Архив форумов ЦИТФорума

[bike-prorider]

Необходимо организовать VPN для мониторинга локальной сети. Обеспечит доступ в локальную сеть удаленной машине с виндой через интернет. Для организации VPN используется mpd5 версия 5.3. Стоит это все на FreeBSD-7.2.

Конфиг mpd5:

startup:
set user login password admin
set console self 127.0.0.1 5005
set console open
set web self 127.0.0.1 5006
set web open
default:
load vpn

vpn:
set ippool add poolsat *.*.*.201 *.*.*.205
create bundle template B
set iface enable proxy-arp
set iface idle 1800
set iface enable tcpmssfix
set ipcp yes vjcomp
set ipcp ranges *.*.*.200/32 ippool poolsat
set ipcp dns *.*.*.3
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
create link template L pptp
set link action bundle B
set link enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
set link keep-alive 10 60
set link mtu 1460
set pptp self **.**.**.**
set link enable incoming

---------------------------------------------
mpd.links:

pptp0:
set link type pptp

---------------------------------------------
mpd.secret содержит пользователей

при попытке законнектиться из виндовой машины получаю ошибку

Ошибка: 734: Протокол управления PPP-связью был прерван.

лог mpd5:

mpd: process 17987 started
mpd: CONSOLE: listening on 127.0.0.1 5005
mpd: web: listening on 127.0.0.1 5006
mpd: PPTP: waiting for connection on **.**.**.** 1723
mpd: [L-1] Accepting PPTP connection
mpd: [L-1] Link: OPEN event
mpd: [L-1] LCP: Open event
mpd: [L-1] LCP: state change Initial --> Starting
mpd: [L-1] LCP: LayerStart
mpd: [L-1] PPTP: attaching to peer's outgoing call
mpd: [L-1] Link: UP event
mpd: [L-1] LCP: Up event
mpd: [L-1] LCP: state change Starting --> Req-Sent
mpd: [L-1] LCP: SendConfigReq #1
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1500
mpd: [L-1] MAGICNUM a07839f3
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 0 1 1 b 4 b
mpd: [L-1] LCP: rec'd Configure Request #0 (Req-Sent)
mpd: [L-1] MRU 1400
mpd: [L-1] MAGICNUM 02a17de7
mpd: [L-1] PROTOCOMP
mpd: [L-1] ACFCOMP
mpd: [L-1] CALLBACK 6
mpd: [L-1] LCP: SendConfigRej #0
mpd: [L-1] CALLBACK 6
mpd: [L-1] LCP: rec'd Configure Request #1 (Req-Sent)
mpd: [L-1] MRU 1400
mpd: [L-1] MAGICNUM 02a17de7
mpd: [L-1] PROTOCOMP
mpd: [L-1] ACFCOMP
mpd: [L-1] LCP: SendConfigAck #1
mpd: [L-1] MRU 1400
mpd: [L-1] MAGICNUM 02a17de7
mpd: [L-1] PROTOCOMP
mpd: [L-1] ACFCOMP
mpd: [L-1] LCP: state change Req-Sent --> Ack-Sent
mpd: [L-1] LCP: SendConfigReq #2
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1500
mpd: [L-1] MAGICNUM a07839f3
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 0 1 1 b 4 b
mpd: [L-1] LCP: rec'd Configure Reject #2 (Ack-Sent)
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 0 1 1 b 4 b
mpd: [L-1] LCP: SendConfigReq #3
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1500
mpd: [L-1] MAGICNUM a07839f3
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] LCP: rec'd Configure Ack #3 (Ack-Sent)
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1500
mpd: [L-1] MAGICNUM a07839f3
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] LCP: state change Ack-Sent --> Opened
mpd: [L-1] LCP: auth: peer wants nothing, I want CHAP
mpd: [L-1] CHAP: sending CHALLENGE #1 len: 21
mpd: [L-1] LCP: LayerUp
mpd: [L-1] LCP: rec'd Ident #2 (Opened)
mpd: [L-1] MESG: MSRASV5.10
mpd: [L-1] LCP: rec'd Ident #3 (Opened)
mpd: [L-1] MESG: MSRAS-0-SKIFIA-ORDZHO
mpd: [L-1] CHAP: rec'd RESPONSE #1 len: 58
mpd: [L-1] Name: "login2"
mpd: [L-1] AUTH: Trying INTERNAL
mpd: [L-1] AUTH: INTERNAL returned: undefined
mpd: [L-1] CHAP: Auth return status: undefined
mpd: [L-1] CHAP: Response is valid
mpd: [L-1] CHAP: Reply message: S=BAB1042EFDAB0AA122121B49A084C7016
mpd: [L-1] CHAP: sending SUCCESS #1 len: 46
mpd: [L-1] LCP: authorization successful
mpd: [L-1] Link: Matched action 'bundle "B" ""'
mpd: [L-1] Creating new bundle using template "B".
mpd: [B-1] can't create iface node at ".:"->"temphook": Operation not permitted 5
mpd: [B-1] can't create netgraph interface
mpd: [B-1] Bundle netgraph initialization failed
mpd: [L-1] Bundle creation error
mpd: [L-1] link did not validate in bundle
mpd: [L-1] LCP: parameter negotiation failed
mpd: [L-1] LCP: state change Opened --> Stopping
mpd: [L-1] LCP: SendTerminateReq #4
mpd: [L-1] LCP: LayerDown
mpd: [L-1] rec'd proto CCP during terminate phase
mpd: [L-1] rec'd proto IPCP during terminate phase
mpd: [L-1] LCP: rec'd Terminate Ack #4 (Stopping)
mpd: [L-1] LCP: state change Stopping --> Stopped
mpd: [L-1] LCP: LayerFinish
mpd: [L-1] PPTP call terminated
mpd: [L-1] Link: DOWN event
mpd: [L-1] LCP: Close event
mpd: [L-1] LCP: state change Stopped --> Closed
mpd: [L-1] LCP: Down event
mpd: [L-1] LCP: state change Closed --> Initial
mpd: [L-1] Link: SHUTDOWN event
mpd: [L-1] Link: Shutdown

тоесть коннект проходит, авторизация тоже проходит. А вот на создании интерфейса отваливается.
Подскажите куда копать?
В сторону гугла прошу не направлять, сегодня целый день потратил на гуглокопательство. Ничего путного нет.
Прошу вашей помощи...

[vasstr]

mpd: [B-1] Bundle netgraph initialization failed

ядро без нетграф?

options HZ=1000
options NETGRAPH
options NETGRAPH_PPPOE
options NETGRAPH_SOCKET
options NETGRAPH_CISCO
options NETGRAPH_ECHO
options NETGRAPH_FRAME_RELAY
options NETGRAPH_HOLE
options NETGRAPH_KSOCKET
options NETGRAPH_LMI
options NETGRAPH_RFC1490
options NETGRAPH_TTY
options NETGRAPH_ASYNC
options NETGRAPH_BPF
options NETGRAPH_ETHER
options NETGRAPH_IFACE
options NETGRAPH_KSOCKET
options NETGRAPH_L2TP
options NETGRAPH_MPPC_ENCRYPTION
options NETGRAPH_PPP
options NETGRAPH_PPTPGRE
options NETGRAPH_TEE
options NETGRAPH_UI
options NETGRAPH_VJC

[bike-prorider]

В ядре нетграф собран так:

options><------>HZ=1000
options><------>NETGRAPH
options><------>NETGRAPH_ETHER
options><------>NETGRAPH_SOCKET
options><------>NETGRAPH_IPFW
options><------>NETGRAPH_KSOCKET
options><------>NETGRAPH_NETFLOW
options><------>NETGRAPH_TEE
options><------>NETGRAPH_PPPOE
options><------>NETGRAPH_L2TP
options><------>NETGRAPH_MPPC_ENCRYPTION
options><------>NETGRAPH_PPP
options><------>NETGRAPH_PPTPGRE

[bike-prorider]

Пересобрал ядро вот так:

options><------>HZ=1000
options><------>NETGRAPH
options><------>NETGRAPH_ETHER
options><------>NETGRAPH_SOCKET
options><------>NETGRAPH_IPFW
options><------>NETGRAPH_KSOCKET
options><------>NETGRAPH_NETFLOW
options><------>NETGRAPH_TEE
options><------>NETGRAPH_PPPOE
options><------>NETGRAPH_L2TP
options><------>NETGRAPH_MPPC_ENCRYPTION
options><------>NETGRAPH_PPP
options><------>NETGRAPH_PPTPGRE
options><------>NETGRAPH_TCPMSS

options><------>NETGRAPH_CISCO
options><------>NETGRAPH_ECHO
options><------>NETGRAPH_FRAME_RELAY
options><------>NETGRAPH_HOLE
options><------>NETGRAPH_LMI
options><------>NETGRAPH_RFC1490
options><------>NETGRAPH_TTY
options><------>NETGRAPH_ASYNC
options><------>NETGRAPH_BPF
options><------>NETGRAPH_IFACE
options><------>NETGRAPH_UI
options><------>NETGRAPH_VJC

теперь в виндовом клиенте вываливается 619-я ошибка.
в логах:
mpd: [L-1] LCP: parameter negotiation failed
mpd: [L-1] LCP: state change Req-Sent --> Stopped
mpd: [L-1] LCP: LayerFinish
mpd: [L-1] PPTP call terminated
mpd: [L-1] Link: DOWN event
mpd: [L-1] LCP: Close event
mpd: [L-1] LCP: state change Stopped --> Closed
mpd: [L-1] LCP: Down event
mpd: [L-1] LCP: state change Closed --> Initial
mpd: [L-1] Link: SHUTDOWN event
mpd: [L-1] Link: Shutdown

[bike-prorider]

Обновил мир.
Пересобрал ядро поновой.
Заработало.
Но теперь с маршрутами надо мудрить - не всюду достучаться можно.