to your problem.
Regards-
--
Clifford Kite
|