Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: leon85 on January 21, 2010, 07:00:55 PM

Title: VPN PPTP route error
Post by: leon85 on January 21, 2010, 07:00:55 PM
Hello everyone
I have a problem with my smeserver 7.4 with all updates installed.
Both servers are configured as a server gateway-private.
problem relates to the VPN PPTP connection:
I can connect regularly but once connected I can only access the server and everything after that is the gateway. I can not contact any computer on the local network.

Search the forums I found this similar post and this bug report.
http://forums.contribs.org/index.php/topic,42063.msg197341.html
http://forums.contribs.org/index.php/topic,41039.msg191044.html#msg191044
http://bugs.contribs.org/show_bug.cgi?id=549

However, following the signs of the bug I've set the mru and mtu but the problem remains.

This is the log when I connect and when I get disconnected.
Code: [Select]
Jan 21 18:29:23 csiserver pptpd[9069]: CTRL: Client 192.168.65.152 control connection started
Jan 21 18:29:23 csiserver pptpd[9069]: CTRL: Starting call (launching pppd, opening GRE)
Jan 21 18:29:23 csiserver pppd[9070]: Plugin radius.so loaded.
Jan 21 18:29:23 csiserver pppd[9070]: RADIUS plugin initialized.
Jan 21 18:29:23 csiserver pppd[9070]: pppd 2.4.4 started by root, uid 0
Jan 21 18:29:23 csiserver kernel: divert: not allocating divert_blk for non-ethernet device ppp0
Jan 21 18:29:23 csiserver pppd[9070]: Using interface ppp0
Jan 21 18:29:23 csiserver pppd[9070]: Connect: ppp0 <--> /dev/pts/0
Jan 21 18:29:24 csiserver udevd[1257]: udev done!
Jan 21 18:29:26 csiserver pptpd[9069]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jan 21 18:29:27 csiserver pppd[9070]: MPPE 128-bit stateless compression enabled
Jan 21 18:29:28 csiserver pppd[9070]: found interface tap0 for proxy arp
Jan 21 18:29:28 csiserver pppd[9070]: local  IP address 192.168.66.1
Jan 21 18:29:28 csiserver pppd[9070]: remote IP address 192.168.66.198
Jan 21 18:29:29 csiserver esmith::event[9095]: Processing event: ip-up.pptpd ppp0 /dev/pts/0 460800 192.168.66.1 192.168.66.198 pptpd
Jan 21 18:29:29 csiserver esmith::event[9095]: Running event handler: /etc/e-smith/events/actions/generic_template_expand
Jan 21 18:29:29 csiserver esmith::event[9095]: expanding /etc/rc.d/init.d/masq 
Jan 21 18:29:30 csiserver esmith::event[9095]: generic_template_expand=action|Event|ip-up.pptpd|Action|generic_template_expand|Start|1264094969 454344|End|1264094970 549864|Elapsed|1.09552
Jan 21 18:29:30 csiserver esmith::event[9095]: Running event handler: /etc/e-smith/events/ip-up.pptpd/S70pptp-interface-access
Jan 21 18:29:30 csiserver /etc/e-smith/events/ip-up.pptpd/S70pptp-interface-access[9097]: /home/e-smith/db/configuration: OLD pptpd=service|Interfaces||TCPPort|1723|access|public|mru|1400|mtu|1400|sessions|2|status|enabled
Jan 21 18:29:30 csiserver /etc/e-smith/events/ip-up.pptpd/S70pptp-interface-access[9097]: /home/e-smith/db/configuration: NEW pptpd=service|Interfaces|ppp0|TCPPort|1723|access|public|mru|1400|mtu|1400|sessions|2|status|enabled
Jan 21 18:29:30 csiserver esmith::event[9095]: S70pptp-interface-access=action|Event|ip-up.pptpd|Action|S70pptp-interface-access|Start|1264094970 550153|End|1264094970 994703|Elapsed|0.44455
Jan 21 18:29:30 csiserver esmith::event[9095]: Running event handler: /etc/e-smith/events/actions/adjust-services
Jan 21 18:29:31 csiserver esmith::event[9095]: adjusting non-supervised masq (adjust) 
Jan 21 18:29:32 csiserver esmith::event[9095]: adjust-services=action|Event|ip-up.pptpd|Action|adjust-services|Start|1264094970 995080|End|1264094972 274948|Elapsed|1.279868

Code: [Select]
Jan 21 18:30:50 csiserver pptpd[9069]: CTRL: Reaping child PPP[9070]
Jan 21 18:30:50 csiserver pppd[9070]: Modem hangup
Jan 21 18:30:50 csiserver pppd[9070]: Connect time 1.4 minutes.
Jan 21 18:30:50 csiserver pppd[9070]: Sent 3016 bytes, received 3626 bytes.
Jan 21 18:30:50 csiserver pppd[9070]: MPPE disabled
Jan 21 18:30:50 csiserver pppd[9070]: Connection terminated.
Jan 21 18:30:50 csiserver kernel: divert: no divert_blk to free, ppp0 not ethernet
Jan 21 18:30:50 csiserver udevd[1257]: udev done!
Jan 21 18:30:50 csiserver esmith::event[9325]: Processing event: ip-down ppp0 /dev/pts/0 460800 192.168.66.1 192.168.66.198 pptpd
Jan 21 18:30:50 csiserver esmith::event[9325]: Running event handler: /etc/e-smith/events/actions/generic_template_expand
Jan 21 18:30:51 csiserver esmith::event[9325]: expanding /etc/rc.d/init.d/masq 
Jan 21 18:30:51 csiserver esmith::event[9325]: generic_template_expand=action|Event|ip-down|Action|generic_template_expand|Start|1264095050 927790|End|1264095051 379831|Elapsed|0.452041
Jan 21 18:30:51 csiserver esmith::event[9325]: Running event handler: /etc/e-smith/events/ip-down/S50isdn-down-notify
Jan 21 18:30:51 csiserver esmith::event[9325]: S50isdn-down-notify=action|Event|ip-down|Action|S50isdn-down-notify|Start|1264095051 380121|End|1264095051 505398|Elapsed|0.125277
Jan 21 18:30:51 csiserver esmith::event[9325]: Running event handler: /etc/e-smith/events/ip-down/S70pptp-interface-access
Jan 21 18:30:51 csiserver /etc/e-smith/events/ip-down/S70pptp-interface-access[9333]: /home/e-smith/db/configuration: OLD pptpd=service|Interfaces|ppp0|TCPPort|1723|access|public|mru|1400|mtu|1400|sessions|2|status|enabled
Jan 21 18:30:51 csiserver /etc/e-smith/events/ip-down/S70pptp-interface-access[9333]: /home/e-smith/db/configuration: NEW pptpd=service|Interfaces||TCPPort|1723|access|public|mru|1400|mtu|1400|sessions|2|status|enabled
Jan 21 18:30:51 csiserver esmith::event[9325]: S70pptp-interface-access=action|Event|ip-down|Action|S70pptp-interface-access|Start|1264095051 505761|End|1264095051 633300|Elapsed|0.127539
Jan 21 18:30:51 csiserver esmith::event[9325]: Running event handler: /etc/e-smith/events/actions/adjust-services
Jan 21 18:30:51 csiserver esmith::event[9325]: adjusting non-supervised masq (adjust) 
Jan 21 18:30:52 csiserver esmith::event[9325]: adjust-services=action|Event|ip-down|Action|adjust-services|Start|1264095051 633666|End|1264095052 698778|Elapsed|1.065112
Jan 21 18:30:52 csiserver pppd[9070]: Exit.
Jan 21 18:30:52 csiserver pptpd[9069]: CTRL: Client 192.168.65.152 control connection finished


I hope someone can help me.

Thanks
Leonardo
Title: Re: VPN PPTP route error
Post by: CharlieBrady on January 22, 2010, 06:00:16 AM
This is a client configuration issue (nothing to do with SME server). Either set the client to send default route over the VPN, or add a specific network route after the VPN link is up.
Title: Re: VPN PPTP route error
Post by: leon85 on January 22, 2010, 01:21:02 PM
Hi CharlieBrady
thanks for your reply.
I do not think it's the fault of the client, as I did du test with multiple operating systems, Windows XP, Ubuntu, and nothing has changed ...
why I believe it can be a problem on the server, but I can not understand what can be ...  :-(

thanks again
Leonardo
Title: Re: VPN PPTP route error
Post by: janet on January 22, 2010, 01:46:20 PM
leon85

> ..... I can not understand what can be ...

Then I suggest you follow Charlies advice.
Title: Re: VPN PPTP route error
Post by: Boris on January 22, 2010, 10:52:51 PM
I do not think it's the fault of the client, as I did du test with multiple operating systems, Windows XP, Ubuntu, and nothing has changed ...
why I believe it can be a problem on the server, but I can not understand what can be ...  :-(
From the connection log above, your local network is 192.168.65.0 and remote (SME) network is 192.168.66.0
Make sure that subnet mask on both network is set correctly to 255.255.255.0 and NOT to 255.255.something.else.
Title: Re: VPN PPTP route error
Post by: CharlieBrady on January 25, 2010, 08:19:27 PM
I do not think it's the fault of the client, as I did du test with multiple operating systems, Windows XP, Ubuntu, and nothing has changed ...
why I believe it can be a problem on the server, but I can not understand what can be ...  :-(

I don't care how many different clients you use, but client routing is still the job of the client. PPTP just establishes a link directly between the client and the server. If you want other traffic to be routed via that link, then the client must be configured to send that traffic.