Не могу поднять впн клиент под FreeBSD 6.0.
Прочитал вот тут http://www.opennet.ru/openforum/vsluhforumID1/61117.html
и тут http://www.opennet.ru/base/net/mpd_bsd_client.txt.html
чего-то в первой ссылке дают еще эти скритпы io-down.sh , io-up.sh, я их не создавал. .
Кто может дайте мне готовые конфиги, пожалуйста.
Я под freebsd недавно.
И где можно прочитать что обозначает каждая строка в конфигах.
адрес ВПН сервера - 10.119.16.1 (точно не знаю , поскольку просто когда использывал vpn на windows, то в --состояние vpn --- сведения --- было так:
ip адересс сервера 10.119.16.1 (я его нигде не указывал там)
ip адресс клиента 192.168.100.90 (выдается автоматически постоянно один и тотже)
(адреса 10.119.16.1 и 10.118.128.1 находятся в одной сети, только в разных подсетях, 10.118.128.1 это ip сервека через который я подключен к сети, и для которого я и прописывал vpn при подключении, мой ip 10.118.128.38 ) так что точно не знаю адрес ВПН сервера или 10.119.16.1 или 10.118.128.1,последний тот что я указывал в windows.
выделение IP адреса - автоматически
шифрование данных - отключить
вот мои конфиги :
------------------
mpd.conf
------------------
---------------------------------------------------
default:
load vpn
vpn:
new -i ng0 vpn vpn
set iface disable on-demand
set iface addrs 192.168.1.1 192.168.2.1
set iface idle 0
# disconnect the client after 8 hours
# set iface session 28800
# set iface route 192.168.2.0/24
set iface route default
set bundle disable multilink
set bundle authname "Vitali"
set bundle password "password"
set link yes acfcomp protocomp
# set link no pap
# set link yes chap
# set link mtu 1460
# If remote machine is NT you need this..
set link enable no-orig-auth
set link keep-alive 10 75
set ipcp yes vjcomp
set ipcp ranges 0.0.0.0/0 0.0.0.0/0
#
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
#
set bundle enable compression
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e128
# set bundle enable crypt-reqd #пробывал также включать, но тогда вовсе не идет
set ccp yes mpp-stateless
open
----------------------------------------------------
---------------
mpd.links
---------------
----------------------------------------------------
vpn:
set link type pptp
set pptp self 10.118.128.38
set pptp peer 10.118.128.1
# set pptp enable originate incoming outcall
set pptp enable originate
----------------------------------------------------
лог который я получаю:
----------------------------------------------------
10# mpd
Multi-link PPP for FreeBSD, by Archie L. Cobbs.
Based on iij-ppp, by Toshiharu OHNO.
mpd: pid 1589, version 3.18 (root@10.118.128.1 01:10 10-Jun-2007)
[vpn] ppp node is "mpd1589-vpn"
[vpn] using interface ng0
[vpn] IPCP: peer address cannot be zero
[vpn] IFACE: Open event
[vpn] IPCP: Open event
[vpn] IPCP: state change Initial --> Starting
[vpn] IPCP: LayerStart
[vpn:vpn] [vpn] bundle: OPEN event in state CLOSED
[vpn] opening link "vpn"...
[vpn] link: OPEN event
[vpn] LCP: Open event
[vpn] LCP: state change Initial --> Starting
[vpn] LCP: LayerStart
[vpn] device: OPEN event in state DOWN
pptp0: connecting to 10.118.128.1:1723
[vpn] device is now in state OPENING
pptp0: connected to 10.118.128.1:1723
pptp0: attached to connection with 10.118.128.1:1723
pptp0-0: outgoing call connected at 64000 bps
[vpn] PPTP call successful
[vpn] device: UP event in state OPENING
[vpn] device is now in state UP
[vpn] link: UP event
[vpn] link: origination is local
[vpn] LCP: Up event
[vpn] LCP: state change Starting --> Req-Sent
[vpn] LCP: phase shift DEAD --> ESTABLISH
[vpn] LCP: SendConfigReq #1
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 16f8588e
[vpn] LCP: rec'd Configure Ack #1 link 0 (Req-Sent)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 16f8588e
[vpn] LCP: state change Req-Sent --> Ack-Rcvd
[vpn] LCP: rec'd Configure Request #3 link 0 (Ack-Rcvd)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 5f2f55ce
AUTHPROTO CHAP MSOFTv2
MP MRRU 1600
MP SHORTSEQ
ENDPOINTDISC [802.1] 00 11 2f 92 bc ac
[vpn] LCP: SendConfigRej #3
MP MRRU 1600
MP SHORTSEQ
[vpn] LCP: rec'd Configure Request #4 link 0 (Ack-Rcvd)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 5f2f55ce
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: SendConfigAck #4
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 5f2f55ce
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: state change Ack-Rcvd --> Opened
[vpn] LCP: phase shift ESTABLISH --> AUTHENTICATE
[vpn] LCP: auth: peer wants CHAP, I want nothing
[vpn] LCP: LayerUp
[vpn] CHAP: rec'd CHALLENGE #1
Name: ""
Using authname "Vitali"
[vpn] CHAP: sending RESPONSE
[vpn] CHAP: rec'd SUCCESS #1
MESG: S=E8A9ADDB27E980B2FA0DC5C824DD2E7E23119D0A
[vpn] LCP: authorization successful
[vpn] LCP: phase shift AUTHENTICATE --> NETWORK
[vpn] setting interface ng0 MTU to 1500 bytes
[vpn] up: 1 link, total bandwidth 64000 bps
[vpn] IPCP: Up event
[vpn] IPCP: state change Starting --> Req-Sent
[vpn] IPCP: SendConfigReq #1
IPADDR 0.0.0.0
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] CCP: Open event
[vpn] CCP: state change Initial --> Starting
[vpn] CCP: LayerStart
[vpn] CCP: Up event
[vpn] CCP: state change Starting --> Req-Sent
[vpn] CCP: SendConfigReq #1
[vpn] CCP: Checking whether 40 bits are enabled -> yes
[vpn] CCP: Checking whether 56 bits are enabled -> no
[vpn] CCP: Checking whether 128 bits are enabled -> yes
MPPC
0x01000060: MPPE, 40 bit, 128 bit, stateless
[vpn] IPCP: rec'd Configure Request #126 link 0 (Req-Sent)
IPADDR 10.119.16.1
10.119.16.1 is OK
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] IPCP: SendConfigAck #126
IPADDR 10.119.16.1
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] IPCP: state change Req-Sent --> Ack-Sent
[vpn] IPCP: rec'd Configure Nak #1 link 0 (Ack-Sent)
IPADDR 192.168.100.90
192.168.100.90 is OK
[vpn] IPCP: SendConfigReq #2
IPADDR 192.168.100.90
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] LCP: rec'd Protocol Reject #61 link 0 (Opened)
[vpn] LCP: protocol CCP was rejected
[vpn] CCP: protocol was rejected by peer
[vpn] CCP: Close event
[vpn] CCP: state change Req-Sent --> Closing
[vpn] CCP: SendTerminateReq #2
[vpn] CCP: state change Closing --> Closed
[vpn] CCP: LayerFinish
[vpn] IPCP: rec'd Configure Ack #2 link 0 (Ack-Sent)
IPADDR 192.168.100.90
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] IPCP: state change Ack-Sent --> Opened
[vpn] IPCP: LayerUp
192.168.100.90 -> 10.119.16.1
[vpn] IFACE: Up event
[vpn] setting interface ng0 MTU to 1500 bytes
[vpn] exec: /sbin/ifconfig ng0 192.168.100.90 10.119.16.1 netmask 0xffffffff -link0
[vpn] exec: /sbin/route add 192.168.100.90 -iface lo0
[vpn] exec: /sbin/route add 0.0.0.0 10.119.16.1
[vpn] exec: command returned 256
[vpn] IFACE: Up event
[vpn] LCP: rec'd Protocol Reject #62 link 0 (Opened)
[vpn] LCP: protocol CCP was rejected
[vpn] CCP: protocol was rejected by peer
[vpn] CCP: Close event
[vpn] CCP: LayerFinish
потом проверил ifconfig
------------------------------------------------------------------------
10# ifconfig
lnc0: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
inet6 fe80::20c:29ff:fe90:7622%lnc0 prefixlen 64 scopeid 0x1
inet 10.118.128.38 netmask 0xffffff00 broadcast 10.118.128.255
ether 00:0c:29:90:76:22
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff000000
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.100.90 --> 10.119.16.1 netmask 0xffffffff
inet6 fe80::20c:29ff:fe90:7622%ng0 prefixlen 64 scopeid 0x4
-------------------------------------------------------------------------------------------------------
а трафик не проходит, напрмер:
10# ping ya.ru
PING ya.ru (87.250.251.8): 56 data bytes
-----------------------------------------------------
Прочитал вот тут http://www.opennet.ru/openforum/vsluhforumID1/61117.html
и тут http://www.opennet.ru/base/net/mpd_bsd_client.txt.html
чего-то в первой ссылке дают еще эти скритпы io-down.sh , io-up.sh, я их не создавал. .
Кто может дайте мне готовые конфиги, пожалуйста.
Я под freebsd недавно.
И где можно прочитать что обозначает каждая строка в конфигах.
адрес ВПН сервера - 10.119.16.1 (точно не знаю , поскольку просто когда использывал vpn на windows, то в --состояние vpn --- сведения --- было так:
ip адересс сервера 10.119.16.1 (я его нигде не указывал там)
ip адресс клиента 192.168.100.90 (выдается автоматически постоянно один и тотже)
(адреса 10.119.16.1 и 10.118.128.1 находятся в одной сети, только в разных подсетях, 10.118.128.1 это ip сервека через который я подключен к сети, и для которого я и прописывал vpn при подключении, мой ip 10.118.128.38 ) так что точно не знаю адрес ВПН сервера или 10.119.16.1 или 10.118.128.1,последний тот что я указывал в windows.
выделение IP адреса - автоматически
шифрование данных - отключить
вот мои конфиги :
------------------
mpd.conf
------------------
---------------------------------------------------
default:
load vpn
vpn:
new -i ng0 vpn vpn
set iface disable on-demand
set iface addrs 192.168.1.1 192.168.2.1
set iface idle 0
# disconnect the client after 8 hours
# set iface session 28800
# set iface route 192.168.2.0/24
set iface route default
set bundle disable multilink
set bundle authname "Vitali"
set bundle password "password"
set link yes acfcomp protocomp
# set link no pap
# set link yes chap
# set link mtu 1460
# If remote machine is NT you need this..
set link enable no-orig-auth
set link keep-alive 10 75
set ipcp yes vjcomp
set ipcp ranges 0.0.0.0/0 0.0.0.0/0
#
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
#
set bundle enable compression
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e128
# set bundle enable crypt-reqd #пробывал также включать, но тогда вовсе не идет
set ccp yes mpp-stateless
open
----------------------------------------------------
---------------
mpd.links
---------------
----------------------------------------------------
vpn:
set link type pptp
set pptp self 10.118.128.38
set pptp peer 10.118.128.1
# set pptp enable originate incoming outcall
set pptp enable originate
----------------------------------------------------
лог который я получаю:
----------------------------------------------------
10# mpd
Multi-link PPP for FreeBSD, by Archie L. Cobbs.
Based on iij-ppp, by Toshiharu OHNO.
mpd: pid 1589, version 3.18 (root@10.118.128.1 01:10 10-Jun-2007)
[vpn] ppp node is "mpd1589-vpn"
[vpn] using interface ng0
[vpn] IPCP: peer address cannot be zero
[vpn] IFACE: Open event
[vpn] IPCP: Open event
[vpn] IPCP: state change Initial --> Starting
[vpn] IPCP: LayerStart
[vpn:vpn] [vpn] bundle: OPEN event in state CLOSED
[vpn] opening link "vpn"...
[vpn] link: OPEN event
[vpn] LCP: Open event
[vpn] LCP: state change Initial --> Starting
[vpn] LCP: LayerStart
[vpn] device: OPEN event in state DOWN
pptp0: connecting to 10.118.128.1:1723
[vpn] device is now in state OPENING
pptp0: connected to 10.118.128.1:1723
pptp0: attached to connection with 10.118.128.1:1723
pptp0-0: outgoing call connected at 64000 bps
[vpn] PPTP call successful
[vpn] device: UP event in state OPENING
[vpn] device is now in state UP
[vpn] link: UP event
[vpn] link: origination is local
[vpn] LCP: Up event
[vpn] LCP: state change Starting --> Req-Sent
[vpn] LCP: phase shift DEAD --> ESTABLISH
[vpn] LCP: SendConfigReq #1
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 16f8588e
[vpn] LCP: rec'd Configure Ack #1 link 0 (Req-Sent)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 16f8588e
[vpn] LCP: state change Req-Sent --> Ack-Rcvd
[vpn] LCP: rec'd Configure Request #3 link 0 (Ack-Rcvd)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 5f2f55ce
AUTHPROTO CHAP MSOFTv2
MP MRRU 1600
MP SHORTSEQ
ENDPOINTDISC [802.1] 00 11 2f 92 bc ac
[vpn] LCP: SendConfigRej #3
MP MRRU 1600
MP SHORTSEQ
[vpn] LCP: rec'd Configure Request #4 link 0 (Ack-Rcvd)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 5f2f55ce
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: SendConfigAck #4
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 5f2f55ce
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: state change Ack-Rcvd --> Opened
[vpn] LCP: phase shift ESTABLISH --> AUTHENTICATE
[vpn] LCP: auth: peer wants CHAP, I want nothing
[vpn] LCP: LayerUp
[vpn] CHAP: rec'd CHALLENGE #1
Name: ""
Using authname "Vitali"
[vpn] CHAP: sending RESPONSE
[vpn] CHAP: rec'd SUCCESS #1
MESG: S=E8A9ADDB27E980B2FA0DC5C824DD2E7E23119D0A
[vpn] LCP: authorization successful
[vpn] LCP: phase shift AUTHENTICATE --> NETWORK
[vpn] setting interface ng0 MTU to 1500 bytes
[vpn] up: 1 link, total bandwidth 64000 bps
[vpn] IPCP: Up event
[vpn] IPCP: state change Starting --> Req-Sent
[vpn] IPCP: SendConfigReq #1
IPADDR 0.0.0.0
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] CCP: Open event
[vpn] CCP: state change Initial --> Starting
[vpn] CCP: LayerStart
[vpn] CCP: Up event
[vpn] CCP: state change Starting --> Req-Sent
[vpn] CCP: SendConfigReq #1
[vpn] CCP: Checking whether 40 bits are enabled -> yes
[vpn] CCP: Checking whether 56 bits are enabled -> no
[vpn] CCP: Checking whether 128 bits are enabled -> yes
MPPC
0x01000060: MPPE, 40 bit, 128 bit, stateless
[vpn] IPCP: rec'd Configure Request #126 link 0 (Req-Sent)
IPADDR 10.119.16.1
10.119.16.1 is OK
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] IPCP: SendConfigAck #126
IPADDR 10.119.16.1
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] IPCP: state change Req-Sent --> Ack-Sent
[vpn] IPCP: rec'd Configure Nak #1 link 0 (Ack-Sent)
IPADDR 192.168.100.90
192.168.100.90 is OK
[vpn] IPCP: SendConfigReq #2
IPADDR 192.168.100.90
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] LCP: rec'd Protocol Reject #61 link 0 (Opened)
[vpn] LCP: protocol CCP was rejected
[vpn] CCP: protocol was rejected by peer
[vpn] CCP: Close event
[vpn] CCP: state change Req-Sent --> Closing
[vpn] CCP: SendTerminateReq #2
[vpn] CCP: state change Closing --> Closed
[vpn] CCP: LayerFinish
[vpn] IPCP: rec'd Configure Ack #2 link 0 (Ack-Sent)
IPADDR 192.168.100.90
COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
[vpn] IPCP: state change Ack-Sent --> Opened
[vpn] IPCP: LayerUp
192.168.100.90 -> 10.119.16.1
[vpn] IFACE: Up event
[vpn] setting interface ng0 MTU to 1500 bytes
[vpn] exec: /sbin/ifconfig ng0 192.168.100.90 10.119.16.1 netmask 0xffffffff -link0
[vpn] exec: /sbin/route add 192.168.100.90 -iface lo0
[vpn] exec: /sbin/route add 0.0.0.0 10.119.16.1
[vpn] exec: command returned 256
[vpn] IFACE: Up event
[vpn] LCP: rec'd Protocol Reject #62 link 0 (Opened)
[vpn] LCP: protocol CCP was rejected
[vpn] CCP: protocol was rejected by peer
[vpn] CCP: Close event
[vpn] CCP: LayerFinish
потом проверил ifconfig
------------------------------------------------------------------------
10# ifconfig
lnc0: flags=108843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
inet6 fe80::20c:29ff:fe90:7622%lnc0 prefixlen 64 scopeid 0x1
inet 10.118.128.38 netmask 0xffffff00 broadcast 10.118.128.255
ether 00:0c:29:90:76:22
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff000000
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.100.90 --> 10.119.16.1 netmask 0xffffffff
inet6 fe80::20c:29ff:fe90:7622%ng0 prefixlen 64 scopeid 0x4
-------------------------------------------------------------------------------------------------------
а трафик не проходит, напрмер:
10# ping ya.ru
PING ya.ru (87.250.251.8): 56 data bytes
-----------------------------------------------------