Pfsense 2.0 i pptp(resheno!!!)

Eugene

problema 2 aya da xochu na virtualnom tak kak u menya iz nutri est pptp connectin na ruju na skolko ya znayu ya doljen razdelit po ip trafik gre eto limitaciya pfsensa
voobshe to pptp iz nutri u menya podklyuchaetsya k pfsense 1.2.3 ya proboval podklyuchitsya sozdovaya interface na pfsense no ne poluchilsya pochemu to…ya iz nutri poka podklyuchayus windoy i static rout na nego chtob usera polzovalis service om tam

s adminom togo pf a poka ne poluchaetsya rabotat vo vremya raboti experimentirovat nelzya posle raboti poka ne poluchaetsya chelovek domoy xochet :(((

PPTP-server для удалённых клиентов может работать только на основном (не виртуальном) IP.
А вот своих клиентов можешь NAT'ом выпускать через виртуальные IP.

vardan

Evgeny dorogoy ti pokazivesh mne screen i iz svoego skripta na 1.2.3 naverno ya ego proboval u menya normalno zarabotalo!

no schas 2.0 stoit schas otpravlyu screen i

Screenshot-9.png_thumb

vardan

vot eshchyo

Screenshot-6.png_thumb

vardan

sozdanie interface a v assign-> ppp

Screenshot-1.png_thumb

vardan

vchera poproboval vvesti v interfaces. inc sleduyushcheee.

$mpdconf .= << <eod set link no acfcomp protocomp
set link no pap chap eap
set link accept chap pap eap
set bundle enable compression
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e128
set bundle enable crypt-reqd
set ccp yes mpp-stateless

EOD;

if (!empty($bandwidths[$pid]))
$mpdconf .= << <eod set link bandwidth {$bandwidths[$pid]}

eto privelo k sleduyushchemu

Incorrect context for: 'set bundle enable compression'
Incorrect context for: 'set ccp yes mppc'
Incorrect context for: 'set ccp yes mpp-e40'
Incorrect context for: 'set ccp yes mpp-e128'
Incorrect context for: 'set bundle enable crypt-reqd'
Incorrect context for: 'set ccp yes mpp-stateless open'

nashol takoe je v topike http://forum.pfsense.org/index.php/topic,29762.0.html

tam on kajetsya nashyol kak ispravit no ne skinul v topic poprosil skinut :)</eod </eod

Eugene

О, дорогой, по 2.0 нииииччего не подскажу. Пользуй 1.2.3 - работает.
2.0 будем ковырять, когда релиз будет. Или хотя бы RC.

Buch

для включения mppc-128 в 2.0 нужно писать так:

set bundle enable compression
set ccp yes mppc
set mppc yes e128
set mppc yes compress

vardan

sposibo dorogoy zavtra poprobuyu

vardan

Evgeny vot chto ya na dnyax viyasnil pomnish bila problema pptp serverom
perenapravil ves trafik cherez virtual proxyARP ip
postavil pptp server na osnovnoy… i ta je problema... sfotkal vchera screen sensa tak kak log posle restarta ne soxronyaetsya zavtra skinu
no poproboval drugoe tak s win xp normalno podklyuchilsya... a doxnet server kogda podklyuchayus s win7
nachal nastroyki pomenyat na nekotorix ne konektitsya nu voobshem strannaya shtuka poka ne dokopalsya chto tvoritsya esli interesno zavtra skinu skrini i commenti

vardan

privet BUCH s novim godom smotri chto iz etogo vishlo`

Jan 9 15:47:06 ppp: [opt3_link0] LCP: Down event
Jan 9 15:47:06 ppp: [opt3_link0] Link: DOWN event
Jan 9 15:47:06 ppp: [opt3_link0] PPTP call terminated
Jan 9 15:47:06 ppp: [opt3_link0] LCP: LayerFinish
Jan 9 15:47:06 ppp: [opt3_link0] LCP: state change Stopping –> Stopped
Jan 9 15:47:06 ppp: [opt3_link0] LCP: SendTerminateAck #15
Jan 9 15:47:06 ppp: [opt3_link0] LCP: rec'd Terminate Request #6 (Stopping)
Jan 9 15:47:04 ppp: [opt3_link0] LCP: LayerDown
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendTerminateAck #14
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Closing –> Initial
Jan 9 15:47:04 ppp: [opt3] Bundle: No NCPs left. Closing links…
Jan 9 15:47:04 ppp: [opt3] IPCP: LayerFinish
Jan 9 15:47:04 ppp: [opt3] IPCP: Down event
Jan 9 15:47:04 ppp: [opt3] IPCP: SendTerminateReq #10
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Ack-Sent –> Closing
Jan 9 15:47:04 ppp: [opt3] IPCP: Close event
Jan 9 15:47:04 ppp: [opt3] Bundle: Status update: up 0 links, total bandwidth 9600 bps
Jan 9 15:47:04 ppp: [opt3_link0] Link: Leave bundle "opt3"
Jan 9 15:47:04 ppp: [opt3_link0] LCP: state change Opened –> Stopping
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Terminate Request #5 (Opened)
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Req-Sent –> Ack-Sent
Jan 9 15:47:04 ppp: [opt3] IPADDR 192.168.0.191
Jan 9 15:47:04 ppp: [opt3] IPCP: SendConfigAck #4
Jan 9 15:47:04 ppp: [opt3] 192.168.0.191 is OK
Jan 9 15:47:04 ppp: [opt3] IPADDR 192.168.0.191
Jan 9 15:47:04 ppp: [opt3] IPCP: rec'd Configure Request #4 (Req-Sent)
Jan 9 15:47:04 ppp: [opt3_link0] rec'd unexpected protocol CCP, rejecting
Jan 9 15:47:04 ppp: [opt3] SECDNS 0.0.0.0
Jan 9 15:47:04 ppp: [opt3] PRIDNS 0.0.0.0
Jan 9 15:47:04 ppp: [opt3] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Jan 9 15:47:04 ppp: [opt3] IPADDR 0.0.0.0
Jan 9 15:47:04 ppp: [opt3] IPCP: SendConfigReq #9
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Starting –> Req-Sent
Jan 9 15:47:04 ppp: [opt3] IPCP: Up event
Jan 9 15:47:04 ppp: [opt3] IPCP: LayerStart
Jan 9 15:47:04 ppp: [opt3] IPCP: state change Initial –> Starting
Jan 9 15:47:04 ppp: [opt3] IPCP: Open event
Jan 9 15:47:04 ppp: [opt3] Bundle: Status update: up 1 link, total bandwidth 64000 bps
Jan 9 15:47:04 ppp: [opt3_link0] Link: Join bundle "opt3"
Jan 9 15:47:04 ppp: [opt3_link0] Link: Matched action 'bundle "opt3" ""'
Jan 9 15:47:04 ppp: [opt3_link0] LCP: authorization successful
Jan 9 15:47:04 ppp: [opt3_link0] MESG: S=573063635905D9BD06B084032DCF0F0CFAC4D252
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: rec'd SUCCESS #0 len: 46
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: sending RESPONSE #0 len: 65
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: Using authname "vpn_testing"
Jan 9 15:47:04 ppp: [opt3_link0] Name: "ADCVPN"
Jan 9 15:47:04 ppp: [opt3_link0] CHAP: rec'd CHALLENGE #0 len: 27
Jan 9 15:47:04 ppp: [opt3_link0] LCP: LayerUp
Jan 9 15:47:04 ppp: [opt3_link0] LCP: auth: peer wants CHAP, I want nothing
Jan 9 15:47:04 ppp: [opt3_link0] LCP: state change Ack-Rcvd –> Opened
Jan 9 15:47:04 ppp: [opt3_link0] ENDPOINTDISC [LOCAL] af 21 2c a3 58 e4 45 ba 8f 7a 64 de 0a 4f 52 cd 00 00 0
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM 68c62fb1
Jan 9 15:47:04 ppp: [opt3_link0] AUTHPROTO CHAP MSOFTv2
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1400
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendConfigAck #1
Jan 9 15:47:04 ppp: [opt3_link0] ENDPOINTDISC [LOCAL] af 21 2c a3 58 e4 45 ba 8f 7a 64 de 0a 4f 52 cd 00 00 0
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM 68c62fb1
Jan 9 15:47:04 ppp: [opt3_link0] AUTHPROTO CHAP MSOFTv2
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1400
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Configure Request #1 (Ack-Rcvd)
Jan 9 15:47:04 ppp: [opt3_link0] LCP: state change Req-Sent –> Ack-Rcvd
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM ac62bd70
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1500
Jan 9 15:47:04 ppp: [opt3_link0] ACCMAP 0x000a0000
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Configure Ack #13 (Req-Sent)
Jan 9 15:47:04 ppp: [opt3_link0] BACP
Jan 9 15:47:04 ppp: [opt3_link0] MP MRRU 1614
Jan 9 15:47:04 ppp: [opt3_link0] CALLBACK 6
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendConfigRej #0
Jan 9 15:47:04 ppp: [opt3_link0] Not supported
Jan 9 15:47:04 ppp: [opt3_link0] BACP
Jan 9 15:47:04 ppp: [opt3_link0] ENDPOINTDISC [LOCAL] af 21 2c a3 58 e4 45 ba 8f 7a 64 de 0a 4f 52 cd 00 00 0
Jan 9 15:47:04 ppp: [opt3_link0] MP MRRU 1614
Jan 9 15:47:04 ppp: [opt3_link0] CALLBACK 6
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM 68c62fb1
Jan 9 15:47:04 ppp: [opt3_link0] AUTHPROTO CHAP MSOFTv2
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1400
Jan 9 15:47:04 ppp: [opt3_link0] LCP: rec'd Configure Request #0 (Req-Sent)
Jan 9 15:47:04 ppp: [opt3_link0] MAGICNUM ac62bd70
Jan 9 15:47:04 ppp: [opt3_link0] MRU 1500
Jan 9 15:47:04 ppp: [opt3_link0] ACCMAP 0x000a0000
Jan 9 15:47:04 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:04 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:04 ppp: [opt3_link0] LCP: SendConfigReq #13
Jan 9 15:47:02 ppp: [opt3_link0] MAGICNUM ac62bd70
Jan 9 15:47:02 ppp: [opt3_link0] MRU 1500
Jan 9 15:47:02 ppp: [opt3_link0] ACCMAP 0x000a0000
Jan 9 15:47:02 ppp: [opt3_link0] PROTOCOMP
Jan 9 15:47:02 ppp: [opt3_link0] ACFCOMP
Jan 9 15:47:02 ppp: [opt3_link0] LCP: SendConfigReq #12
Jan 9 15:47:02 ppp: [opt3_link0] LCP: state change Starting –> Req-Sent
Jan 9 15:47:02 ppp: [opt3_link0] LCP: Up event
Jan 9 15:47:02 ppp: [opt3_link0] Link: UP event
Jan 9 15:47:02 ppp: [opt3_link0] PPTP call successful
Jan 9 15:47:02 ppp: [opt3_link0] Link: reconnection attempt 1

kak ya ponyal na etot raz authentifikaciya proxodit no "unexpected protocol CCP" chto eto??? chem ona zanemaetsya?

vardan

a winda vidayot "the remote computer does not support requaired data encription type"

vardan

sechas pitayus podklyuchitsya k drugomu pfsense versya navernoe 1.2.3 ili 1.2.2 v u menya versiya 2.0-RC1 (i386) built on Wed Apr 13 06:39:28 EDT 2011

ta sozdal v interface ax pptp interface proxodit authentifikaciyu i tormozit
vot log podklyucheniya

Apr 14 16:32:35 ppp: process 57251 terminated
Apr 14 16:32:35 ppp: [opt3_link0] Link: Shutdown
Apr 14 16:32:35 ppp: [opt3] Bundle: Shutdown
Apr 14 16:32:33 ppp: waiting for process 57251 to die…
Apr 14 16:32:33 ppp: [opt3] IPCP: Close event
Apr 14 16:32:33 ppp: [opt3] IFACE: Close event
Apr 14 16:32:33 ppp: caught fatal signal term
Apr 14 16:32:33 ppp: process 27025 started, version 5.5 (root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org 09:33 5-Apr-2011)
Apr 14 16:32:33 ppp:
Apr 14 16:32:33 ppp: Multi-link PPP daemon for FreeBSD
Apr 14 16:32:32 ppp: [opt3_link0] Link: reconnection attempt 1
Apr 14 16:32:31 ppp: [opt3_link0] Link: reconnection attempt 1 in 1 seconds
Apr 14 16:32:31 ppp: [opt3_link0] LCP: state change Stopping –> Starting
Apr 14 16:32:31 ppp: [opt3_link0] LCP: Down event
Apr 14 16:32:31 ppp: [opt3_link0] Link: DOWN event
Apr 14 16:32:31 ppp: [opt3_link0] PPTP call terminated
Apr 14 16:32:31 ppp: [opt3_link0] LCP: LayerDown
Apr 14 16:32:31 ppp: [opt3_link0] LCP: SendTerminateAck #2
Apr 14 16:32:31 ppp: [opt3] IPCP: state change Closing –> Initial
Apr 14 16:32:31 ppp: [opt3] Bundle: No NCPs left. Closing links…
Apr 14 16:32:31 ppp: [opt3] IPCP: LayerFinish
Apr 14 16:32:31 ppp: [opt3] IPCP: Down event
Apr 14 16:32:31 ppp: [opt3] IFACE: Down event
Apr 14 16:32:31 ppp: [opt3] IPCP: LayerDown
Apr 14 16:32:31 ppp: [opt3] IPCP: SendTerminateReq #3
Apr 14 16:32:31 ppp: [opt3] IPCP: state change Opened –> Closing
Apr 14 16:32:31 ppp: [opt3] IPCP: Close event
Apr 14 16:32:31 ppp: [opt3] Bundle: Status update: up 0 links, total bandwidth 9600 bps
Apr 14 16:32:31 ppp: [opt3_link0] Link: Leave bundle "opt3"
Apr 14 16:32:31 ppp: [opt3_link0] LCP: state change Opened –> Stopping
Apr 14 16:32:31 ppp: [opt3_link0] LCP: rec'd Terminate Request #46 (Opened)
Apr 14 16:32:31 ppp: [opt3_link0] rec'd unexpected protocol CCP, rejecting
Apr 14 16:32:31 ppp: [opt3] IFACE: Up event
Apr 14 16:32:29 ppp: [opt3] 192.168.10.4 -> 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: LayerUp
Apr 14 16:32:29 ppp: [opt3] IPCP: state change Ack-Rcvd –> Opened
Apr 14 16:32:29 ppp: [opt3] IPADDR 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: SendConfigAck #40
Apr 14 16:32:29 ppp: [opt3] 91.103.26.142 is OK
Apr 14 16:32:29 ppp: [opt3] IPADDR 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: rec'd Configure Request #40 (Ack-Rcvd)
Apr 14 16:32:29 ppp: [opt3_link0] rec'd unexpected protocol CCP, rejecting
Apr 14 16:32:29 ppp: [opt3] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 14 16:32:29 ppp: [opt3] IPCP: SendConfigRej #39
Apr 14 16:32:29 ppp: [opt3] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 14 16:32:29 ppp: [opt3] 91.103.26.142 is OK
Apr 14 16:32:29 ppp: [opt3] IPADDR 91.103.26.142
Apr 14 16:32:29 ppp: [opt3] IPCP: rec'd Configure Request #39 (Ack-Rcvd)
Apr 14 16:32:27 ppp: [opt3] IPCP: state change Req-Sent –> Ack-Rcvd
Apr 14 16:32:27 ppp: [opt3] SECDNS 91.103.26.130
Apr 14 16:32:27 ppp: [opt3] PRIDNS 172.20.1.254
Apr 14 16:32:27 ppp: [opt3] IPADDR 192.168.10.4
Apr 14 16:32:27 ppp: [opt3] IPCP: rec'd Configure Ack #2 (Req-Sent)
Apr 14 16:32:27 ppp: [opt3] SECDNS 91.103.26.130
Apr 14 16:32:27 ppp: [opt3] PRIDNS 172.20.1.254
Apr 14 16:32:27 ppp: [opt3] IPADDR 192.168.10.4
Apr 14 16:32:27 ppp: [opt3] IPCP: SendConfigReq #2
Apr 14 16:32:27 ppp: [opt3] SECDNS 91.103.26.130
Apr 14 16:32:27 ppp: [opt3] PRIDNS 172.20.1.254
Apr 14 16:32:27 ppp: [opt3] 192.168.10.4 is OK
Apr 14 16:32:27 ppp: [opt3] IPADDR 192.168.10.4
Apr 14 16:32:27 ppp: [opt3] IPCP: rec'd Configure Nak #1 (Req-Sent)
Apr 14 16:32:27 ppp: [opt3] SECDNS 0.0.0.0
Apr 14 16:32:27 ppp: [opt3] PRIDNS 0.0.0.0
Apr 14 16:32:27 ppp: [opt3] IPADDR 0.0.0.0
Apr 14 16:32:27 ppp: [opt3] IPCP: SendConfigReq #1
Apr 14 16:32:27 ppp: [opt3] IPCP: state change Starting –> Req-Sent
Apr 14 16:32:27 ppp: [opt3] IPCP: Up event
Apr 14 16:32:27 ppp: [opt3] IPCP: LayerStart
Apr 14 16:32:27 ppp: [opt3] IPCP: state change Initial –> Starting
Apr 14 16:32:27 ppp: [opt3] IPCP: Open event

vardan

posle etogo nado budet podklyuchit pfsense i k windows mashine pptp klientom

vardan

kogda po ukazaniyu bucha pishu v interfaces inc vidayot vot eto
ppp: mpd_opt3.conf:33: Incorrect context for: 'set mppc yes compress'
ppp: mpd_opt3.conf:32: Incorrect context for: 'set mppc yes e128'
ppp: mpd_opt3.conf:31: Incorrect context for: 'set ccp yes mppc'
ppp: mpd_opt3.conf:30: Incorrect context for: 'set bundle enable compression'

interfaces.inc`

set link disable chap pap
set link accept chap pap eap
set link disable incoming
set bundle enable compression
set ccp yes mppc
set mppc yes e128
set mppc yes compress

vardan

reshena problema so svyazkoy

nado pisat tak v interfaces.inc

if (!isset($ppp['verbose_log']))
$mpdconf .= << <eod set bundle enable compression
set ccp yes mppc
set mppc no e40
set mppc yes e128
set mppc yes stateless
#log -bund -ccp -chat -iface -ipcp -lcp -link

EOD;
foreach($ports as $pid => $port){
$port = get_real_interface($port);
$mpdconf .= << <eod create link static {$interface}_link{$pid} {$type}
set link action bundle {$interface}
set link {$multilink} multilink
set link keep-alive 10 60
set link max-redial 0

EOD;
if (isset($ppp['shortseq']))
$mpdconf .= << <eod set link no shortseq

EOD;

if (isset($ppp['acfcomp']))
$mpdconf .= << <eod set link no acfcomp

EOD;

if (isset($ppp['protocomp']))
$mpdconf .= << <eod set link no protocomp

EOD;

$mpdconf .= <<<eod set link disable chap pap
set link accept chap pap eap
set link accept chap-msv2
set link disable incoming</eod </eod </eod </eod </eod </eod

Alsinor

@vardan:

kogda v interfaces ->assign->ppp's sozdayu interface pptp ne trebuet obyazatelno prisvoivat local ip no kogda interface vklyuchayu v interfaces ->optx to pri soxranenii trebuet obyazatelno prisvoivat localny ip adres
vot kogda na pervom shage zadayu localny ip adres a potom pri vklyuchenii interface a snova zadayu interface ne rabotaet

Как решил эту проблему?

vardan

problema ostayotsya..
naverno poka ne zametili …
s nachala sozdayosh interface v ppp bez localnogo ip adresa potom pri vklyuchenii v interface a x zadayosh local ip i soxanyaesh.. posle etogo snova zaxodish v ppp i udalyaesh local ip address vsyo nachinaet rabotat ..