Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: swissis on May 13, 2008, 11:09:19 AM

Title: VPN doesn't work between 2 SME-Servers
Post by: swissis on May 13, 2008, 11:09:19 AM

Hi, i have a sme box at work and at home.
At work i have VPN access enabled and i can connect from almost everywhere. When i try to connect from home it stucks at Authenticating Username and Password.
I've checked several settings as this is discussed a lot on this forum.

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: byte on May 13, 2008, 11:21:09 AM

Quote from: swissis on May 13, 2008, 11:09:19 AM

When i try to connect from home it stucks at Authenticating Username and Password.

Sounds like your firewall/router is not allowing the GRE protocol 47 thru.

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: brianr on May 13, 2008, 12:40:17 PM

I VPN between by office SMEServer and those of my clients all the time.  :smile:

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: janet on May 13, 2008, 12:41:56 PM

swissis

http://wiki.contribs.org/VPN_practical_tips

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: byte on May 13, 2008, 02:06:03 PM

Quote from: brianr on May 13, 2008, 12:40:17 PM

I VPN between by office SMEServer and those of my clients all the time.  :smile:

I meant your home firewall/router ;) PPTP Port 1723 does the initial connection then GRE protocol 47 does the authenticating side.

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: swissis on May 14, 2008, 09:45:45 PM

Mmm, thanks but it's still not working.
Please take a look on this part of the log-file.
I do understand the part of the GRE but i used to work all the time and others that are not behind a SME can connect just fine
I can connect from work to home by the way.

Code: [Select]

May 14 21:29:18 srv-gw01 pptpd[18389]: CTRL: Client xxx.xxx.xxx.xxx control connection started
May 14 21:29:18 srv-gw01 pptpd[18389]: CTRL: Starting call (launching pppd, opening GRE)
May 14 21:29:18 srv-gw01 pppd[18390]: Plugin radius.so loaded.
May 14 21:29:18 srv-gw01 pppd[18390]: RADIUS plugin initialized.
May 14 21:29:18 srv-gw01 pppd[18390]: pppd 2.4.4 started by root, uid 0
May 14 21:29:18 srv-gw01 kernel: divert: not allocating divert_blk for non-ethernet device ppp0
May 14 21:29:18 srv-gw01 pppd[18390]: Using interface ppp0
May 14 21:29:18 srv-gw01 pppd[18390]: Connect: ppp0 <--> /dev/pts/0
May 14 21:29:18 srv-gw01 pptpd[18389]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
May 14 21:29:28 srv-gw01 pppd[18390]: [b]Peer marcelp failed CHAP authentication[/b]
May 14 21:29:28 srv-gw01 pppd[18390]: Connection terminated.
May 14 21:29:28 srv-gw01 kernel: divert: no divert_blk to free, ppp0 not ethernet
May 14 21:29:28 srv-gw01 pppd[18390]: Exit.
May 14 21:29:28 srv-gw01 pptpd[18389]: GRE: read(fd=6,buffer=804e5a0,len=8196) from PTY failed: status = -1 error = I
May 14 21:29:28 srv-gw01 pptpd[18389]: [b]CTRL: PTY read or GRE write failed (pty,gre)=(6,7)[/b]
May 14 21:29:28 srv-gw01 pptpd[18389]: CTRL: Reaping child PPP[18390]
May 14 21:29:28 srv-gw01 pptpd[18389]: CTRL: Client xxx.xxx.xxx.xxx control connection finished
May 14 21:34:56 srv-gw01 sshd(pam_unix)[18468]: session opened for user root by (uid=0)




Title: Re: VPN doesn't work between 2 SME-Servers
Post by: cactus on May 15, 2008, 08:23:36 AM

Quote from: swissis on May 14, 2008, 09:45:45 PM

Code: [Select]

May 14 21:29:28 srv-gw01 pppd[18390]: [b]Peer marcelp failed CHAP authentication[/b]
May 14 21:29:28 srv-gw01 pppd[18390]: Connection terminated.


Is that a normal messsage? I have never used VPN (like this) but it seems a probable cause to me.

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: swissis on May 15, 2008, 08:33:25 AM

I don't know. As said it allways worked fine.
Although i used to have an older version of SME at work because yum updates failed and the version was 7.1 i think.
Since a week i'm running SME as a virtual server on VMware. The versions at Home and at Work are identical now.
Regards,

Marcel

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: pfloor on May 15, 2008, 08:58:26 AM

Quote from: cactus on May 15, 2008, 08:23:36 AM

Is that a normal messsage? I have never used VPN (like this) but it seems a probable cause to me.

That is not the problem, this is:

Code: [Select]

May 14 21:29:28 srv-gw01 pptpd[18389]: GRE: read(fd=6,buffer=804e5a0,len=8196) from PTY failed: status = -1 error = I
May 14 21:29:28 srv-gw01 pptpd[18389]: [b]CTRL: PTY read or GRE write failed (pty,gre)=(6,7)[/b]

GRE packets are not getting through.  BTW, This could be caused at either end.

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: cactus on May 15, 2008, 09:02:07 AM

Quote from: swissis on May 15, 2008, 08:33:25 AM

I don't know. As said it allways worked fine.
Although i used to have an older version of SME at work because yum updates failed and the version was 7.1 i think.
Since a week i'm running SME as a virtual server on VMware. The versions at Home and at Work are identical now.
Regards,

Marcel

Are you perhaps experiencing the issues since using VMWare?

http://blog.markus-breitenbach.com/2008/02/12/vpn-tunels-from-within-vmware-windows-xp-and-gre-weirdness/

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: swissis on May 15, 2008, 09:14:25 AM

Yes i think so. The only thing that's strange is that other clients can connect just fine.
Only me at home behind another SME not.

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: cactus on May 15, 2008, 09:26:11 AM

Quote from: swissis on May 15, 2008, 09:14:25 AM

Yes i think so. The only thing that's strange is that other clients can connect just fine.
Only me at home behind another SME not.

But you stated you are running SME Server as a VMWare guest, how did you configure the network interfaces?

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: swissis on May 15, 2008, 09:32:56 AM

Like this

http://www.p4dgg.nl/SetupVMwareNetwork.jpg (http://www.p4dgg.nl/SetupVMwareNetwork.jpg)

Title: Re: VPN doesn't work between 2 SME-Servers
Post by: cactus on May 15, 2008, 09:35:57 AM

Quote from: swissis on May 15, 2008, 09:32:56 AM

Like this

(http://www.p4dgg.nl/SetupVMwareNetwork.jpg)

Yep, nice, but I can not conclude if they are in NAT, bridge or any other mode from this...