[FUG-BR] VPN usando MPD - Erro 800

Gustavo Gomes gstgomespb em yahoo.com.br
Terça Novembro 21 00:22:52 BRST 2006


O FreeBSD nao esta usando nenhum tipo de regra (IPFW
ou PF) ou seja, nao tem nada bloqueado.

sera que tenho que acresentar regras PF para o MPD
funcionar ?

obrigado


--- Welkson Renny de Medeiros
<welkson at focusautomacao.com.br> escreveu:

> 
> 
> > Galera,
> >
> > Estou com o servidor FreeBSD e gostaria de criar
> VPN
> > usando o MPD, estou testando na minha Lan local,
> porem
> > esta dando erro.
> >
> > ERRO 800: nao é possivel estabelecer a conexao
> VPN, o
> > servidor VPN pode estar inalcansavel ou os
> parametros
> > de segurança podem nao estar configurados
> corretamente
> > para esse tipo de conexao.
> >
> > a porta 1723 esta aberta
> > #nmap 172.16.0.38
> >
> > Starting Nmap 4.11 ( http://www.insecure.org/nmap/
> )
> > at 2006-11-20 21:04 BRST
> > Interesting ports on 172.16.0.38:
> > Not shown: 1675 filtered ports
> > PORT      STATE SERVICE
> > 1723/tcp  open  pptp
> > MAC Address: 00:04:23:B0:35:46 (Intel)
> >
> >
> > #ifconfig
> > em0: inet 172.16.0.38 netmask 0xffff0000 broadcast
> > em1: inet 192.168.1.1 netmask 0xffffff00 broadcast
> > ng0:
> flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST>
> > mtu 1500
> >
> >
> > Eis a configuração do MPD
> >
> > *********mpd.conf
> > default:
> >         load pptp
> >
> > pptp:
> >         new -i ng0 pptp pptp
> >         set iface disable on-demand
> >         set iface enable proxy-arp
> >         set iface idle 1800
> >         set iface enable tcpmssfix
> >         set bundle enable multilink
> >         set bundle enable tcp-wrapper
> >         set link yes acfcomp protocomp
> >         set link no pap chap
> >         set link enable chap
> >         set link keep-alive 10 60
> >         set link mtu 1460
> >         set ipcp yes vjcomp
> >         set ipcp ranges 192.168.1.3/32
> 192.168.1.0/24
> >         set ipcp dns 192.168.1.3
> >         set ipcp nbns 192.168.1.4
> >         set bundle enable compression
> >         set ccp yes mppc
> >         set ccp yes mpp-e40
> >         set ccp yes mpp-e128
> >         set ccp yes mpp-stateless
> >
> >
> > *********mpd.links
> > pptp:
> >         set link type pptp
> >         set pptp self 172.16.0.38
> >         set pptp enable incoming
> >         set pptp disable originate
> >
> >
> > *********mpd.log
> > Nov 20 19:58:47 srvac12 mpd: mpd: PPTP connection
> from
> > 172.16.2.209:4787
> > Nov 20 19:58:47 srvac12 mpd: pptp0: attached to
> > connection with 172.16.2.209:4787
> > Nov 20 19:58:52 srvac12 mpd: pptp0: ctrl
> connection
> > closed by peer
> > Nov 20 19:58:52 srvac12 mpd: pptp0: killing
> connection
> > with 172.16.2.209:4787
> > Nov 20 19:59:41 srvac12 mpd: mpd: PPTP connection
> from
> > 172.16.2.209:4885
> > Nov 20 19:59:41 srvac12 mpd: pptp0: attached to
> > connection with 172.16.2.209:4885
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IFACE: Open
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IPCP: Open
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IPCP: state
> change
> > Initial --> Starting
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IPCP:
> LayerStart
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IPCP: Open
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] bundle: OPEN
> event
> > in state CLOSED
> > Nov 20 19:59:41 srvac12 mpd: [pptp] opening link
> > "pptp"...
> > Nov 20 19:59:41 srvac12 mpd: [pptp] link: OPEN
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP: Open
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP: state
> change
> > Initial --> Starting
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP:
> LayerStart
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device: OPEN
> event
> > in state DOWN
> > Nov 20 19:59:41 srvac12 mpd: [pptp] attaching to
> > peer's outgoing call
> > Nov 20 19:59:41 srvac12 mpd: [pptp] can't attach
> > pptpgre node: Operation not permitted
> > Nov 20 19:59:41 srvac12 mpd: pptp0-0: killing
> channel
> > Nov 20 19:59:41 srvac12 mpd: [pptp] PPTP call
> > cancelled in state CONNECTING
> > Nov 20 19:59:41 srvac12 mpd: pptp0: closing
> connection
> > with 172.16.2.209:4885
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IFACE: Close
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IPCP: Close
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IPCP: state
> change
> > Starting --> Initial
> > Nov 20 19:59:41 srvac12 mpd: [pptp] IPCP:
> LayerFinish
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device is now
> in
> > state OPENING
> > Nov 20 19:59:41 srvac12 mpd: [pptp] bundle: CLOSE
> > event in state OPENED
> > Nov 20 19:59:41 srvac12 mpd: [pptp] closing link
> > "pptp"...
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device: DOWN
> event
> > in state OPENING
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device is now
> in
> > state DOWN
> > Nov 20 19:59:41 srvac12 mpd: [pptp] link: CLOSE
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP: Close
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP: state
> change
> > Starting --> Initial
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP:
> LayerFinish
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device: DOWN
> event
> > in state DOWN
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device is now
> in
> > state DOWN
> > Nov 20 19:59:41 srvac12 mpd: [pptp] link: DOWN
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP: Down
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device: CLOSE
> > event in state DOWN
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device is now
> in
> > state DOWN
> > Nov 20 19:59:41 srvac12 mpd: [pptp] link: DOWN
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] LCP: Down
> event
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device: OPEN
> event
> > in state DOWN
> > Nov 20 19:59:41 srvac12 mpd: [pptp] pausing 9
> seconds
> > before open
> > Nov 20 19:59:41 srvac12 mpd: [pptp] device is now
> in
> > state DOWN
> > Nov 20 19:59:41 srvac12 mpd: pptp0: killing
> connection
> > with 172.16.2.209:4885
> > Nov 20 19:59:50 srvac12 mpd: [pptp] device: OPEN
> event
> > in state DOWN
> > Nov 20 19:59:50 srvac12 mpd: [pptp] pptp originate
> > option is not enabled
> 
=== message truncated ===



		
_______________________________________________________ 
Novidade no Yahoo! Mail: receba alertas de novas mensagens no seu celular. Registre seu aparelho agora! 
http://br.mobile.yahoo.com/mailalertas/ 
 



Mais detalhes sobre a lista de discussão freebsd