Re: net/mpd4: Unable to pass pass traffic as pptp client



232487741
Nikos Vassiliadis wrote:
pptp0: connecting to 208.206.3.5 1723
[vpn] IPCP: LayerUp
172.30.29.9 -> 208.206.3.5

ifconfig
[root@bofh tom]# ifconfig ng0
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1396
inet 172.30.29.9 --> 208.206.3.5 netmask 0xffffffff

It seems that your external peer address is the same with the internal
peer address. You connect to pptp-server-ip through your linksys and
then say that pptp-server-ip is reachable through the tunnel. So it
routes everything destined for pptp-server-ip through the tunnel. I
think that such configuration is valid for other operating systems.
I don't know if you can work-around the problem on your own, maybe
you have to contact the VPN concentrator's admin. Perhaps you can
modify the routing table (the external peer address should be reachable
as it was, though linksys) and invent some peer address using
"ifconfig ng0 your_address 10.0.0.1 netmask 0xffffffff".
But it's not nice...

Can you convice the concentrator's administrator to use another
address for his internal side?

It would be a better way. But if it is not possible you could use 'ipfw fwd' rule to forward all PPTP's GRE and controling TCP packets via physical interface instead of tunnel.

--
Alexander Motin
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Error 792 - The L2TP connection attempt failed because security negociation timed out
    ... I recently set up a VPN access for my company employees. ... connection attempt failed because security negociation timed out". ... Peer Identity: ... So it seems that the VPN server does not send a correct computer certificate ...
    (microsoft.public.isaserver)
  • Re: VPN - Client LAN and company LAN on same address schema
    ... If you don't want to change the company IP range, your option is to setup peer to peer routing, but you need to do that one by one. ... Solution for peer to peer VPN using the same IPYou may setup a different IP range or subnet for peer to peer VPN. ... Of course, most home users have the 192 network as their default as well, so ...
    (microsoft.public.windows.server.networking)
  • Re: Subnet routing & VPN
    ... The only solution is create a peer to peer routing. ... Setup IPSec VPN - VPN using same ip in the different subnet. ... You may setup a different IP range or subnet for peer to peer VPN. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Create VPN connection
    ... I recently saw the w3.org proposal on peer to peer for the next generation ... who only have OS and a browser to exchange data, ... and answering on VPN should not preclude you from investigating on your own. ... You see nature stops man from exploiting the grounds at some point. ...
    (microsoft.public.scripting.wsh)
  • pix nat questions
    ... crypto map * 10 set peer * ... crypto map * 10 set transform-set 3des ... #using an acl that just tests tunnel from a host on net A, ... and i'm not clear on whether i should be using a nat statement to policy map the vpn traffic or a static. ...
    (comp.dcom.sys.cisco)