I'm trying to connect to my ASG v8.003 box at home via VPN using openSUSE 11.3 installed inside a VM on my work PC, with all the latest updates installed as I write this. I'm hoping to have all web traffic routed from the Astaro to the VM (i.e. like any HTTP proxy server does), and this functionality works fine under Windows for all the main protocols [PPTP, L2TP and SSL]. I've tried connecting in openSUSE with both PPTP and OpenVPN, each with different results as below.
When trying to connect via PPTP the connection times out and fails after a while, see below for the log files:
PPTP daemon log:
2010:12:08-11:36:19 pph pptpd[7149]: MGR: Launching /usr/sbin/pptpctrl to handle client
2010:12:08-11:36:19 pph pptpd[7149]: CTRL: local address = 10.8.246.1
2010:12:08-11:36:19 pph pptpd[7149]: CTRL: remote address = 10.8.246.2
2010:12:08-11:36:19 pph pptpd[7149]: CTRL: Client 217.34.55.129 control connection started
2010:12:08-11:36:19 pph pptpd[7149]: CTRL: Received PPTP Control Message (type: 1)
2010:12:08-11:36:19 pph pptpd[7149]: CTRL: Made a START CTRL CONN RPLY packet
2010:12:08-11:36:19 pph pptpd[7149]: CTRL: I wrote 156 bytes to the client.
2010:12:08-11:36:19 pph pptpd[7149]: CTRL: Sent packet to client
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: Received PPTP Control Message (type: 7)
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: Set parameters to 10000000 maxbps, 3 window size
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: Made a OUT CALL RPLY packet
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: Starting call (launching pppd, opening GRE)
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: pty_fd = 6
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: tty_fd = 7
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: I wrote 32 bytes to the client.
2010:12:08-11:36:20 pph pptpd[7149]: CTRL: Sent packet to client
2010:12:08-11:36:20 pph pptpd[7151]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
2010:12:08-11:36:20 pph pptpd[7151]: CTRL (PPPD Launcher): local address = 10.8.246.1
2010:12:08-11:36:20 pph pptpd[7151]: CTRL (PPPD Launcher): remote address = 10.8.246.2
2010:12:08-11:36:20 pph pptpd[7149]: GRE: Bad checksum from pppd.
2010:12:08-11:36:50 pph pptpd[4614]: MGR: Reaped child 7149
2010:12:08-11:36:50 pph pptpd[7149]: GRE: read(fd=6,buffer=805a540,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
2010:12:08-11:36:50 pph pptpd[7149]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
2010:12:08-11:36:50 pph pptpd[7149]: CTRL: Reaping child PPP[7151]
2010:12:08-11:36:50 pph pptpd[7149]: CTRL: Client 217.34.55.129 control connection finished
2010:12:08-11:36:50 pph pptpd[7149]: CTRL: Exiting now
PPP daemon:
2010:12:08-11:36:20 pph pppd[7151]: Plugin aua.so loaded.
2010:12:08-11:36:20 pph pppd[7151]: AUA plugin initialized.
2010:12:08-11:36:20 pph pppd[7151]: pppd 2.4.5 started by (unknown), uid 0
2010:12:08-11:36:20 pph pppd[7151]: using channel 2
2010:12:08-11:36:20 pph pppd[7151]: Starting negotiation on /dev/ttyp0
2010:12:08-11:36:20 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:23 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:26 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:29 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:32 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:35 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:38 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:41 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:44 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:47 pph pppd[7151]: sent [LCP ConfReq id=0x1 ]
2010:12:08-11:36:50 pph pppd[7151]: LCP: timeout sending Config-Requests
2010:12:08-11:36:50 pph pppd[7151]: Connection terminated.
2010:12:08-11:36:50 pph pppd[7151]: Modem hangup
2010:12:08-11:36:50 pph pppd[7151]: Exit.
As for OpenVPN I can at least connect to the ASG box, and even ping my internal devices such as my NAS drive, before I run into another problem: very limited Internet access. Tried entering a proper web address and Firefox is stuck on 'looking up' the address. I have however figured out that I can access some pages via IP address.
I thought this might be a DNS-related issue so I tried adding the respective VPN pool to the list of allowed networks under 'Network Services' > 'DNS' > 'Global'. I've also added a masquerading rule to map the SSL VPN pool to the external WAN interface, but neither of these things seem to work at the moment. I even tried adding a packet filter rule allowing HTTP from the SSL VPN pool to 'Internet IPv4' with no effect.
I would check the logs, but I'm not entirely sure which log file(s) I should be looking at. Any help would be appreciated.
Thanks.
Regards,
Jon.
This thread was automatically locked due to age.
