Philipp Sternberg | 4 Dec 2007 15:55
Picon
Picon

Connection Termination Problems using PPTP

Hi all,

I'm using kvpnc (0.8.9)with kde 3.5.8 for quite a time now, however Cisco/IP 
Sec was the only protocoll i've used so far.

Trying to use pptp, i encountered a strange problem:
When i choose configure KVpnc->Network->Routes: "Keep default route" for the 
pptp profile everything is fine. However when i choose "Replace default 
route" the connection is terminated after 32 or 33 seconds (reproduceably)
The console gives out:(i've modified the ip address don't wonder about the 
256)

debug: Ping to 256.23.91.2 within 1 checks every 9s was ok.
debug: Ping to 256.23.91.2 within 1 checks every 9s was ok.
debug: [pppd] LCP terminated by peer (Peer not responding)
debug: [pppd] Connect time 0.6 minutes.
debug: [pppd] Sent 285187470 bytes, received 84 bytes.
info: Connection has been terminated.
debug: Disconnect requested
debug: Disconnect requested, status connected
debug: "PppdDownScript" started.
debug: "PppdDownScript" finished.
debug: killing "pptp"...
debug: "killall -3 pptp" was successful.
info: Successful disconnected.
info: Connection duration was 00 hours, 00 minutes, 33 seconds
error: Remote modem has hung up. Connection was terminated.

Well anyone any ideas??
How can the peer be not responding when the ping check is ok ??
(Continue reading)

Christoph Thielecke | 4 Dec 2007 16:13
Picon
Picon

Re: Connection Termination Problems using PPTP

Hello Phillip,

> I'm using kvpnc (0.8.9)with kde 3.5.8 for quite a time now, however
> Cisco/IP Sec was the only protocoll i've used so far.
Can you try the latest snapshot 
(http://download.gna.org/kvpnc/testing/snapshot/20071105/) or svn?

I guess its fixed now.

Best regards

Christoph
--

-- 
Linux User Group Wernigerode
http://www.lug-wr.de/
_______________________________________________
Kvpnc-user mailing list
Kvpnc-user@...
https://mail.gna.org/listinfo/kvpnc-user
Philipp Sternberg | 5 Dec 2007 17:33
Picon
Picon

Re: Connection Termination Problems using PPTP

Hi Christoph and all,
thanks for answering that fast !!!

> > I'm using kvpnc (0.8.9)with kde 3.5.8 for quite a time now, however
> > Cisco/IP Sec was the only protocoll i've used so far.
>
> Can you try the latest snapshot
> (http://download.gna.org/kvpnc/testing/snapshot/20071105/) or svn?

Allright I've downloaded the latest snapshot... unfortunately it doesn't solve 
the problem...

Allright here is what has happend with  (0.8.9) and what now happens with 
(0.8.9+20071105). All of the following applie to tests using a pptp 
connection:

1.Problem: Replacing the default route
-------------------------------------------------------
kvpnc 0.8.9:
When "Replace default route" is selected in "Settings: Configure 
KVpnc->Network->Routes" a pptp connection is terminated after 32 or 33 
seconds (reproduceably).
-------
kvpnc(0.8.9+20071105): same behaviour as in 0.8.9

2.Problem: Adding additional routes
-------------------------------------------------------
kvpnc 0.8.9:
Although additional routes where given in  "Settings: Configure 
KVpnc->Network->Routes", no routes where added anyway the connection worked, 
(Continue reading)

Philipp Sternberg | 5 Dec 2007 18:26
Picon
Picon

Re: Connection Termination Problems using PPTP

Hi all,

ok i now figured out what goes wrong: kvpnc does put up sensful routes 
automatically when using pptp:

That is my routing table before connecting: with .192.168.0.254 as the my 
local router:
192.168.0.0     *               255.255.255.0   U     0      0        0 wlan0
default         192.168.0.254   0.0.0.0         UG    0      0        0 wlan0
--------------------------------------------------------------------
That is the routing table after connecting to a Cisco IP SEC 
and "Replace-Route activated"
vpngw.somewhere.de 192.168.0.254 255.255.255.255 UGH   0      0        0 wlan0
192.168.0.0     *               255.255.255.0   U     0      0        0 wlan0
default         *               0.0.0.0         U     0      0        0 tun0

Allright that means everything which is not adressed to the local network is 
routed via the tunnel-interface !!!except!!! the packages which are send to 
communiacte with the vpn-gateway (of course this must be like this: how 
should the client, (my computer) communicate with the vpn-server otherwise??)
--------------------------------------------------------------------
That is the routing table after connecting using pptp:

192.168.1.2     *               255.255.255.255 UH    0      0        0 ppp0
192.168.0.0     *               255.255.255.0   U     0      0        0 wlan0
default         *               0.0.0.0         U     0      0        0 ppp0

See what goes wrong?: The first results in the client trying to communicate to 
the server via the tunnel-gateway-address (i.e. the adress the vpngateway has 
seen form within the vpn). However how should the client know where the 
(Continue reading)

Philipp Sternberg | 5 Dec 2007 19:13
Picon
Picon

Re: Connection Termination Problems using PPTP

Hi all,

oh i'm sorry in the last post i of course wanted to say:

ok i now figured out what goes wrong: kvpnc does !!!not!!! put up sensful 
routes automatically when using pptp 

Cheers
Phil
Duncan Wild | 6 Dec 2007 06:32
Picon
Picon
Favicon

PPTP question - All traffic?

Hi All,

I have started using kvpnc under SUSE 10.3, and can connect to a cisco
VPN with no worries.  I have trouble with a PPTP though.  I can connect,
however then I have no privileges..  I can't ssh to machines inside the
network, and I can't access intranet.  My system administrator has said
that I need to send all traffic through the VPN, however I am at a loss
as to how to do this.

Your help would be greatly appreciated.

Thanks in advance,
Duncan

--

-- 
***************
Dr Duncan A. Wild
Lecturer
Discipline of Chemistry
The School of Biomedical, Biomolecular & Chemical Sciences
M313, Office 1.28 
The University of Western Australia 
35 Stirling Highway 
Crawley WA 6009

Phone Office 	61 (8) 6488 3178
Fax 		61 (8) 6488 1005
Email		duncan.wild@...
***************
(Continue reading)

Christoph Thielecke | 6 Dec 2007 20:21
Picon
Picon

Re: Connection Termination Problems using PPTP

Hello Phillip,

> oh i'm sorry in the last post i of course wanted to say:
>
> ok i now figured out what goes wrong: kvpnc does !!!not!!! put up sensful
> routes automatically when using pptp
Yes, I read it.

Best regards

Christoph
--

-- 
Linux User Group Wernigerode
http://www.lug-wr.de/
_______________________________________________
Kvpnc-user mailing list
Kvpnc-user@...
https://mail.gna.org/listinfo/kvpnc-user
Christoph Thielecke | 6 Dec 2007 20:28
Picon
Picon

Re: PPTP question - All traffic?

Hello Duncan,

> I have started using kvpnc under SUSE 10.3, and can connect to a cisco
> VPN with no worries.  I have trouble with a PPTP though.  I can connect,
> however then I have no privileges..  I can't ssh to machines inside the
> network, and I can't access intranet.  My system administrator has said
> that I need to send all traffic through the VPN, however I am at a loss
> as to how to do this.
Try svn, it fixes the missing pptp route problem.

Best regards.
--

-- 
Linux User Group Wernigerode
http://www.lug-wr.de/
_______________________________________________
Kvpnc-user mailing list
Kvpnc-user@...
https://mail.gna.org/listinfo/kvpnc-user
Christoph Thielecke | 6 Dec 2007 20:29
Picon
Picon

Re: Connection Termination Problems using PPTP

Hello Philipp,

> See what goes wrong?: The first results in the client trying to communicate
> to the server via the tunnel-gateway-address (i.e. the adress the
> vpngateway has seen form within the vpn). However how should the client
> know where the server is and through which gateway it can be reached?? It
> simply can't. For that it would need the line:
> vpn.gw.de     *               255.255.255.255 UH    0      0        0 wlan0
> instead of
> 192.168.1.2     *               255.255.255.255 UH    0      0        0
> ppp0
>
> It would be nice if this could be fixed!
Fixed in svn.

Best regards

Christoph
--

-- 
Linux User Group Wernigerode
http://www.lug-wr.de/
_______________________________________________
Kvpnc-user mailing list
Kvpnc-user@...
https://mail.gna.org/listinfo/kvpnc-user
Christoph Thielecke | 6 Dec 2007 20:36
Picon
Picon

Announcement

Hello,

kvpnc supports now certificates within the original cisco client. This means:
- certificate file import
- certificate online enrollment
- certificate management (cisco store)

Thanks to rattila which had setup the cisco testbed.

Psk is supported too.

Best regards

Christoph
--

-- 
Linux User Group Wernigerode
http://www.lug-wr.de/
_______________________________________________
Kvpnc-user mailing list
Kvpnc-user@...
https://mail.gna.org/listinfo/kvpnc-user

Gmane