legion_
04-04-2009, 00:44
доброго времени суток, мне нужна помощь в настройке vpn, я новичок в freebsd
хочу установить фри как десктоп, в будущем буду устанавливать на сервер, вообщем мне нужно создать vpn подключение
мой внутренний ip: 10.10.16.81
шлюз: 10.10.0.1
днс: 195.149.200.230
ip vpn серверва: 91.196.244.250
вообщем что я делаю:
подключаю netgraph в конфиге ядра (хотя где-то читал что это не обязательно)
# grep NETGRAPH /usr/src/sys/conf/NOTES
options NETGRAPH
options NETGRAPH_PPP
options NETGRAPH_PPTPGRE
компилю и устанавливаю
в /etc/resolve.conf добавляю:
nameserver 195.149.200.230
прописываю роуты:
/sbin/route add -host 195.149.200.230 10.10.0.1
/sbin/route add -host 91.196.244.250 10.10.0.1
устанавливаю mpd5, скаченный с фтп freebsd.org pkg_add mpd5...
добавляю в rc.conf:
mpd_enable="YES"
mpd_mode="-b"
пока все ок, днс пингуется
лезу в mpd.conf, из sample'a беру пример
default: load pptp_client
pptp_client:
create bundle static B1
set iface up-script /usr/local/etc/mpd5/if-up.sh
set iface down-script /urs/local/etc/mpd5/if-down.sh
create link static L1 pptp
set link action bundle B1
set auth authname MY_LOGIN
set auth password MY_PASSWORD
set link max-redial 0
set link mtu 1460
set link keep-alive 20 75
set pptp peer vpn.mbit.ru #это 91.196.244.250 на всякий случай написал домен
set pptp disable windowing
open
создаю if-up.sh, if-down.sh исполняемыми chmod +x
содержимое if-up.sh:
#!/bin/sh
gateway_ip="10.10.0.1"
route delete $4
route add $4 $gateway_ip
route add default $4
echo $4 > /tmp/dr
содержимое if-down.sh
#!/bin/sh
gateway_ip="10.10.0.1"
dr='cat /tmp/dr'
route delete $dr
route delete default
rm -f /var/dr
вообщем интерфейс ng0 поднимается
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1460
inet 195.149.202.167 --> 82.137.137.228 netmask 0xffffffff
#195.149.202.167 - мой внешний ip
однако ничего не пингуется
mpd.log:
Apr 4 10:57:20 bsd_desktop mpd: Multi-link PPP daemon for FreeBSD
Apr 4 10:57:20 bsd_desktop mpd:
Apr 4 10:57:20 bsd_desktop mpd: process 1031 started, version 5.1 (root@freebsd.org 18:20 9-Sep-2008)
Apr 4 10:57:20 bsd_desktop mpd: CONSOLE: listening on 127.0.0.1 5005
Apr 4 10:57:20 bsd_desktop mpd: web: listening on 0.0.0.0 5006
Apr 4 10:57:20 bsd_desktop mpd: [B1] Bundle: Interface ng0 created
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: OPEN event
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: Open event
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Initial --> Starting
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: LayerStart
Apr 4 10:57:20 bsd_desktop mpd: [L1] PPTP call successful
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: UP event
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: origination is local
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: Up event
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Starting --> Req-Sent
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: SendConfigReq #1
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0x000a0000
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM cf323781
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: rec'd Configure Request #1 (Req-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0xffffffff
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM 54957460
Apr 4 10:57:20 bsd_desktop mpd: [L1] AUTHPROTO CHAP MD5
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: SendConfigAck #1
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0xffffffff
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM 54957460
Apr 4 10:57:20 bsd_desktop mpd: [L1] AUTHPROTO CHAP MD5
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Req-Sent --> Ack-Sent
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: rec'd Configure Ack #1 (Ack-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0x000a0000
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM cf323781
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Ack-Sent --> Opened
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: auth: peer wants CHAP, I want nothing
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: LayerUp
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: rec'd CHALLENGE #1 len: 43
Apr 4 10:57:20 bsd_desktop mpd: [L1] Name: ""
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: Using authname "MY_LOGIN"
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: sending RESPONSE #1 len: 30
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: rec'd SUCCESS #1 len: 13
Apr 4 10:57:20 bsd_desktop mpd: [L1] MESG: Welcome!!
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: authorization successful
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: Matched action 'bundle "B1" ""'
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: Join bundle "B1"
Apr 4 10:57:20 bsd_desktop mpd: [B1] Bundle: Status update: up 1 link, total bandwidth 64000 bps
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: Open event
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: state change Initial --> Starting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: LayerStart
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: Up event
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: state change Starting --> Req-Sent
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigReq #1
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 10.10.16.81
Apr 4 10:57:20 bsd_desktop mpd: [B1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 4 10:57:20 bsd_desktop mpd: [L1] rec'd unexpected protocol CCP, rejecting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: rec'd Configure Request #1 (Req-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 82.137.137.228
Apr 4 10:57:20 bsd_desktop mpd: [B1] 82.137.137.228 is OK
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigAck #1
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 82.137.137.228
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: state change Req-Sent --> Ack-Sent
Apr 4 10:57:20 bsd_desktop mpd: [L1] rec'd unexpected protocol IPV6CP, rejecting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: rec'd Configure Reject #1 (Ack-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [B1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigReq #2
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 10.10.16.81
Apr 4 10:57:20 bsd_desktop mpd: [L1] rec'd unexpected protocol IPV6CP, rejecting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: rec'd Configure Nak #2 (Ack-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 195.149.202.167
Apr 4 10:57:20 bsd_desktop mpd: [B1] 195.149.202.167 is OK
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigReq #3
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 195.149.202.167
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPCP: rec'd Configure Ack #3 (Ack-Sent)
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPADDR 195.149.202.167
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPCP: state change Ack-Sent --> Opened
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPCP: LayerUp
Apr 4 10:57:21 bsd_desktop mpd: [B1] 195.149.202.167 -> 82.137.137.228
Apr 4 10:57:21 bsd_desktop mpd: [B1] IFACE: Up event
Apr 4 10:57:23 bsd_desktop mpd: [L1] rec'd unexpected protocol IPV6CP, rejecting
заранее спасибо
хочу установить фри как десктоп, в будущем буду устанавливать на сервер, вообщем мне нужно создать vpn подключение
мой внутренний ip: 10.10.16.81
шлюз: 10.10.0.1
днс: 195.149.200.230
ip vpn серверва: 91.196.244.250
вообщем что я делаю:
подключаю netgraph в конфиге ядра (хотя где-то читал что это не обязательно)
# grep NETGRAPH /usr/src/sys/conf/NOTES
options NETGRAPH
options NETGRAPH_PPP
options NETGRAPH_PPTPGRE
компилю и устанавливаю
в /etc/resolve.conf добавляю:
nameserver 195.149.200.230
прописываю роуты:
/sbin/route add -host 195.149.200.230 10.10.0.1
/sbin/route add -host 91.196.244.250 10.10.0.1
устанавливаю mpd5, скаченный с фтп freebsd.org pkg_add mpd5...
добавляю в rc.conf:
mpd_enable="YES"
mpd_mode="-b"
пока все ок, днс пингуется
лезу в mpd.conf, из sample'a беру пример
default: load pptp_client
pptp_client:
create bundle static B1
set iface up-script /usr/local/etc/mpd5/if-up.sh
set iface down-script /urs/local/etc/mpd5/if-down.sh
create link static L1 pptp
set link action bundle B1
set auth authname MY_LOGIN
set auth password MY_PASSWORD
set link max-redial 0
set link mtu 1460
set link keep-alive 20 75
set pptp peer vpn.mbit.ru #это 91.196.244.250 на всякий случай написал домен
set pptp disable windowing
open
создаю if-up.sh, if-down.sh исполняемыми chmod +x
содержимое if-up.sh:
#!/bin/sh
gateway_ip="10.10.0.1"
route delete $4
route add $4 $gateway_ip
route add default $4
echo $4 > /tmp/dr
содержимое if-down.sh
#!/bin/sh
gateway_ip="10.10.0.1"
dr='cat /tmp/dr'
route delete $dr
route delete default
rm -f /var/dr
вообщем интерфейс ng0 поднимается
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1460
inet 195.149.202.167 --> 82.137.137.228 netmask 0xffffffff
#195.149.202.167 - мой внешний ip
однако ничего не пингуется
mpd.log:
Apr 4 10:57:20 bsd_desktop mpd: Multi-link PPP daemon for FreeBSD
Apr 4 10:57:20 bsd_desktop mpd:
Apr 4 10:57:20 bsd_desktop mpd: process 1031 started, version 5.1 (root@freebsd.org 18:20 9-Sep-2008)
Apr 4 10:57:20 bsd_desktop mpd: CONSOLE: listening on 127.0.0.1 5005
Apr 4 10:57:20 bsd_desktop mpd: web: listening on 0.0.0.0 5006
Apr 4 10:57:20 bsd_desktop mpd: [B1] Bundle: Interface ng0 created
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: OPEN event
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: Open event
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Initial --> Starting
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: LayerStart
Apr 4 10:57:20 bsd_desktop mpd: [L1] PPTP call successful
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: UP event
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: origination is local
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: Up event
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Starting --> Req-Sent
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: SendConfigReq #1
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0x000a0000
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM cf323781
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: rec'd Configure Request #1 (Req-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0xffffffff
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM 54957460
Apr 4 10:57:20 bsd_desktop mpd: [L1] AUTHPROTO CHAP MD5
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: SendConfigAck #1
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0xffffffff
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM 54957460
Apr 4 10:57:20 bsd_desktop mpd: [L1] AUTHPROTO CHAP MD5
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Req-Sent --> Ack-Sent
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: rec'd Configure Ack #1 (Ack-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACFCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] PROTOCOMP
Apr 4 10:57:20 bsd_desktop mpd: [L1] ACCMAP 0x000a0000
Apr 4 10:57:20 bsd_desktop mpd: [L1] MRU 1500
Apr 4 10:57:20 bsd_desktop mpd: [L1] MAGICNUM cf323781
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: state change Ack-Sent --> Opened
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: auth: peer wants CHAP, I want nothing
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: LayerUp
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: rec'd CHALLENGE #1 len: 43
Apr 4 10:57:20 bsd_desktop mpd: [L1] Name: ""
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: Using authname "MY_LOGIN"
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: sending RESPONSE #1 len: 30
Apr 4 10:57:20 bsd_desktop mpd: [L1] CHAP: rec'd SUCCESS #1 len: 13
Apr 4 10:57:20 bsd_desktop mpd: [L1] MESG: Welcome!!
Apr 4 10:57:20 bsd_desktop mpd: [L1] LCP: authorization successful
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: Matched action 'bundle "B1" ""'
Apr 4 10:57:20 bsd_desktop mpd: [L1] Link: Join bundle "B1"
Apr 4 10:57:20 bsd_desktop mpd: [B1] Bundle: Status update: up 1 link, total bandwidth 64000 bps
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: Open event
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: state change Initial --> Starting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: LayerStart
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: Up event
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: state change Starting --> Req-Sent
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigReq #1
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 10.10.16.81
Apr 4 10:57:20 bsd_desktop mpd: [B1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 4 10:57:20 bsd_desktop mpd: [L1] rec'd unexpected protocol CCP, rejecting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: rec'd Configure Request #1 (Req-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 82.137.137.228
Apr 4 10:57:20 bsd_desktop mpd: [B1] 82.137.137.228 is OK
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigAck #1
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 82.137.137.228
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: state change Req-Sent --> Ack-Sent
Apr 4 10:57:20 bsd_desktop mpd: [L1] rec'd unexpected protocol IPV6CP, rejecting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: rec'd Configure Reject #1 (Ack-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [B1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigReq #2
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 10.10.16.81
Apr 4 10:57:20 bsd_desktop mpd: [L1] rec'd unexpected protocol IPV6CP, rejecting
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: rec'd Configure Nak #2 (Ack-Sent)
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 195.149.202.167
Apr 4 10:57:20 bsd_desktop mpd: [B1] 195.149.202.167 is OK
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPCP: SendConfigReq #3
Apr 4 10:57:20 bsd_desktop mpd: [B1] IPADDR 195.149.202.167
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPCP: rec'd Configure Ack #3 (Ack-Sent)
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPADDR 195.149.202.167
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPCP: state change Ack-Sent --> Opened
Apr 4 10:57:21 bsd_desktop mpd: [B1] IPCP: LayerUp
Apr 4 10:57:21 bsd_desktop mpd: [B1] 195.149.202.167 -> 82.137.137.228
Apr 4 10:57:21 bsd_desktop mpd: [B1] IFACE: Up event
Apr 4 10:57:23 bsd_desktop mpd: [L1] rec'd unexpected protocol IPV6CP, rejecting
заранее спасибо