Freebsd +mpd4.

[qpa3ep]

Freebsd +mpd4. При запуске mpd4 выдает:

Multi-link PPP for FreeBSD, by Archie L. Cobbs.
Based on iij-ppp, by Toshiharu OHNO.
mpd: pid 1634, version 4.0b5 (root@freebsd.org 09:57 3-Jan-2007)
Label 'startup' not found

пинг до ya.ru:

PING ya.ru (213.180.204.8): 56 data bytes
36 bytes from 10.144.0.17: Communication prohibited by filter
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 5400 15c4 0 0000 40 01 a4cc 10.144.19.204 213.180.204.8

36 bytes from 10.144.0.17: Communication prohibited by filter
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 5400 15d3 0 0000 40 01 a4bd 10.144.19.204 213.180.204.8

36 bytes from 10.144.0.17: Communication prohibited by filter
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 5400 15dc 0 0000 40 01 a4b4 10.144.19.204 213.180.204.8

/usr/local/etc/mpd4/mpd.conf:

default:
load vpn
vpn:
new -i ng0 vpn vpn
set iface idle 0
set bundle disable multilink
set bundle authname "***"
set bundle password "****"
set iface up-script /usr/local/etc/mpd4/io-up.sh
set iface down-script /usr/local/etc/mpd4/io-down.sh
set link keep-alive 60 180
set link accept chap
set link no pap
set bundle disable compression
set ccp yes mpp-e40
set ccp no mpp-e128
set bundle disable crypt-reqd
set ccp no mpp-stateless
set ipcp no vjcomp
set link mtu 1460

В чем может быть проблема подскажите?

[Igor_I]

10.144.0.17
это что за адрес?

[qpa3ep]

это мой шлюз в локальной сети.
собственно с пингом понятно - не пингуется яндекс потому как впн не поднимается.

[Igor_I]

mpd: pid 1634, version 4.0b5 (root@freebsd.org 09:57 3-Jan-2007)
Весьма интересно, на мой взгляд :)
Ставишь из портов?
В качестве клиента?

[qpa3ep]

Igor_I
да, а что не так?

[Igor_I]

Сидишь под рутом.
Hostname поставил freebsd.org
Часы отстают на месяц
Уже пять дней как 4.0rc1
А почему бы не воспользоваться http://www.freebsd.org/doc/ru_RU.KOI8-R/books/handbook/userppp.html

[qpa3ep]

Да я сижу под рутом, тока поставил ОС и нужно ее настроить, что мне под пользователем сидеть? А в остальном Шерлок Холмс из тебя хреновый =)
з.ы. если по делу нет ничего - то лучше не надо, ок?

[Igor_I]

ок :)

[qpa3ep]

пробую pptpclient
ppp.conf:
corbina:
set authname reill
set authkey *****
set timeout 0
set ifaddr 0 0
disable pap
add default HISADDR
allow users

Подключаюсь pptp vpn.corbina.net corbina
log1:
Feb 5 11:35:56 freerouter ppp[1218]: Phase: Chap Input: CHALLENGE (16 bytes from bras19)
Feb 5 11:35:56 freerouter ppp[1218]: Phase: Chap Output: RESPONSE (reill)
Feb 5 11:35:56 freerouter ppp[1218]: Phase: Chap Input: FAILURE (Authentication failed)
Feb 5 11:35:56 freerouter ppp[1218]: Phase: deflink: Disconnected!
Feb 5 11:35:56 freerouter ppp[1218]: Phase: deflink: Connect time: 2 secs: 205 octets in, 164 octets out
Feb 5 11:35:56 freerouter ppp[1218]: Phase: deflink: 6 packets in, 5 packets out
Feb 5 11:35:56 freerouter ppp[1218]: Phase: total 184 bytes/sec, peak 0 bytes/sec on Mon Feb 5 11:35:54 2007
Feb 5 11:35:56 freerouter ppp[1218]: Phase: deflink: lcp -> closed
Feb 5 11:35:56 freerouter ppp[1218]: Phase: bundle: Dead
Feb 5 11:35:56 freerouter ppp[1218]: Phase: PPP Terminated (normal).
log2:

Feb 5 11:39:22 freerouter ppp[1273]: Phase: Chap Input: CHALLENGE (8 bytes from bras4 )
Feb 5 11:39:22 freerouter ppp[1273]: Phase: Chap Output: RESPONSE (reill)
Feb 5 11:39:22 freerouter ppp[1273]: Phase: Chap Input: FAILURE (E=691 R=0)
Feb 5 11:39:22 freerouter ppp[1273]: Phase: deflink: Disconnected!
Feb 5 11:39:22 freerouter ppp[1273]: Phase: deflink: Connect time: 2 secs: 182 octets in, 221 octets out
Feb 5 11:39:22 freerouter ppp[1273]: Phase: deflink: 6 packets in, 5 packets out
Feb 5 11:39:22 freerouter ppp[1273]: Phase: total 201 bytes/sec, peak 0 bytes/sec on Mon Feb 5 11:39:20 2007
Feb 5 11:39:22 freerouter ppp[1273]: Phase: deflink: lcp -> closed
Feb 5 11:39:22 freerouter ppp[1273]: Phase: bundle: Dead
Feb 5 11:39:22 freerouter ppp[1273]: Phase: PPP Terminated (normal).

[qpa3ep]

поправил конфиги mpd4: nthm выходит вот такая хня... ошика авторизации:
Multi-link PPP for FreeBSD, by Archie L. Cobbs.
Based on iij-ppp, by Toshiharu OHNO.
mpd: pid 1000, version 4.0b5 (root@freebsd.org 09:57 3-Jan-2007)
CONSOLE: listening on 127.0.0.1 5005
[vpncorbina] ppp node is "mpd1000-vpncorbina"
tcpmss node is "mpd1000-mss"
[vpncorbina] using interface ng0
[vpncorbina] LCP: Open event
[vpncorbina] LCP: state change Initial --> Starting
[vpncorbina] LCP: LayerStart
pptp0: connecting to 195.14.38.12 1723
pptp0: connected to 195.14.38.12 1723
pptp0: attached to connection with 195.14.38.12 1723
pptp0-0: outgoing call connected at 64000 bps
[vpncorbina] PPTP call successful
[vpncorbina] link: UP event
[vpncorbina] link: origination is local
[vpncorbina] LCP: Up event
[vpncorbina] LCP: state change Starting --> Req-Sent
[vpncorbina] LCP: SendConfigReq #1
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 36adf350
[vpncorbina] LCP: rec'd Configure Request #1 link 0 (Req-Sent)
AUTHPROTO CHAP MD5
MAGICNUM 586f100d
[vpncorbina] LCP: SendConfigAck #1
AUTHPROTO CHAP MD5
MAGICNUM 586f100d
[vpncorbina] LCP: state change Req-Sent --> Ack-Sent
[vpncorbina] LCP: rec'd Configure Ack #1 link 0 (Ack-Sent)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM 36adf350
[vpncorbina] LCP: state change Ack-Sent --> Opened
[vpncorbina] LCP: auth: peer wants CHAP, I want nothing
[vpncorbina] LCP: LayerUp
[vpncorbina] CHAP: rec'd CHALLENGE #1
Name: "bras12"
Using authname "reill"
[vpncorbina] CHAP: sending RESPONSE len:22
[vpncorbina] CHAP: rec'd FAILURE #1
MESG: Authentication failed
[vpncorbina] LCP: authorization failed
pptp0-0: clearing call
[vpncorbina] LCP: rec'd Terminate Request #2 link 0 (Opened)
[vpncorbina] LCP: state change Opened --> Stopping
[vpncorbina] LCP: SendTerminateAck #2
[vpncorbina] error writing len 8 frame to bypass: Network is down
[vpncorbina] LCP: LayerDown
[vpncorbina] link: DOWN event
[vpncorbina] LCP: Down event
[vpncorbina] LCP: state change Stopping --> Starting
[vpncorbina] pausing 7 seconds before open
pptp0-0: peer call disconnected res=lost carrier err=none
pptp0-0: killing channel
pptp0: closing connection with 195.14.38.12 1723
pptp0: got StopCtrlConnRequest: reason=zero?
pptp0: killing connection with 195.14.38.12 1723
[vpncorbina] pausing 2 seconds before open
pptp0: connecting to 195.14.38.12 1723
pptp0: connected to 195.14.38.12 1723
pptp0: attached to connection with 195.14.38.12 1723
pptp0-0: outgoing call connected at 64000 bps
[vpncorbina] PPTP call successful
[vpncorbina] link: UP event
[vpncorbina] link: origination is local
[vpncorbina] LCP: Up event
[vpncorbina] LCP: state change Starting --> Req-Sent
[vpncorbina] LCP: SendConfigReq #3


startup:
set console port 5005
set console ip 127.0.0.1
set console user XXXXXX XXXXXX
set console open

default:
load vpncorbina

vpncorbina:
new -i ng0 vpncorbina vpncorbina
set auth authname ZZZZZZ
set bundle disable compression
set bundle disable crypt-reqd
set bundle disable multilink
set iface disable on-demand
set iface idle 0
set iface down-script /usr/local/etc/mpd4/vpncorbina-dn.sh
set iface up-script /usr/local/etc/mpd4/vpncorbina-up.sh
set ipcp enable req-pri-dns
set ipcp enable req-sec-dns
set ipcp no vjcomp
set ipcp ranges 0.0.0.0/0 0.0.0.0/0
set link accept chap
set link keep-alive 60 180
set link no pap
open


vpncorbina:
set link type pptp
set pptp peer vpn.corbina.net
set link bandwidth 1000000
set pptp enable originate outcall
set pptp enable always-ack

vpncorbina-dn:
#!/bin/sh

PFCTL=/sbin/pfctl
ROUTE=/sbin/route

pmem=/var/run/vpn.memory

. $pmem

$PFCTL -a mpd/$1 -F all

$ROUTE delete $VpnGW

$ROUTE delete default
$ROUTE add default $OrgGW

exit 0

vpncorbina-up.sh:

#!/bin/sh

PFCTL=/sbin/pfctl
ROUTE=/sbin/route

pffile=/etc/pf.mpd.conf
pmem=/var/run/vpn.memory

OrgGW=`/usr/bin/netstat -rnf inet | /usr/bin/awk '/^default/ { print $2 }'`

umask 033

echo OrgGW=$OrgGW > $pmem
echo VpnGW=$4 >> $pmem

$ROUTE delete $4
$ROUTE add $4 $OrgGW

$ROUTE delete default
$ROUTE add default $4

$PFCTL -a mpd/$1 -Dmpd_if=$1 -f $pffile

exit 0