YurArm писал(а):
Модем в режиме шлюза PPP over Ethernet (PPPoE).
В сетке несколько компьютеров используют данный шлюз.
Невозможно подключение компьютером к одному VPN (pptp)-серверу.
"Установка связи..." проходит моментально,
и стопорится на "Проверке имени и пароля". Затем через секунд 30 выскакивает ошибка № 619.
У этого же провайдера, если с абсолютно такими же настройками беру модем DSl-2500U/BRU/D, то все нормально. Через не-ADSL провайдера тоже всегда без проблем.
К другому VPN-серверу компьютер без проблем подключается.
Стоит добавить клиент-компьютер в DMZ - и все работает, но в сетке есть сервер - ему нужен dmz. Эта затычка не подходит.
Вобщем, В ИТОГЕ, этот модем, с его прошивкой не хочет vpn пропускать. (GRE пакеты или еще что там, неважно, главное не работает)
Офиц. представители, порекомендуйте, пожалуйста, настройки или прошивку.
Логи VPN-сервера: процесс PPPD:
May 17 01:01:29 gw pptpd[4339]: CTRL: Client IP_клиента control connection started
May 17 01:01:29 gw pptpd[4339]: CTRL: Starting call (launching pppd, opening GRE)
May 17 01:01:29 gw pppd[4340]: pppd 2.4.3 started by root, uid 0
May 17 01:01:29 gw pppd[4340]: Using interface ppp0
May 17 01:01:29 gw pppd[4340]: Connect: ppp0 <--> /dev/pts/1
May 17 01:01:59 gw pppd[4340]: Connection terminated.
May 17 01:01:59 gw pppd[4340]: Using interface ppp0
May 17 01:01:59 gw pppd[4340]: Connect: ppp0 <--> /dev/pts/1
May 17 01:01:59 gw pppd[4340]: Exit.
May 17 01:01:59 gw pptpd[4339]: CTRL: Client IP_клиента control connection finished
пакеты:
May 17 01:01:29 gw pptpd[4339]: MGR: Launching /usr/local/sbin/pptpctrl to handle client
May 17 01:01:29 gw pptpd[4339]: CTRL: local address = 192.168.0.1
May 17 01:01:29 gw pptpd[4339]: CTRL: remote address = 192.168.0.200
May 17 01:01:29 gw pptpd[4339]: CTRL: pppd options file = /etc/ppp/options.pptpd
May 17 01:01:29 gw pptpd[4339]: CTRL: Received PPTP Control Message (type: 1)
May 17 01:01:29 gw pptpd[4339]: CTRL: Made a START CTRL CONN RPLY packet
May 17 01:01:29 gw pptpd[4339]: CTRL: I wrote 156 bytes to the client.
May 17 01:01:29 gw pptpd[4339]: CTRL: Sent packet to client
May 17 01:01:29 gw pptpd[4339]: CTRL: Received PPTP Control Message (type: 7)
May 17 01:01:29 gw pptpd[4339]: CTRL: Set parameters to 100000000 maxbps, 64 window size
May 17 01:01:29 gw pptpd[4339]: CTRL: Made a OUT CALL RPLY packet
May 17 01:01:29 gw pptpd[4339]: CTRL: pty_fd = 6
May 17 01:01:29 gw pptpd[4339]: CTRL: tty_fd = 7
May 17 01:01:29 gw pptpd[4340]: CTRL (PPPD Launcher): program binary = /usr/local/sbin/pppd
May 17 01:01:29 gw pptpd[4340]: CTRL (PPPD Launcher): local address = 192.168.0.1
May 17 01:01:29 gw pptpd[4340]: CTRL (PPPD Launcher): remote address = 192.168.0.200
May 17 01:01:29 gw pppd[4340]: using channel 124
May 17 01:01:29 gw pppd[4340]: sent [LCP ConfReq id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ca27308> <pcomp> <accomp>]
May 17 01:01:29 gw pptpd[4339]: CTRL: I wrote 32 bytes to the client.
May 17 01:01:29 gw pptpd[4339]: CTRL: Sent packet to client
May 17 01:01:29 gw pptpd[4339]: CTRL: Received PPTP Control Message (type: 15)
May 17 01:01:29 gw pptpd[4339]: CTRL: Got a SET LINK INFO packet with standard ACCMs
May 17 01:01:32 gw pppd[4340]: sent [LCP ConfReq id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ca27308> <pcomp> <accomp>]
May 17 01:01:47 gw last message repeated 5 times
May 17 01:01:47 gw pptpd[4333]: CTRL: Received PPTP Control Message (type: 5)
May 17 01:01:47 gw pptpd[4333]: CTRL: Made a ECHO RPLY packet
May 17 01:01:47 gw pptpd[4333]: CTRL: I wrote 20 bytes to the client.
May 17 01:01:47 gw pptpd[4333]: CTRL: Sent packet to client
May 17 01:01:50 gw pppd[4340]: sent [LCP ConfReq id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ca27308> <pcomp> <accomp>]
May 17 01:01:51 gw pptpd[4333]: GRE: accepting packet #53
May 17 01:01:53 gw pppd[4340]: sent [LCP ConfReq id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ca27308> <pcomp> <accomp>]
May 17 01:01:56 gw pppd[4340]: sent [LCP ConfReq id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ca27308> <pcomp> <accomp>]
May 17 01:01:59 gw pppd[4340]: using channel 125
May 17 01:01:59 gw pppd[4340]: sent [LCP ConfReq id=0x2 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x17da4690> <pcomp> <accomp>]
May 17 01:01:59 gw pptpd[4339]: CTRL: Reaping child PPP[4340]
May 17 01:01:59 gw pptpd[4339]: CTRL: Exiting now
May 17 01:01:59 gw pptpd[288]: MGR: Reaped child 4339
логи модема:
в логе модема не добавляется ни одной строчки при попытках подключения к vpn.
Логи VPN-сервера при удачном подключении с другим модемом:
May 17 00:55:15 gw pptpd[4328]: MGR: Launching /usr/local/sbin/pptpctrl to handle client
May 17 00:55:15 gw pptpd[4328]: CTRL: local address = 192.168.0.1
May 17 00:55:15 gw pptpd[4328]: CTRL: remote address = 192.168.0.200
May 17 00:55:15 gw pptpd[4328]: CTRL: pppd options file = /etc/ppp/options.pptpd
May 17 00:55:15 gw pptpd[4328]: CTRL: Received PPTP Control Message (type: 1)
May 17 00:55:15 gw pptpd[4328]: CTRL: Made a START CTRL CONN RPLY packet
May 17 00:55:15 gw pptpd[4328]: CTRL: I wrote 156 bytes to the client.
May 17 00:55:15 gw pptpd[4328]: CTRL: Sent packet to client
May 17 00:55:15 gw pptpd[4328]: CTRL: Received PPTP Control Message (type: 7)
May 17 00:55:15 gw pptpd[4328]: CTRL: Set parameters to 100000000 maxbps, 64 window size
May 17 00:55:15 gw pptpd[4328]: CTRL: Made a OUT CALL RPLY packet
May 17 00:55:15 gw pptpd[4328]: CTRL: pty_fd = 6
May 17 00:55:15 gw pptpd[4328]: CTRL: tty_fd = 7
May 17 00:55:16 gw pptpd[4329]: CTRL (PPPD Launcher): program binary = /usr/local/sbin/pppd
May 17 00:55:16 gw pptpd[4329]: CTRL (PPPD Launcher): local address = 192.168.0.1
May 17 00:55:16 gw pptpd[4329]: CTRL (PPPD Launcher): remote address = 192.168.0.200
May 17 00:55:16 gw pppd[4329]: using channel 122
May 17 00:55:16 gw pppd[4329]: sent [LCP ConfReq id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ec7611e> <pcomp> <accomp>]
May 17 00:55:16 gw pptpd[4328]: CTRL: I wrote 32 bytes to the client.
May 17 00:55:16 gw pptpd[4328]: CTRL: Sent packet to client
May 17 00:55:16 gw pptpd[4328]: CTRL: Received PPTP Control Message (type: 15)
May 17 00:55:16 gw pptpd[4328]: CTRL: Got a SET LINK INFO packet with standard ACCMs
May 17 00:55:18 gw pptpd[4328]: GRE: accepting packet #1
May 17 00:55:18 gw pppd[4329]: rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x436c5206> <pcomp> <accomp> <callback CBCP>]
May 17 00:55:18 gw pppd[4329]: sent [LCP ConfRej id=0x1 <callback CBCP>]
May 17 00:55:18 gw pptpd[4328]: GRE: accepting packet #2
May 17 00:55:18 gw pppd[4329]: rcvd [LCP ConfReq id=0x2 <mru 1400> <magic 0x436c5206> <pcomp> <accomp>]
May 17 00:55:18 gw pppd[4329]: sent [LCP ConfAck id=0x2 <mru 1400> <magic 0x436c5206> <pcomp> <accomp>]
May 17 00:55:19 gw pppd[4329]: sent [LCP ConfReq id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ec7611e> <pcomp> <accomp>]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #3
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #4
May 17 00:55:19 gw pppd[4329]: rcvd [LCP ConfAck id=0x1 <mru 1490> <asyncmap 0x0> <auth chap MS-v2> <magic 0x8ec7611e> <pcomp> <accomp>]
May 17 00:55:19 gw pppd[4329]: sent [LCP EchoReq id=0x0 magic=0x8ec7611e]
May 17 00:55:19 gw pppd[4329]: sent [CHAP Challenge id=0xc0 <3a4d36dc224874a8b50661aca885bc69>, name = "pptpd"]
May 17 00:55:19 gw pptpd[4328]: CTRL: Received PPTP Control Message (type: 15)
May 17 00:55:19 gw pppd[4329]: rcvd [LCP code=0xc id=0x3 какойтокод]
May 17 00:55:19 gw pppd[4329]: sent [LCP CodeRej id=0x2 какойтокод]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #5
May 17 00:55:19 gw pppd[4329]: rcvd [LCP code=0xc id=0x4 какойтокод]
May 17 00:55:19 gw pppd[4329]: sent [LCP CodeRej id=0x3 какойтокод]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #6
May 17 00:55:19 gw pppd[4329]: rcvd [LCP EchoRep id=0x0 magic=0x436c5206]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #7
May 17 00:55:19 gw pppd[4329]: rcvd [CHAP Response id=0xc0 <пароль>, name = "логин"]
May 17 00:55:19 gw pppd[4329]: sent [CHAP Success id=0xc0 "S=хэш M=Access granted"]
May 17 00:55:19 gw pppd[4329]: sent [CCP ConfReq id=0x1 <mppe -H +M +S +L -D +C>]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #8
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #9
May 17 00:55:19 gw pppd[4329]: rcvd [CCP ConfReq id=0x5 <mppe +H +M +S +L -D +C>]
May 17 00:55:19 gw pppd[4329]: sent [CCP ConfNak id=0x5 <mppe -H -M +S -L -D +C>]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #10
May 17 00:55:19 gw pppd[4329]: rcvd [IPCP ConfReq id=0x6 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
May 17 00:55:19 gw pppd[4329]: sent [IPCP TermAck id=0x6]
May 17 00:55:19 gw pppd[4329]: rcvd [CCP ConfNak id=0x1 <mppe -H -M +S -L -D +C>]
May 17 00:55:19 gw pppd[4329]: sent [CCP ConfReq id=0x2 <mppe -H -M +S -L -D +C>]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #11
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #12
May 17 00:55:19 gw pppd[4329]: rcvd [CCP ConfReq id=0x7 <mppe -H -M +S -L -D +C>]
May 17 00:55:19 gw pppd[4329]: sent [CCP ConfAck id=0x7 <mppe -H -M +S -L -D +C>]
May 17 00:55:19 gw pppd[4329]: rcvd [CCP ConfAck id=0x2 <mppe -H -M +S -L -D +C>]
May 17 00:55:19 gw pppd[4329]: sent [IPCP ConfReq id=0x1 <addr 192.168.0.1>]
May 17 00:55:19 gw pptpd[4328]: GRE: accepting packet #13
May 17 00:55:19 gw pppd[4329]: rcvd [IPCP ConfAck id=0x1 <addr 192.168.0.1>]
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #14
May 17 00:55:22 gw pppd[4329]: rcvd [IPCP ConfReq id=0x8 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
May 17 00:55:22 gw pppd[4329]: sent [IPCP ConfRej id=0x8 <ms-wins 0.0.0.0> <ms-wins 0.0.0.0>]
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #15
May 17 00:55:22 gw pppd[4329]: rcvd [IPCP ConfReq id=0x9 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
May 17 00:55:22 gw pppd[4329]: sent [IPCP ConfNak id=0x9 <addr 192.168.0.200> <ms-dns1 192.168.1.250> <ms-dns3 192.168.1.254>]
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #16
May 17 00:55:22 gw pppd[4329]: rcvd [IPCP ConfReq id=0xa <addr 192.168.0.200> <ms-dns1 192.168.1.250> <ms-dns3 192.168.1.254>]
May 17 00:55:22 gw pppd[4329]: sent [IPCP ConfAck id=0xa <addr 192.168.0.200> <ms-dns1 192.168.1.250> <ms-dns3 192.168.1.254>]
May 17 00:55:22 gw pppd[4329]: Script /etc/ppp/ip-up started (pid 4331)
May 17 00:55:22 gw pppd[4329]: Script /etc/ppp/ip-up finished (pid 4331), status = 0x7
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #17
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #18
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #19
May 17 00:55:22 gw kernel: IPT FORWARD packet died: IN=ppp0 OUT=eth0 SRC=192.168.0.200 DST=10.226.14.28 LEN=351 TOS=0x00 PREC=0x00 TTL=127 ID=29776 PROTO=UDP SPT=41152 DPT=12214 LEN=331
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #20
May 17 00:55:22 gw kernel: IPT FORWARD packet died: IN=ppp0 OUT=eth0 SRC=192.168.0.200 DST=10.226.14.28 LEN=351 TOS=0x00 PREC=0x00 TTL=127 ID=29777 PROTO=UDP SPT=41152 DPT=12214 LEN=331
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #21
May 17 00:55:22 gw kernel: IPT FORWARD packet died: IN=ppp0 OUT=eth0 SRC=192.168.0.200 DST=10.226.14.28 LEN=351 TOS=0x00 PREC=0x00 TTL=127 ID=29778 PROTO=UDP SPT=41152 DPT=12214 LEN=331
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #22
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #23
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #24
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #25
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #26
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #27
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #28
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #29
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #30
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #31
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #32
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #33
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #34
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #35
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #36
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #37
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #38
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #39
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #40
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #41
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #42
May 17 00:55:22 gw pptpd[4328]: GRE: accepting packet #43
Далее идет нормальный обмен GRE-пакетами
на коробке написано: 2500U/BTT/C
на самом модеме просто 2500U, H/W: C1, F/W: TT_1.01
через http страничку еще и Bootloader (CFE) Version: before 1.0.37-5c1.d20k_rc2
PPTP-клиент находится в LAN-сети, верно?
Прошивка TT_1.01 имеет предварительно созданный WAN-интерфейс для работы в сети провайдера (по умолчанию).
Также отличие в наличии клиента TR-069. Если он Вам не нужен, можете смело использовать последнюю версию прошивки.