[pptp-server] Problem

[Magnus Beutner]

Hi
I have a network behind a Linux (Slackware, I might add :) ),
a masquerading firewall, protecting the inside net = 172.17.116.0/23

I tried to connect from the outside 193.x.x.x with a Win95 (msdun1.3)
to my VPN-server (FreeBSD 4.1).  I could ping any direction...

my config files below....
= = = = = = = =

**  /usr/local/etc/rc.d/pptpd.sh
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
( there is more, but some of you propably already hate me for this long
mail.....(sorry))
#!/bin/sh
 /usr/local/sbin/pptpd -c /etc/ppp/pptpd.conf


***  /etc/ppp/pptpd.conf/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
option /etc/ppp/options
pidfile /var/run/pptpd.pid


***  /etc/ppp/ppp.conf /
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
default:

# Log EVERYTHING!
# set log async cbcp ccp chat command connect debug dns hdlc id0 ipcp lcp
lqm phase physical sync tcp/ip timer tun

# Normal debug-log.
# set log Phase Chat LCP IPCP CCP tun command

# Pretty informative (pptp).
 set log cbcp ccp chat command connect debug dns id0 ipcp lcp lqm phase sync
tcp/ip tun

 set speed 115200
 set timeout 3600

 allow users *
 allow modes

 enable chap
 enable proxy

 accept dns
 set dns 172.17.117.30 193.14.211.2
 set nbns 172.17.117.30 172.17.117.10

 set ifaddr 172.17.116.1 172.17.116.50-172.17.116.59 255.255.254.0
 add  HISADDR

#--------------------------------------------------------------#
#  This are kept just so the pppd doesn't complain.
pptp:


***  /etc/ppp/ppp.secret
#--------------------------------------------------------------#
#UserName   Password
 test               xxx


***  /etc/ppp/options
***  /etc/ppp/ppp.linkup
***  /etc/ppp/ppp.linkdown

The 3 files above are totally empty (works anyway)!

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-

I'm fully aware that this IS NOT a final solution, but it's a start
I do NOT recommend using this without further testing
( haven't done any packet-sniffing on a connection yet).


I've placed these files in a tar.gz @ location:
http://www.algonet.se/~beutner/linux/ppp_example.tar.gz

 // EOF.


----- Original Message -----
From: "Dmitry Tolpanov" <tdn at stack.ru>


> I'm just faced another problem.
> First of all i need to say that i've found the solution for Linux
> http://www.moretonbay.com/vpn/releases/HOWTO-PoPToP.txt
> but i can't use it in FreeBSD.
> I'll try to discribe step by step. (Sorry for my poor English :)
>
> The net topology is similar to HOWTO:
>
> 192.168.8.142     192.168.56.10    192.168.56.11   192.168.56.12
>  ________          _______           ______        _____
> |        |        |       |         |      |      |      |
> | client |------->| fire  |-------->| pptp |----->| host |
> |        |        | wall  |         | srvr |      |      |
> |________|        |_______|         |______|      |______|
>     H                                   H
>     H         192.168.8.10              H
>     H                                   H
>     H===================================H
> 192.168.5.12     pptp connection     192.168.5.11
>
> The problem is the following. When i connect through PPTP, i can ping
> both "client" and "pptp-server". But i can ping any host in
> "pptp-server's" network. I get the following error:
>
> Cannot determine ethernet address for proxy ARP
>
> The solution in HOWTO offers to add new entry in ARP table
>
> arp --set 192.168.5.12 00:60:08:98:14:13 pub
>
> And it shoult solve the problem. Butt :). when i try to do so in
> FreeBSD in answers:
>
> cannot intuit interface index and type for 192.168.5.12
>
> As i understand the system tries to find interface which serves in
> this network and can't process this. I wonder how it works in Linux!
> That is.
>
> In this sutuation i have two questions.
> 1. How can i add new ARP entry properly. This question is concern of
>    FreeBSD gurues;
> 2. Is there any other solution for this problem.
>
> Any help appreciated !
> Thanks a lot.
>
> Dmitry.
>