Networking help

[sdbardwick]

Originally Posted by Prime95

I'm up and running (I hope). The problem was that whenever I did "ssh my-fixed-ip" the DSL modem detected this as a loopback and did not perform port forwarding. When I logged into a machine outside my network and ssh'ed back in, all was well.

Much time wasted on that little gotcha!

Yeah, if I'd had more (any) sleep before posting, I would have remembered to verify that you were attempting access from "outside"; back when I had the tempermental (buggy) router I was using a 56K modem to connect to an outside ISP to verify that the port-forwarding actually worked.

[xilman]

Originally Posted by Prime95

I'm up and running (I hope). The problem was that whenever I did "ssh my-fixed-ip" the DSL modem detected this as a loopback and did not perform port forwarding. When I logged into a machine outside my network and ssh'ed back in, all was well.

Much time wasted on that little gotcha!

Been there, done that.

Really frustrating, that one.

Paul

[Prime95]

Does anyone have Linux pptpd knowledge? I followed the linux howtos and configured the router to forward 1723 and GRE. Now that I'm away I cannot create a VPN connection from my Mac. The log files are below. It seems the request is getting to the server and then it somehow doesn't work. Google hasn't given me any good clues on how to proceed.

It is documented that my away IP address cannot be on the same subnet as the VPN server. My Mac address is 192.168.1.x, my home DSL modem is on 192.168.2.x and the home VPN server is 192.168.0.x, so I think I'm OK on that front.

Any help would be appreciated.

May 20 00:01:37 george-i7-860 pppd[2254]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
May 20 00:01:37 george-i7-860 pppd[2254]: pptpd-logwtmp: $Version$
May 20 00:01:37 george-i7-860 pppd[2254]: pppd options in effect:
May 20 00:01:37 george-i7-860 pppd[2254]: debug#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: dump#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: plugin /usr/lib/pptpd/pptpd-logwtmp.so#011#011# (from command line)
May 20 00:01:37 george-i7-860 pppd[2254]: require-mschap-v2#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: refuse-pap#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: refuse-chap#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: refuse-mschap#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: name pptpd#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: pptpd-original-ip 71.12.219.203#011#011# (from command line)
May 20 00:01:37 george-i7-860 pppd[2254]: 115200#011#011# (from command line)
May 20 00:01:37 george-i7-860 pppd[2254]: lock#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: crtscts#011#011# (from /etc/ppp/options)
May 20 00:01:37 george-i7-860 pppd[2254]: local#011#011# (from command line)
May 20 00:01:37 george-i7-860 pppd[2254]: asyncmap 0#011#011# (from /etc/ppp/options)
May 20 00:01:37 george-i7-860 pppd[2254]: lcp-echo-failure 4#011#011# (from /etc/ppp/options)
May 20 00:01:37 george-i7-860 pppd[2254]: lcp-echo-interval 30#011#011# (from /etc/ppp/options)
May 20 00:01:37 george-i7-860 pppd[2254]: hide-password#011#011# (from /etc/ppp/options)
May 20 00:01:37 george-i7-860 pppd[2254]: ipparam 71.12.219.203#011#011# (from command line)
May 20 00:01:37 george-i7-860 pppd[2254]: nodefaultroute#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: proxyarp#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: 192.168.0.7:192.168.0.210#011#011# (from command line)
May 20 00:01:37 george-i7-860 pppd[2254]: nobsdcomp#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: require-mppe-128#011#011# (from /etc/ppp/pptpd-options)
May 20 00:01:37 george-i7-860 pppd[2254]: noipx#011#011# (from /etc/ppp/options)
May 20 00:01:37 george-i7-860 pppd[2254]: pppd 2.4.5 started by root, uid 0
May 20 00:01:37 george-i7-860 pppd[2254]: Using interface ppp0
May 20 00:01:37 george-i7-860 pppd[2254]: Connect: ppp0 <--> /dev/pts/1
May 20 00:02:07 george-i7-860 pppd[2254]: LCP: timeout sending Config-Requests
May 20 00:02:07 george-i7-860 pppd[2254]: Connection terminated.

[science_man_88]

Originally Posted by Prime95

When out of town, is it possible to have my laptop connect to and route my Internet traffic through my home LAN?

Why do this? When out of town, I'd like to send instructions to the PrimeNet server which is firewalled so that only my home static IP can get in. I'd also like to telnet/VNC to the machines on my home LAN.

My home setup is a DSL modem supporting a static IP. That is connected to a router. My machines connect to the router.

though I don't know how to set it up something that came to mind was a firewall setting to let a specific ip through almost like setting up a home network and connecting it through that. that way you can allow your laptop to access data on your home PC and the PC can access the server.

[xilman]

Originally Posted by Prime95

Does anyone have Linux pptpd knowledge? I followed the linux howtos and configured the router to forward 1723 and GRE. Now that I'm away I cannot create a VPN connection from my Mac. The log files are below. It seems the request is getting to the server and then it somehow doesn't work. Google hasn't given me any good clues on how to proceed.

It is documented that my away IP address cannot be on the same subnet as the VPN server. My Mac address is 192.168.1.x, my home DSL modem is on 192.168.2.x and the home VPN server is 192.168.0.x, so I think I'm OK on that front.

Any help would be appreciated.

May 20 00:01:37 george-i7-860 pppd[2254]: 192.168.0.7:192.168.0.210#011#011# (from command line)

The line preserved in the [ code] segment appears somewhat strange to me. Can you post the command line you used to see if that helps?

Paul

[Prime95]

My home network went down. I'll upload the configuration files next week when I'm back home.

[S34960zz]

Originally Posted by Prime95

and GRE.

Have you tested from a different location using a different service provider?

Some ISPs do not support GRE (generic routing encapsulation) for VPNs.

I do not understand the details of this, as I am a mere user of networking protocols. But for sure Sprint's Virgin Mobile Broadband2Go service does not support GRE (used by Microsoft's VPN client on WinXP, apparently) and the wireless service at some hotels / restaurants / etc. do not either. If your VPN works some places but will not connect (authentication error, iirc) when using other networks (usually no-frills wireless), this might be the problem.

In December (2010), I purchased a Virgin Mobile wireless data device, took it home, set it up, and it worked for everything but connecting to my work VPN. A discussion with Virgin Mobile tech support clarified that GRE was not and would not be supported. So much for having a $40/mo unlimited GB dataplan. They told me to return the data device to where I purchased it and they issued me a refund check for the prepaid card used to activate / load the device (the return/refund was minimal-hassle, at least -- the refund check showed up about a week later, though they didn't "gross up" to cover the sales tax paid).

Verizon Wireless's (3G) data service works fine with the GRE and Microsoft WinXP VPN client, as does (allegedly, I haven't tested) Sprint's Sprint-branded wireless data service.

[Vato]

Try and find a way to use a TCP or UDP based VPN - anything else is likely to fall foul of various NAT mechanisms, and these will all become more prevalent now that IPv4 address space is well on the way to running out.