maruscya
Guru
Joined: 13 Aug 2004
Posts: 507
|
 Posted: Mon Jun 16, 2008 4:09 pm Post subject: VPN pptp : Fortigate, Linux |
 |
|
Ciao a tutti
Ho un problema con PPTP, vorrei collegarmi ad un firewall fortigate con la mia postazione linux per accedere in vpn ad alcune reti remote dei clienti. Se uso windows tutto funziona bene, in pochi secondi mi connetto e lavoro con le sedi remote.
Vorre fare la stessa cosa con linux, ma dopo che avviene la connesione non riesco a raggiungere i server nella rete remota. Qui di seguito vi metto le impostazioni che uso.
| Code: |
cat /etc/ppp/peers/test-pptp
pty "pptp **.**.**.** --nolaunchpppd"
name maruscya
require-mschap-v2
remotename test-pptp
file /etc/ppp/options
ipparam test-pptp
|
Ecco il file /etc/ppp/options
| Code: |
maruscya@ngsrv1 ~ $ cat /etc/ppp/options
lock
noauth
nobsdcomp
nodeflate
|
Il kernel e' stato ricompilato attivando tutti i moduli come da how-to trovato su gentoo-wiki.
questo e' il log di cosa esce quando mi collego al firewall per creare la vpn
| Code: |
Jun 16 18:05:00 ngsrv1 pptp[11083]: anon log[main:pptp.c:272]: The synchronous pptp option is NOT activated
Jun 16 18:05:00 ngsrv1 pptp[11086]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jun 16 18:05:00 ngsrv1 pptp[11086]: anon log[ctrlp_disp:pptp_ctrl.c:738]: Received Start Control Connection Reply
Jun 16 18:05:00 ngsrv1 pptp[11086]: anon log[ctrlp_disp:pptp_ctrl.c:772]: Client connection established.
Jun 16 18:05:01 ngsrv1 pptp[11086]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jun 16 18:05:01 ngsrv1 pptp[11086]: anon log[ctrlp_disp:pptp_ctrl.c:857]: Received Outgoing Call Reply.
Jun 16 18:05:01 ngsrv1 pptp[11086]: anon log[ctrlp_disp:pptp_ctrl.c:896]: Outgoing call established (call ID 0, peer's call ID 62163).
Jun 16 18:05:01 ngsrv1 pppd[11088]: pppd 2.4.4 started by root, uid 0
Jun 16 18:05:01 ngsrv1 pppd[11088]: Using interface ppp0
Jun 16 18:05:01 ngsrv1 pppd[11088]: Connect: ppp0 <--> /dev/pts/4
Jun 16 18:05:03 ngsrv1 pppd[11088]: local IP address 192.168.97.120
Jun 16 18:05:03 ngsrv1 pppd[11088]: remote IP address **.**.**.**
Jun 16 18:05:33 ngsrv1 pppd[11088]: CCP: timeout sending Config-Requests
Jun 16 18:07:01 ngsrv1 pptp[11086]: anon log[pptp_handle_timer:pptp_ctrl.c:1049]: closing control connection due to missing echo reply
Jun 16 18:07:01 ngsrv1 pptp[11086]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Jun 16 18:07:01 ngsrv1 pptp[11086]: anon log[pptp_conn_close:pptp_ctrl.c:430]: Closing PPTP connection
Jun 16 18:07:01 ngsrv1 pptp[11086]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 3 'Stop-Control-Connection-Request'
Jun 16 18:07:01 ngsrv1 pptp[11086]: anon log[call_callback:pptp_callmgr.c:78]: Closing connection (call state)
|
mentre questo e' l'output del comando pptp-command
| Code: |
ngsrv1 ~ # pptp-command start Fotir-test
Route: add -net 192.168.97.0 netmask 255.255.255.0 dev ppp0 added
All routes added.
Tunnel Fotir-test is active on ppp0. IP Address: 192.168.97.120
|
A questo punto facendo un ping banale non ottengo riposta dal server nella rete remota. Credo che il problema sia dovuto ad un'errore del routing dei pacchetti. Nella tabella di routing dovrebbe comparire anche l'instradamento verso la nuova rete... ma non c'e' nulla... 
| Code: |
**.**.**.** * 255.255.255.255 UH 0 0 0 ppp0
192.168.97.0 * 255.255.255.0 U 0 0 0 ppp0
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
192.168.90.0 * 255.255.255.0 U 0 0 0 vmnet8
link-local * 255.255.0.0 U 0 0 0 eth0
loopback * 255.0.0.0 U 0 0 0 lo
default 192.168.1.252 0.0.0.0 UG 0 0 0 eth0
|
dopo la connessione pptp dovrebbe apparire nell routing il risultato del comando
| Code: |
route add -net 192.168.97.0 netmask 255.255.255.0 dev ppp0
|
Non so piu' dove sbattere la testa... spero che qualcuno riesca a darmi qualche consiglio in merito |
|
Forum italiano (Italian) 
