[es] - VPN wireless konekcija i OpenSwan na Slackware 12

Salgeras
Salgeras

Član broj: 21155
Poruke: 180
195.252.105.*

Profil

VPN wireless konekcija i OpenSwan na Slackware 12 - sta dalje?

^{29.09.2007. u 23:48 - pre 201 meseci}

Pozdrav svima!!
Nakon duzeg cekanja, konacno je stigao WiFi i u moj stan.Medjutim, imam veliki problem,ne mogu da namestim na linuxu,tj ne znam kako da napravim VPN konekciju. Analogno konfiguraciji na xp-u, pokusao sam da namestim pptp na Slackware 12.0, ali bez uspeha.
Ukratko,mrezna kartica je: Realtek Semiconductor Co., Ltd. RTL-8139/8139C/8139C, (na laptopu), obicnim mreznim kablom je spojena sa ap-om (tp-link wa-501g), a on dalje na antenu. Ako nesto znaci, provajder je KBCnet iz Beograda. Konekcija ide preko VPNa (PPTP), dodela IPa ide preko DHCPa..

E sad, na ES-u, u nekom davno objavljenom postu, nasao sam savet za koriscenje OpenSwan-a za VPN. Otisao sam na njihov sajt, skinuo source i uspesno izvrsio instalaciju. Sa komandom 'ipsec verify' sam proverio install, sve je [OK], sem OpportunisticEncryption, koji je [DISABLED]. Kako god, otvorim firefox i uspem da otvorim KBCnet-ov home page, ali kad pokusam neki drugi sajt, uvek otvara KBC-ov.
Zatim sam uzeo da napravim konekciju u /etc/ipsec.conf. Na adresi http://www.faqs.org/docs/securing/chap25sec203e.html nasao sam detaljno uputstvo za ipsec.conf i njega sam sledio do kraja. Dakle, definisao konekciju, kljuceve, tako da moj ipsec.conf izgleda ovako:

Code:

# /etc/ipsec.conf - Openswan IPsec configuration file

version    2.0    # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        interfaces="ipsec0=eth0"
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search

    # plutodebug / klipsdebug = "all", "none" or a combation from below:
    # "raw crypt parsing emitting control klips pfkey natt x509 private"
    # eg: plutodebug="control parsing"
    #
    # ONLY enable plutodebug=all or klipsdebug=all if you are a developer !!
    #
    # NAT-TRAVERSAL support, see README.NAT-Traversal
       #    nat_traversal=yes
    # virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
    #
    # enable this if you see "failed to find any available worker"
       #    nhelpers=0
# Add connections here
conn kbc
        left=10.200.125.1
        leftsubnet=195.252.105.1/254
        leftnexthop=10.200.125.2
        right=10.200.125.1
        rightsubnet=195.252.105.1/254
        rightnexthop=10.200.125.1
        keyingtries=0
        auth=ah
        auto=start

# sample VPN connections, see /etc/ipsec.d/examples/

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf

Inace, IP adrese sam upisivao po komandi "ipconfig /all" iz windowsa:

Code:

Windows IP Configuration
        Host Name . . . . . . . . . . . . : salgeras
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Ethernet NIC
        Physical Address. . . . . . . . . : <>
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 10.200.125.175
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 10.200.125.1
        DHCP Server . . . . . . . . . . . : 10.200.125.1
        DNS Servers . . . . . . . . . . . : 10.200.1.30
        Lease Obtained. . . . . . . . . . : Saturday, September 29, 2007 11:46:33 PM
        Lease Expires . . . . . . . . . . : Tuesday, October 02, 2007 11:46:33 PM

PPP adapter KBCnet:
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
        Physical Address. . . . . . . . . : <>
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 195.252.105.247              <--- moj IP u trenutku pisanja posta,dinamicka IP
        Subnet Mask . . . . . . . . . . . : 255.255.255.255
        Default Gateway . . . . . . . . . : 195.252.105.247
        DNS Servers . . . . . . . . . . . : 10.200.1.30
                                            194.106.162.2

Kao prvo, da li je ipsec.conf za sada u redu??

Nakon instalacije OpenSwan-a sa 'ifconfig' sam proverio eth0, sve je ok..ne znam kako, uglavnom dodeljena joj je IP 10.200.125.175. U resolv.conf upisan je DNS 10.200.1.30.

Nakon ovoga, uradim "/etc/init.d/ipsec start" i pokrene se OpenSwan. Zatim "ipsec auto --up kbc" i tu nastaju problemi:
1) pri ovoj konfiguraciji ipsec.conf-a kaze:

Code:

ipsec_setup:(/etc/ipsec.conf, line 16) unknown parameter name "plutoload" -- 'start' aborted

2)kada u ipsec.conf komentujem sve sto ima veze sa pluto (sta god to bilo), kaze:

Code:

whack: is Pluto running? connect() for "/var/run/pluto/pluto.ctl" failed

Fajl pluto.ctl se nalazi na pomenutoj lokaciji..

Da li neko moze da pomogne? Sta dalje da radim?
Hvala unapred!!

P.S. Izvinjavam se na kilometarskom postu, trudio sam se da dam sto vise informacija

Registered Linux User #460193

Odgovor na temu

anrxc

Član broj: 43899
Poruke: 452
*.adsl.net.t-com.hr.

Sajt: sysphere.org

Profil

Re: VPN wireless konekcija i OpenSwan na Slackware 12 - sta dalje?

^{30.09.2007. u 17:06 - pre 201 meseci}

Pa jel provider koristi pptp ili koristi ipsec, odluci se. Nemoze ti nitko pomoci kad ni sam neznas s cime ti treba pomoc.

Evo ti pptp upute za svaki slucaj
http://slackworld.berlios.de/2007/Linux2MS-VPN.html

You need to install an RTFM interface.

Odgovor na temu

Salgeras
Salgeras

Član broj: 21155
Poruke: 180
195.252.105.*

Profil

Re: VPN wireless konekcija i OpenSwan na Slackware 12 - sta dalje?

^{30.09.2007. u 23:18 - pre 201 meseci}

@anrxc,
kao prvo, hvala za link, to mi je trebalo... Doduse, sad mi ostaje da recompile-liram kernel za MPPE. Nadao sam se da je podrska vec bila ugradjena, medjutim pri konektovanju mi je izbacio error za MPPE..

Kao drugo, izvinjavam se na mojoj nedovoljnoj upucenosti, nisam znao da su pptp i ipsec 2 razlicite stvari. Celokupna tematika oko WiFi mi je nepoznata, ovo je prvi put da se srecem s time..

Pozdrav!!

Registered Linux User #460193

Odgovor na temu

Salgeras
Salgeras

Član broj: 21155
Poruke: 180
195.252.105.*

Profil

Re: VPN wireless konekcija i OpenSwan na Slackware 12 - sta dalje?

^{04.10.2007. u 19:03 - pre 201 meseci}

Ljudi, pomazite, imam problema!!
Dakle, pratio sam uputstvo sa sajta koji mi je @anrxc dao...

- skinuo i instalirao pptp
- kernel: sve ovo sto se trazi u vezi PPPa mi je vec bilo definisano kroz module, ali sam za svaki slucaj ponovo rekompajlirao kernel, sve je proslo ok, butovao sam Slack..
- date fajlove sam ispodesavao kako se i trazilo
- pokrenem konekciju, izvrti, izbaci error i prekine..

Evo svi fajlovi koji su ucestvovali u prici..

1) /etc/ppp/options.pptp

Code:

lock
noauth
# We won't do EAP, CHAP, or MSCHAP, but we will accept MSCHAP-V2
refuse-eap
refuse-chap
refuse-mschap

nobsdcomp
nodeflate

2) /etc/ppp/peers/kbc

Code:

pty "pptp vpn1.kbcnet.co.yu --nolaunchpppd"
   name Salgeras
   remotename PPTP
   require-mppe-128
   file /etc/ppp/options.pptp
   ipparam kbc

3) /etc/ppp/chap-secrets i /etc/ppp/pap-secrets

Code:

# client server secret IP addresses
Salgeras PPTP <pass> *

Pokrenem konekciju i kaze ovako:

Code:

root@darkstar:~#  sh /usr/doc/ppp-2.4.4/scripts/pon kbc debug dump logfd 2 nodetach
pppd options in effect:
debug           # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
dump            # (from command line)
noauth          # (from /etc/ppp/options.pptp)
refuse-chap             # (from /etc/ppp/options.pptp)
refuse-mschap           # (from /etc/ppp/options.pptp)
refuse-eap              # (from /etc/ppp/options.pptp)
name Salgeras           # (from /etc/ppp/peers/kbc)
remotename PPTP         # (from /etc/ppp/peers/kbc)
                # (from /etc/ppp/options.pptp)
pty pptp vpn1.kbcnet.co.yu --nolaunchpppd               # (from /etc/ppp/peers/kbc)
crtscts         # (from /etc/ppp/options)
                # (from /etc/ppp/options)
asyncmap 0              # (from /etc/ppp/options)
lcp-echo-failure 4              # (from /etc/ppp/options)
lcp-echo-interval 30            # (from /etc/ppp/options)
ipparam kbc             # (from /etc/ppp/peers/kbc)
proxyarp                # (from /etc/ppp/options)
nobsdcomp               # (from /etc/ppp/options.pptp)
nodeflate               # (from /etc/ppp/options.pptp)
require-mppe-128                # (from /etc/ppp/peers/kbc)
using channel 1
Using interface ppp0
Connect: ppp0 <--> /dev/pts/2
rcvd [LCP ConfReq id=0x1 <mru 1400> <asyncmap 0x0> <auth pap> <magic 0x9c5dc7c6> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x768b4be1> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <mru 1400> <asyncmap 0x0> <auth pap> <magic 0x9c5dc7c6> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x768b4be1> <pcomp> <accomp>]
sent [LCP EchoReq id=0x0 magic=0x768b4be1]
sent [PAP AuthReq id=0x1 user="Salgeras" password=<hidden>]
rcvd [LCP EchoReq id=0x0 magic=0x9c5dc7c6]
sent [LCP EchoRep id=0x0 magic=0x768b4be1]
rcvd [LCP EchoRep id=0x0 magic=0x9c5dc7c6]
rcvd [PAP AuthAck id=0x1 "64/74\n"]
Remote message: 64/74^J
PAP authentication succeeded
MPPE required, but MS-CHAP[v2] auth not performed.
sent [LCP TermReq id=0x2 "MPPE required but not available"]
rcvd [IPCP ConfReq id=0x1 <addr 10.200.2.1>]
Discarded non-LCP packet when LCP not open
rcvd [LCP TermAck id=0x2]
Connection terminated.
Script pptp vpn1.kbcnet.co.yu --nolaunchpppd finished (pid 3167), status = 0x0

Sta hoce vise?? Sa "modprobe ppp_mppe" ucitao sam modul..Evo deo lsmod komande vezan za taj modul:

Code:

Module                  Size  Used by
ppp_synctty            11392  0
ppp_mppe               10116  0
ppp_async              13056  0
ppp_generic            26772  3 ppp_synctty,ppp_mppe,ppp_async
slhc                    9856  1 ppp_generic

Medjutim, iako nije ostvario konekciju, otvaram home page provajdera, i sve stranice na njegovom sajtu.. Evo jos i ovo:

Code:

eth0      Link encap:Ethernet  HWaddr 00:17:31:25:8C:E0
          inet addr:10.200.125.175  Bcast:10.200.125.255  Mask:255.255.255.0
          inet6 addr: fe80::217:31ff:fe25:8ce0/64 Scope:Link
          UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:231 errors:0 dropped:0 overruns:0 frame:0
          TX packets:49 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:20329 (19.8 KiB)  TX bytes:4795 (4.6 KiB)
          Interrupt:18 Base address:0xd800

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

Hvala unapred!!!

Registered Linux User #460193

Odgovor na temu

Salgeras
Salgeras

Član broj: 21155
Poruke: 180
91.148.114.*

Profil

Re: VPN wireless konekcija i OpenSwan na Slackware 12 - sta dalje?

^{11.10.2007. u 22:18 - pre 201 meseci}

Jos uvek nisam uspeo da osposobim konekciju.
U medjuvremenu sam formatirao i ponovo instalirao Slackware.. Nasao sam na
http://www.linuxquestions.org/...g/PPTP_VPN_on_Slackware_How_to na detaljno uputstvo za pravljenje konekcije, koje sam ispratio do kraja.Jedino sam preskocio deo za podesavanje Server strane, mislio sam da nema potrebe za tim, to treba da ima provajder, a ne ja (kao klijent)...jel tako??
E, ispodesavam sve, pokrenem konekciju i nista.. Ni jednu stranicu ne mogu da otvorim (sem home page-a provajdera), a ne mogu nista ni da pingujem..svi paketi su "100% lost"..

Zaista ne znam sta vise da radim.. Ovo je /var/log/messages:

Code:

root@darkstar:~#  tail /var/log/messages
Oct  7 22:11:49 darkstar pppd[2884]: Using interface ppp0
Oct  7 22:11:49 darkstar pppd[2884]: Connect: ppp0 <--> /dev/pts/0
Oct  7 22:11:54 darkstar pptp[2900]: anon log[main:pptp.c:276]: The
synchronous pptp option is NOT activated
Oct  7 22:12:20 darkstar pppd[2884]: Connection terminated.
Oct  7 22:12:20 darkstar pppd[2884]: Modem hangup
Oct  7 22:12:20 darkstar pppd[2884]: Using interface ppp0
Oct  7 22:12:20 darkstar pppd[2884]: Connect: ppp0 <--> /dev/pts/1
Oct  7 22:12:20 darkstar pptp[2906]: anon log[main:pptp.c:276]: The
synchronous pptp option is NOT activated

Mislio sam da je do modula, ali su svi moduli vezani za ppp_mppe vec ucitani...

Ima li neko neku ideju? Bilo sta..? :))

Registered Linux User #460193

Odgovor na temu