[pptp-server] URGENT tip request - problem browsing the net f rom a dialup Win2k client, and latest Kernel/patches.

[Cowles, Steve]

> -----Original Message-----
> From: steevieg at hushmail.com [mailto:steevieg at hushmail.com]
> Sent: Monday, February 25, 2002 6:02 AM
> To: pptp-server at lists.schulte.org
> Subject: [pptp-server] URGENT tip request - problem browsing the net
> from a dialup Win2k client, and latest Kernel/patches.
> 
> 
> 
> Hi all,
> 
> i've setted up pptpd v.1.0.1 on a debian server that must 
> provide vpn connection from dialup-home-pc.
> After an endless nightmare, i can finaly connect with 
> encryption, i ping all pc, i can browse them running a 
> \\internal_ip, etc,  but my boss wants to browse the local 
> network from the "network places" too as it was a normal 
> internal connection.
> 
> Beyond the dns, i've setted the wins server too in the 
> options of the tcp/vpn connection of the client, and I can 
> see both of them in the ipconfig /all.
> I've also set the ms-dns and ms-wins in 
> /etc/ppp/pptpd-options but nothing changes.

Is there a WINS server actually running at the IP address you set in your
options file???

> 
> 1) What do i have to to do to browse the net from there as it 
> was a normal internal connection?

If you have a functional WINS server on your LAN...

1) Are all MS clients on your LAN (not just your pptp clients) configured to
register with that WINS server?

2) Are the PPTP clients configured to register with same workgroup/domain
names as those on the LAN?

> 
> The situation is:
> Kernel 2.2.19
> ppp-2.3.8
> ppp-2.3.8-mppe-others-norc4_TH7.diff.gz patch applied
> SSLeay-0.6.6b.tar.gz
> PoPToP v1.0.1
> ipchains 1.3.9
> 
> ps: no firwall rules are applied at the moment.
> 
> 
> 2) I had troubles with kernel 2.4.17, anyone knows which is 
> the latest kernel/patches that are usable to make a stable vpn server?
> 
> 
> 3) I'm testing the home client from an external isdn 
> connection; it's terribly luggysh, my boss told me that from 
> an analogic 33.6 connection it was faster.
> Is there any trick/option to set/unset to make it faster?

You might try to decrease the MTU of your PPTP connection by specifying the
following in your options file.

mtu 1492
mru 1492

or maybe even 1460. tcpdump should show if gre/ppp packets are being
fragmented.

Steve Cowles