Fedora 8 VPN Client for Microsoft PPTP VPN server: routing problem

Zvi Kave tzvik at razlee.com
Tue Jul 22 15:20:36 UTC 2008


Hi,

Seems that the VPN PPTP connection to MS  PPTP server is OK as from the
/var/log/messages, but I can not access the required IP behind the MS 
server.
(But from Windows XP , I have no problems to connect to desired IP)

Here are the details:

1. Before starting my netstat -r

(1.1.1.0 is my local network)
Destination     Gateway         Genmask         Flags   MSS Window  irtt 
Iface
1.1.1.0         *               255.255.255.0   U         0 0          0 
eth0
192.168.122.0   *               255.255.255.0   U         0 0          0 
virbr0
link-local      *               255.255.0.0     U         0 0          0 
eth0
default         1.1.1.254       0.0.0.0         UG        0 0          0 
eth0

After command: pppd call vpn1
I got the following messages in /var/log/messages

Jul 22 14:21:14 razleefs pppd[2898]: pppd 2.4.4 started by root, uid 0
Jul 22 14:21:14 razleefs pppd[2898]: Using interface ppp0
Jul 22 14:21:14 razleefs pppd[2898]: Connect: ppp0 <--> /dev/pts/3
Jul 22 14:21:20 razleefs pptp[2900]: anon log[main:pptp.c:276]: The synchro
pptp option is NOT activated
Jul 22 14:21:20 razleefs pptp[2917]: anon log[ctrlp_rep:pptp_ctrl.c:251]: S
ontrol packet type is 1 'Start-Control-Connection-Request'
Jul 22 14:21:20 razleefs pptp[2917]: anon log[ctrlp_disp:pptp_ctrl.c:738]:
ved Start Control Connection Reply
Jul 22 14:21:20 razleefs pptp[2917]: anon log[ctrlp_disp:pptp_ctrl.c:772]:
t connection established.
Jul 22 14:21:21 razleefs pptp[2917]: anon log[ctrlp_rep:pptp_ctrl.c:251]: S
ontrol packet type is 7 'Outgoing-Call-Request'
Jul 22 14:21:21 razleefs pptp[2917]: anon log[ctrlp_disp:pptp_ctrl.c:857]:
ved Outgoing Call Reply.
Jul 22 14:21:21 razleefs pptp[2917]: anon log[ctrlp_disp:pptp_ctrl.c:896]:
ing call established (call ID 0, peer's call ID 39197).
Jul 22 14:21:22 razleefs pptp[2917]: anon log[ctrlp_disp:pptp_ctrl.c:949]:
SET_LINK_INFO received from peer_callid 0
Jul 22 14:21:22 razleefs pptp[2917]: anon log[ctrlp_disp:pptp_ctrl.c:952]:
d_accm is 00000000, recv_accm is FFFFFFFF
Jul 22 14:21:22 razleefs pptp[2917]: anon warn[ctrlp_disp:pptp_ctrl.c:955]:
zero Async Control Character Maps are not supported!

Jul 22 14:21:22 razleefs pppd[2898]: CHAP authentication succeeded
Jul 22 14:21:22 razleefs kernel: PPP MPPE Compression module registered
Jul 22 14:21:22 razleefs pppd[2898]: MPPE 128-bit stateless compression ena
Jul 22 14:21:23 razleefs pppd[2898]: local  IP address 192.168.10.14
Jul 22 14:21:23 razleefs pppd[2898]: remote IP address 192.168.10.12
Jul 22 14:21:23 razleefs pppd[2898]: primary   DNS address 192.168.10.1
Jul 22 14:21:23 razleefs pppd[2898]: secondary DNS address 192.168.0.5

I understand that it means that connection tunnel is ready.

netstat -r is now:
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt 
Iface
192.168.10.12   *               255.255.255.255 UH        0 0          0 
ppp0
1.1.1.0         *               255.255.255.0   U         0 0          0 
eth0
192.168.122.0   *               255.255.255.0   U         0 0          0 
virbr0
link-local      *               255.255.0.0     U         0 0          0 
eth0
default         1.1.1.254       0.0.0.0         UG        0 0          0 
eth0

I need now to get connection to IP 172.25.9.64 behind the Windows VPN 
server.
I can not do it without some route commands.

I tried the suggested commands in vain:
route add -net 192.168.10.0 netmask 255.255.255.0 dev ppp0
route add -net 172.25.9.0 netmask 255.255.255.0 dev ppp0

I tried ping 172.25.9.64 but it hanged up,
and I got the message:
ping 172.25.9.64
PING 172.25.9.64 (172.25.9.64) 56(84) bytes of data.
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted


(telnet 172.25.9.64  simply hangs up)

I am looking for correct route commands to make it working.

Regards,

Zvi 






More information about the fedora-list mailing list