Pfsense 2.0 i pptp(resheno!!!)
-
problema 2 aya da xochu na virtualnom tak kak u menya iz nutri est pptp connectin na ruju na skolko ya znayu ya doljen razdelit po ip trafik gre eto limitaciya pfsensa
voobshe to pptp iz nutri u menya podklyuchaetsya k pfsense 1.2.3 ya proboval podklyuchitsya sozdovaya interface na pfsense no ne poluchilsya pochemu to…ya iz nutri poka podklyuchayus windoy i static rout na nego chtob usera polzovalis service om tams adminom togo pf a poka ne poluchaetsya rabotat vo vremya raboti experimentirovat nelzya posle raboti poka ne poluchaetsya chelovek domoy xochet :(((
-
kogda v interfaces ->assign->ppp's sozdayu interface pptp ne trebuet obyazatelno prisvoivat local ip no kogda interface vklyuchayu v interfaces ->optx to pri soxranenii trebuet obyazatelno prisvoivat localny ip adres
vot kogda na pervom shage zadayu localny ip adres a potom pri vklyuchenii interface a snova zadayu interface ne rabotaet i vidayot vot eto`Ты уверен, что с pfSense работаешь? в упор не вижу Local IP
-
problema 2 aya da xochu na virtualnom tak kak u menya iz nutri est pptp connectin na ruju na skolko ya znayu ya doljen razdelit po ip trafik gre eto limitaciya pfsensa
voobshe to pptp iz nutri u menya podklyuchaetsya k pfsense 1.2.3 ya proboval podklyuchitsya sozdovaya interface na pfsense no ne poluchilsya pochemu to…ya iz nutri poka podklyuchayus windoy i static rout na nego chtob usera polzovalis service om tams adminom togo pf a poka ne poluchaetsya rabotat vo vremya raboti experimentirovat nelzya posle raboti poka ne poluchaetsya chelovek domoy xochet :(((
PPTP-server для удалённых клиентов может работать только на основном (не виртуальном) IP.
А вот своих клиентов можешь NAT'ом выпускать через виртуальные IP. -
Evgeny dorogoy ti pokazivesh mne screen i iz svoego skripta na 1.2.3 naverno ya ego proboval u menya normalno zarabotalo!
no schas 2.0 stoit schas otpravlyu screen i
-
vot eshchyo
-
sozdanie interface a v assign-> ppp
-
vchera poproboval vvesti v interfaces. inc sleduyushcheee.
$mpdconf .= << <eod<br>set link no acfcomp protocomp
set link no pap chap eap
set link accept chap pap eap
set bundle enable compression
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e128
set bundle enable crypt-reqd
set ccp yes mpp-statelessEOD;
if (!empty($bandwidths[$pid]))
$mpdconf .= << <eod<br>set link bandwidth {$bandwidths[$pid]}eto privelo k sleduyushchemu
Incorrect context for: 'set bundle enable compression'
Incorrect context for: 'set ccp yes mppc'
Incorrect context for: 'set ccp yes mpp-e40'
Incorrect context for: 'set ccp yes mpp-e128'
Incorrect context for: 'set bundle enable crypt-reqd'
Incorrect context for: 'set ccp yes mpp-stateless open'nashol takoe je v topike http://forum.pfsense.org/index.php/topic,29762.0.html
tam on kajetsya nashyol kak ispravit no ne skinul v topic poprosil skinut :)</eod<br></eod<br>
-
О, дорогой, по 2.0 нииииччего не подскажу. Пользуй 1.2.3 - работает.
2.0 будем ковырять, когда релиз будет. Или хотя бы RC. -
для включения mppc-128 в 2.0 нужно писать так:
set bundle enable compression
set ccp yes mppc
set mppc yes e128
set mppc yes compress -
sposibo dorogoy zavtra poprobuyu
-
Evgeny vot chto ya na dnyax viyasnil pomnish bila problema pptp serverom
perenapravil ves trafik cherez virtual proxyARP ip
postavil pptp server na osnovnoy… i ta je problema... sfotkal vchera screen sensa tak kak log posle restarta ne soxronyaetsya zavtra skinu
no poproboval drugoe tak s win xp normalno podklyuchilsya... a doxnet server kogda podklyuchayus s win7
nachal nastroyki pomenyat na nekotorix ne konektitsya nu voobshem strannaya shtuka poka ne dokopalsya chto tvoritsya esli interesno zavtra skinu skrini i commenti -
privet BUCH s novim godom smotri chto iz etogo vishlo`
Jan 9 15:47:06 ppp: [opt3_link0] LCP: Down event
Jan 9 15:47:06 ppp: [opt3_link0] Link: DOWN event
Jan 9 15:47:06 ppp: [opt3_link0] PPTP call terminated
Jan 9 15:47:06 ppp: [opt3_link0] LCP: LayerFinish
Jan 9 15:47:06 ppp: [opt3_link0] LCP: state change Stopping –> Stopped
Jan 9 15:47:06 ppp: [opt3_link0] LCP: SendTerminateAck #15
Jan 9 15:47:06 ppp: [opt3_link0] LCP: rec'd Terminate Request #6 (Stopping)
Jan 9 15:47:04 ppp: [opt3_link0] LCP: LayerDown
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendTerminateAck #14
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Closing –> Initial
Jan 9 15:47:04 ppp: [opt3] Bundle: No NCPs left. Closing links…
Jan 9 15:47:04 ppp: [opt3] IPCP: LayerFinish
Jan 9 15:47:04 ppp: [opt3] IPCP: Down event
Jan 9 15:47:04 ppp: [opt3] IPCP: SendTerminateReq #10
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Ack-Sent –> Closing
Jan 9 15:47:04 ppp: [opt3] IPCP: Close event
Jan 9 15:47:04 ppp: [opt3] Bundle: Status update: up 0 links, total bandwidth 9600 bps
Jan 9 15:47:04 ppp: [opt3_link0] Link: Leave bundle "opt3"
Jan 9 15:47:04 ppp: [opt3_link0] LCP: state change Opened –> Stopping
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Terminate Request #5 (Opened)
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Req-Sent –> Ack-Sent
Jan 9 15:47:04 ppp: [opt3] IPADDR 192.168.0.191
Jan 9 15:47:04 ppp: [opt3] IPCP: SendConfigAck #4
Jan 9 15:47:04 ppp: [opt3] 192.168.0.191 is OK
Jan 9 15:47:04 ppp: [opt3] IPADDR 192.168.0.191
Jan 9 15:47:04 ppp: [opt3] IPCP: rec'd Configure Request #4 (Req-Sent)
Jan 9 15:47:04 ppp: [opt3_link0] rec'd unexpected protocol CCP, rejecting
Jan 9 15:47:04 ppp: [opt3] SECDNS 0.0.0.0
Jan 9 15:47:04 ppp: [opt3] PRIDNS 0.0.0.0
Jan 9 15:47:04 ppp: [opt3] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Jan 9 15:47:04 ppp: [opt3] IPADDR 0.0.0.0
Jan 9 15:47:04 ppp: [opt3] IPCP: SendConfigReq #9
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Starting –> Req-Sent
Jan 9 15:47:04 ppp: [opt3] IPCP: Up event
Jan 9 15:47:04 ppp: [opt3] IPCP: LayerStart
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Initial –> Starting
Jan 9 15:47:04 ppp: [opt3] IPCP: Open event
Jan 9 15:47:04 ppp: [opt3] Bundle: Status update: up 1 link, total bandwidth 64000 bps
Jan 9 15:47:04 ppp: [opt3_link0] Link: Join bundle "opt3"
Jan 9 15:47:04 ppp: [opt3_link0] Link: Matched action 'bundle "opt3" ""'
Jan 9 15:47:04 ppp: [opt3_link0] LCP: authorization successful
Jan 9 15:47:04 ppp: [opt3_link0] MESG: S=573063635905D9BD06B084032DCF0F0CFAC4D252
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: rec'd SUCCESS #0 len: 46
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: sending RESPONSE #0 len: 65
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: Using authname "vpn_testing"
Jan 9 15:47:04 ppp: [opt3_link0] Name: "ADCVPN"
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: rec'd CHALLENGE #0 len: 27
Jan 9 15:47:04 ppp: [opt3_link0] LCP: LayerUp
Jan 9 15:47:04 ppp: [opt3_link0] LCP: auth: peer wants CHAP, I want nothing
Jan 9 15:47:04 ppp: [opt3_link0] LCP: state change Ack-Rcvd –> Opened
Jan 9 15:47:04 ppp: [opt3_link0] ENDPOINTDISC [LOCAL] af 21 2c a3 58 e4 45 ba 8f 7a 64 de 0a 4f 52 cd 00 00 0
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM 68c62fb1
Jan 9 15:47:04 ppp: [opt3_link0] AUTHPROTO CHAP MSOFTv2
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1400
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendConfigAck #1
Jan 9 15:47:04 ppp: [opt3_link0] ENDPOINTDISC [LOCAL] af 21 2c a3 58 e4 45 ba 8f 7a 64 de 0a 4f 52 cd 00 00 0
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM 68c62fb1
Jan 9 15:47:04 ppp: [opt3_link0] AUTHPROTO CHAP MSOFTv2
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1400
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Configure Request #1 (Ack-Rcvd)
Jan 9 15:47:04 ppp: [opt3_link0] LCP: state change Req-Sent –> Ack-Rcvd
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM ac62bd70
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1500
Jan 9 15:47:04 ppp: [opt3_link0] ACCMAP 0x000a0000
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Configure Ack #13 (Req-Sent)
Jan 9 15:47:04 ppp: [opt3_link0] BACP
Jan 9 15:47:04 ppp: [opt3_link0] MP MRRU 1614
Jan 9 15:47:04 ppp: [opt3_link0] CALLBACK 6
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendConfigRej #0
Jan 9 15:47:04 ppp: [opt3_link0] Not supported
Jan 9 15:47:04 ppp: [opt3_link0] BACP
Jan 9 15:47:04 ppp: [opt3_link0] ENDPOINTDISC [LOCAL] af 21 2c a3 58 e4 45 ba 8f 7a 64 de 0a 4f 52 cd 00 00 0
Jan 9 15:47:04 ppp: [opt3_link0] MP MRRU 1614
Jan 9 15:47:04 ppp: [opt3_link0] CALLBACK 6
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM 68c62fb1
Jan 9 15:47:04 ppp: [opt3_link0] AUTHPROTO CHAP MSOFTv2
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1400
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Configure Request #0 (Req-Sent)
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM ac62bd70
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1500
Jan 9 15:47:04 ppp: [opt3_link0] ACCMAP 0x000a0000
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendConfigReq #13
Jan 9 15:47:02 ppp: [opt3_link0] MAGICNUM ac62bd70
Jan 9 15:47:02 ppp: [opt3_link0] MRU 1500
Jan 9 15:47:02 ppp: [opt3_link0] ACCMAP 0x000a0000
Jan 9 15:47:02 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:02 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:02 ppp: [opt3_link0] LCP: SendConfigReq #12
Jan 9 15:47:02 ppp: [opt3_link0] LCP: state change Starting –> Req-Sent
Jan 9 15:47:02 ppp: [opt3_link0] LCP: Up event
Jan 9 15:47:02 ppp: [opt3_link0] Link: UP event
Jan 9 15:47:02 ppp: [opt3_link0] PPTP call successful
Jan 9 15:47:02 ppp: [opt3_link0] Link: reconnection attempt 1kak ya ponyal na etot raz authentifikaciya proxodit no "unexpected protocol CCP" chto eto??? chem ona zanemaetsya?
-
a winda vidayot "the remote computer does not support requaired data encription type"
-
sechas pitayus podklyuchitsya k drugomu pfsense versya navernoe 1.2.3 ili 1.2.2 v u menya versiya 2.0-RC1 (i386) built on Wed Apr 13 06:39:28 EDT 2011
ta sozdal v interface ax pptp interface proxodit authentifikaciyu i tormozit
vot log podklyucheniyaApr 14 16:32:35 ppp: process 57251 terminated
Apr 14 16:32:35 ppp: [opt3_link0] Link: Shutdown
Apr 14 16:32:35 ppp: [opt3] Bundle: Shutdown
Apr 14 16:32:33 ppp: waiting for process 57251 to die…
Apr 14 16:32:33 ppp: [opt3] IPCP: Close event
Apr 14 16:32:33 ppp: [opt3] IFACE: Close event
Apr 14 16:32:33 ppp: caught fatal signal term
Apr 14 16:32:33 ppp: process 27025 started, version 5.5 (root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org 09:33 5-Apr-2011)
Apr 14 16:32:33 ppp:
Apr 14 16:32:33 ppp: Multi-link PPP daemon for FreeBSD
Apr 14 16:32:32 ppp: [opt3_link0] Link: reconnection attempt 1
Apr 14 16:32:31 ppp: [opt3_link0] Link: reconnection attempt 1 in 1 seconds
Apr 14 16:32:31 ppp: [opt3_link0] LCP: state change Stopping –> Starting
Apr 14 16:32:31 ppp: [opt3_link0] LCP: Down event
Apr 14 16:32:31 ppp: [opt3_link0] Link: DOWN event
Apr 14 16:32:31 ppp: [opt3_link0] PPTP call terminated
Apr 14 16:32:31 ppp: [opt3_link0] LCP: LayerDown
Apr 14 16:32:31 ppp: [opt3_link0] LCP: SendTerminateAck #2
Apr 14 16:32:31 ppp: [opt3] IPCP: state change Closing –> Initial
Apr 14 16:32:31 ppp: [opt3] Bundle: No NCPs left. Closing links…
Apr 14 16:32:31 ppp: [opt3] IPCP: LayerFinish
Apr 14 16:32:31 ppp: [opt3] IPCP: Down event
Apr 14 16:32:31 ppp: [opt3] IFACE: Down event
Apr 14 16:32:31 ppp: [opt3] IPCP: LayerDown
Apr 14 16:32:31 ppp: [opt3] IPCP: SendTerminateReq #3
Apr 14 16:32:31 ppp: [opt3] IPCP: state change Opened –> Closing
Apr 14 16:32:31 ppp: [opt3] IPCP: Close event
Apr 14 16:32:31 ppp: [opt3] Bundle: Status update: up 0 links, total bandwidth 9600 bps
Apr 14 16:32:31 ppp: [opt3_link0] Link: Leave bundle "opt3"
Apr 14 16:32:31 ppp: [opt3_link0] LCP: state change Opened –> Stopping
Apr 14 16:32:31 ppp: [opt3_link0] LCP: rec'd Terminate Request #46 (Opened)
Apr 14 16:32:31 ppp: [opt3_link0] rec'd unexpected protocol CCP, rejecting
Apr 14 16:32:31 ppp: [opt3] IFACE: Up event
Apr 14 16:32:29 ppp: [opt3] 192.168.10.4 -> 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: LayerUp
Apr 14 16:32:29 ppp: [opt3] IPCP: state change Ack-Rcvd –> Opened
Apr 14 16:32:29 ppp: [opt3] IPADDR 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: SendConfigAck #40
Apr 14 16:32:29 ppp: [opt3] 91.103.26.142 is OK
Apr 14 16:32:29 ppp: [opt3] IPADDR 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: rec'd Configure Request #40 (Ack-Rcvd)
Apr 14 16:32:29 ppp: [opt3_link0] rec'd unexpected protocol CCP, rejecting
Apr 14 16:32:29 ppp: [opt3] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 14 16:32:29 ppp: [opt3] IPCP: SendConfigRej #39
Apr 14 16:32:29 ppp: [opt3] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 14 16:32:29 ppp: [opt3] 91.103.26.142 is OK
Apr 14 16:32:29 ppp: [opt3] IPADDR 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: rec'd Configure Request #39 (Ack-Rcvd)
Apr 14 16:32:27 ppp: [opt3] IPCP: state change Req-Sent –> Ack-Rcvd
Apr 14 16:32:27 ppp: [opt3] SECDNS 91.103.26.130
Apr 14 16:32:27 ppp: [opt3] PRIDNS 172.20.1.254
Apr 14 16:32:27 ppp: [opt3] IPADDR 192.168.10.4
Apr 14 16:32:27 ppp: [opt3] IPCP: rec'd Configure Ack #2 (Req-Sent)
Apr 14 16:32:27 ppp: [opt3] SECDNS 91.103.26.130
Apr 14 16:32:27 ppp: [opt3] PRIDNS 172.20.1.254
Apr 14 16:32:27 ppp: [opt3] IPADDR 192.168.10.4
Apr 14 16:32:27 ppp: [opt3] IPCP: SendConfigReq #2
Apr 14 16:32:27 ppp: [opt3] SECDNS 91.103.26.130
Apr 14 16:32:27 ppp: [opt3] PRIDNS 172.20.1.254
Apr 14 16:32:27 ppp: [opt3] 192.168.10.4 is OK
Apr 14 16:32:27 ppp: [opt3] IPADDR 192.168.10.4
Apr 14 16:32:27 ppp: [opt3] IPCP: rec'd Configure Nak #1 (Req-Sent)
Apr 14 16:32:27 ppp: [opt3] SECDNS 0.0.0.0
Apr 14 16:32:27 ppp: [opt3] PRIDNS 0.0.0.0
Apr 14 16:32:27 ppp: [opt3] IPADDR 0.0.0.0
Apr 14 16:32:27 ppp: [opt3] IPCP: SendConfigReq #1
Apr 14 16:32:27 ppp: [opt3] IPCP: state change Starting –> Req-Sent
Apr 14 16:32:27 ppp: [opt3] IPCP: Up event
Apr 14 16:32:27 ppp: [opt3] IPCP: LayerStart
Apr 14 16:32:27 ppp: [opt3] IPCP: state change Initial –> Starting
Apr 14 16:32:27 ppp: [opt3] IPCP: Open event -
posle etogo nado budet podklyuchit pfsense i k windows mashine pptp klientom
-
kogda po ukazaniyu bucha pishu v interfaces inc vidayot vot eto
ppp: mpd_opt3.conf:33: Incorrect context for: 'set mppc yes compress'
ppp: mpd_opt3.conf:32: Incorrect context for: 'set mppc yes e128'
ppp: mpd_opt3.conf:31: Incorrect context for: 'set ccp yes mppc'
ppp: mpd_opt3.conf:30: Incorrect context for: 'set bundle enable compression'interfaces.inc`
set link disable chap pap
set link accept chap pap eap
set link disable incoming
set bundle enable compression
set ccp yes mppc
set mppc yes e128
set mppc yes compress -
reshena problema so svyazkoy
nado pisat tak v interfaces.inc
if (!isset($ppp['verbose_log']))
$mpdconf .= << <eod<br>set bundle enable compression
set ccp yes mppc
set mppc no e40
set mppc yes e128
set mppc yes stateless
#log -bund -ccp -chat -iface -ipcp -lcp -linkEOD;
foreach($ports as $pid => $port){
$port = get_real_interface($port);
$mpdconf .= << <eod<br>create link static {$interface}_link{$pid} {$type}
set link action bundle {$interface}
set link {$multilink} multilink
set link keep-alive 10 60
set link max-redial 0EOD;
if (isset($ppp['shortseq']))
$mpdconf .= << <eod<br>set link no shortseqEOD;
if (isset($ppp['acfcomp']))
$mpdconf .= << <eod<br>set link no acfcompEOD;
if (isset($ppp['protocomp']))
$mpdconf .= << <eod<br>set link no protocompEOD;
$mpdconf .= <<<eod<br>set link disable chap pap
set link accept chap pap eap
set link accept chap-msv2
set link disable incoming</eod<br></eod<br></eod<br></eod<br></eod<br></eod<br> -
kogda v interfaces ->assign->ppp's sozdayu interface pptp ne trebuet obyazatelno prisvoivat local ip no kogda interface vklyuchayu v interfaces ->optx to pri soxranenii trebuet obyazatelno prisvoivat localny ip adres
vot kogda na pervom shage zadayu localny ip adres a potom pri vklyuchenii interface a snova zadayu interface ne rabotaetКак решил эту проблему?
-
problema ostayotsya..
naverno poka ne zametili …
s nachala sozdayosh interface v ppp bez localnogo ip adresa potom pri vklyuchenii v interface a x zadayosh local ip i soxanyaesh.. posle etogo snova zaxodish v ppp i udalyaesh local ip address vsyo nachinaet rabotat ..