Topic: VPN doesn't work between 2 SME-Servers

[swissis]

Hi, i have a sme box at work and at home.
At work i have VPN access enabled and i can connect from almost everywhere. When i try to connect from home it stucks at Authenticating Username and Password.
I've checked several settings as this is discussed a lot on this forum.

[byte]

When i try to connect from home it stucks at Authenticating Username and Password.

Sounds like your firewall/router is not allowing the GRE protocol 47 thru.

[brianr]

I VPN between by office SMEServer and those of my clients all the time. 

[janet]

swissis

http://wiki.contribs.org/VPN_practical_tips

[byte]

I VPN between by office SMEServer and those of my clients all the time. 

I meant your home firewall/router PPTP Port 1723 does the initial connection then GRE protocol 47 does the authenticating side.

[swissis]

Mmm, thanks but it's still not working.
Please take a look on this part of the log-file.
I do understand the part of the GRE but i used to work all the time and others that are not behind a SME can connect just fine
I can connect from work to home by the way.

Code: [Select]

May 14 21:29:18 srv-gw01 pptpd[18389]: CTRL: Client xxx.xxx.xxx.xxx control connection started
May 14 21:29:18 srv-gw01 pptpd[18389]: CTRL: Starting call (launching pppd, opening GRE)
May 14 21:29:18 srv-gw01 pppd[18390]: Plugin radius.so loaded.
May 14 21:29:18 srv-gw01 pppd[18390]: RADIUS plugin initialized.
May 14 21:29:18 srv-gw01 pppd[18390]: pppd 2.4.4 started by root, uid 0
May 14 21:29:18 srv-gw01 kernel: divert: not allocating divert_blk for non-ethernet device ppp0
May 14 21:29:18 srv-gw01 pppd[18390]: Using interface ppp0
May 14 21:29:18 srv-gw01 pppd[18390]: Connect: ppp0 <--> /dev/pts/0
May 14 21:29:18 srv-gw01 pptpd[18389]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
May 14 21:29:28 srv-gw01 pppd[18390]: [b]Peer marcelp failed CHAP authentication[/b]
May 14 21:29:28 srv-gw01 pppd[18390]: Connection terminated.
May 14 21:29:28 srv-gw01 kernel: divert: no divert_blk to free, ppp0 not ethernet
May 14 21:29:28 srv-gw01 pppd[18390]: Exit.
May 14 21:29:28 srv-gw01 pptpd[18389]: GRE: read(fd=6,buffer=804e5a0,len=8196) from PTY failed: status = -1 error = I
May 14 21:29:28 srv-gw01 pptpd[18389]: [b]CTRL: PTY read or GRE write failed (pty,gre)=(6,7)[/b]
May 14 21:29:28 srv-gw01 pptpd[18389]: CTRL: Reaping child PPP[18390]
May 14 21:29:28 srv-gw01 pptpd[18389]: CTRL: Client xxx.xxx.xxx.xxx control connection finished
May 14 21:34:56 srv-gw01 sshd(pam_unix)[18468]: session opened for user root by (uid=0)




[cactus]

Code: [Select]

May 14 21:29:28 srv-gw01 pppd[18390]: [b]Peer marcelp failed CHAP authentication[/b]
May 14 21:29:28 srv-gw01 pppd[18390]: Connection terminated.


Is that a normal messsage? I have never used VPN (like this) but it seems a probable cause to me.

[swissis]

I don't know. As said it allways worked fine.
Although i used to have an older version of SME at work because yum updates failed and the version was 7.1 i think.
Since a week i'm running SME as a virtual server on VMware. The versions at Home and at Work are identical now.
Regards,

Marcel

[pfloor]

Is that a normal messsage? I have never used VPN (like this) but it seems a probable cause to me.

That is not the problem, this is:

Code: [Select]

May 14 21:29:28 srv-gw01 pptpd[18389]: GRE: read(fd=6,buffer=804e5a0,len=8196) from PTY failed: status = -1 error = I
May 14 21:29:28 srv-gw01 pptpd[18389]: [b]CTRL: PTY read or GRE write failed (pty,gre)=(6,7)[/b]

GRE packets are not getting through.  BTW, This could be caused at either end.

[cactus]

I don't know. As said it allways worked fine.
Although i used to have an older version of SME at work because yum updates failed and the version was 7.1 i think.
Since a week i'm running SME as a virtual server on VMware. The versions at Home and at Work are identical now.
Regards,

Marcel

Are you perhaps experiencing the issues since using VMWare?

http://blog.markus-breitenbach.com/2008/02/12/vpn-tunels-from-within-vmware-windows-xp-and-gre-weirdness/

[swissis]

Yes i think so. The only thing that's strange is that other clients can connect just fine.
Only me at home behind another SME not.

[cactus]

Yes i think so. The only thing that's strange is that other clients can connect just fine.
Only me at home behind another SME not.

But you stated you are running SME Server as a VMWare guest, how did you configure the network interfaces?

[swissis]

Like this

http://www.p4dgg.nl/SetupVMwareNetwork.jpg

[cactus]

Like this

Yep, nice, but I can not conclude if they are in NAT, bridge or any other mode from this...