Опять про VPN. Маршрутизация
Форум — Admin
Помогите с маршрутами. Плиз.
Настроил подключение. Соединение происходит, вроде правильно.
Лог соединения:
pptpconfig: debug information dump begins
WARNING: security sensitive information follows
pptpconfig 1.8 2006/04/06 06:22:26
# pppd --version
pppd version 2.4.3
# uname -a
Linux localhost.localdomain 2.6.17-1.2157_FC5 #1 Tue Jul 11 22:55:46 EDT 2006 i686 athlon i386 GNU/Linux
# modinfo ppp_mppe || modinfo ppp_mppe_mppc
filename: /lib/modules/2.6.17-1.2157_FC5/kernel/drivers/net/ppp_mppe.ko
author: Frank Cusack <fcusack@fcusack.com>
description: Point-to-Point Protocol Microsoft Point-to-Point Encryption support
license: Dual BSD/GPL
alias: ppp-compress-18
version: 1.0.2
vermagic: 2.6.17-1.2157_FC5 mod_unload 686 REGPARM 4KSTACKS gcc-4.1
depends: ppp_generic
srcversion: 6B88E623CA7C4D7FE2F11FA
# grep mppe /proc/modules
ppp_mppe 7109 0 - Live 0xe0b9a000
ppp_generic 29397 3 ppp_mppe,ppp_deflate,ppp_async, Live 0xe0b91000
Array
(
[name] => garanta
[server] => 80.72.112.118
[domain] => (hidden by pptpconfig)
[username] => 00082
[password] => (hidden by pptpconfig)
[pppd-options] =>
[pptp-options] =>
[resolv] =>
[dns-options] =>
[routing] => routing_interface_only
[usepeerdns] => 1
[require-mppe] => 1
[nomppe-40] => 1
[nomppe-128] => 1
[refuse-eap] => 1
[mppe-stateful] => 1
[autostart] =>
[iconify] =>
[persist] =>
[debug] => 1
[client-to-lan] =>
)
# route -n (before pppd)
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
172.16.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
0.0.0.0 172.16.0.1 0.0.0.0 UG 0 0 0 eth0
pptpconfig: debug information dump ends, starting pppd
pppd options in effect:
debug # (from /etc/ppp/peers/garanta)
updetach # (from command line)
logfd 1 # (from command line)
linkname garanta # (from /etc/ppp/peers/garanta)
dump # (from /etc/ppp/peers/garanta)
noauth # (from /etc/ppp/options.pptp)
refuse-chap # (from /etc/ppp/options.pptp)
refuse-mschap # (from /etc/ppp/options.pptp)
refuse-eap # (from /etc/ppp/options.pptp)
name garanta.ru\\00082 # (from /etc/ppp/peers/garanta)
remotename garanta # (from /etc/ppp/peers/garanta)
# (from /etc/ppp/options.pptp)
pty pptp 80.72.112.118 --nolaunchpppd # (from /etc/ppp/peers/garanta)
ipparam garanta # (from /etc/ppp/peers/garanta)
usepeerdns # (from /etc/ppp/peers/garanta)
nobsdcomp # (from /etc/ppp/options.pptp)
nodeflate # (from /etc/ppp/options.pptp)
# (from /etc/ppp/peers/garanta)
# (from /etc/ppp/peers/garanta)
require-mppe-128 # (from /etc/ppp/options.pptp)
nomppe-128 # (from /etc/ppp/peers/garanta)
mppe-stateful # (from /etc/ppp/peers/garanta)
using channel 13
Using interface ppp0pptpconfig: monitoring interface ppp0
Connect: ppp0 <--> /dev/pts/3
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x73f30fe5> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <accomp> <pcomp> <asyncmap 0x0> <mru 1500> <magic 0x3ceed1fd> <quality lqr 00 00 0b b8> <auth chap MD5>]
sent [LCP ConfRej id=0x1 <quality lqr 00 00 0b b8>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x73f30fe5> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x2 <accomp> <pcomp> <asyncmap 0x0> <mru 1500> <magic 0x3ceed1fd> <auth chap MD5>]
sent [LCP ConfNak id=0x2 <auth chap MS-v2>]
rcvd [LCP ConfReq id=0x3 <accomp> <pcomp> <asyncmap 0x0> <mru 1500> <magic 0x3ceed1fd> <auth chap MS-v2>]
sent [LCP ConfAck id=0x3 <accomp> <pcomp> <asyncmap 0x0> <mru 1500> <magic 0x3ceed1fd> <auth chap MS-v2>]
rcvd [CHAP Challenge id=0x1 <e83601593c7e89c51eeb78362147ddb5>, name = ""]
sent [CHAP Response id=0x1 & #60;4364852e1e2025fbfe97177fcf06f51500000000000000008f2df40af2658560c377a463f0cf
45076a62287678dc8ccb00>, name = "garanta.ru\\00082"]
rcvd [CHAP Success id=0x1 "S=68FE14C75170FC99E0B3D2E231CEFB0CAD001787"]
sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x1 <mppe -H +M +S +L -D -C>]
sent [CCP ConfNak id=0x1 <mppe -H -M +S -L -D -C>]
rcvd [IPCP ConfReq id=0x1 <addr 2.2.2.2> <compress VJ 0f 01>]
sent [IPCP TermAck id=0x1]
rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x2 <mppe -H -M +S -L -D -C>]
sent [CCP ConfAck id=0x2 <mppe -H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
rcvd [IPCP ConfNak id=0x1 <addr 10.100.0.82> <ms-dns1 80.72.123.2> <ms-dns3 80.72.114.2>]
sent [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 10.100.0.82> <ms-dns1 80.72.123.2> <ms-dns3 80.72.114.2>]
rcvd [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr 10.100.0.82> <ms-dns1 80.72.123.2> <ms-dns3 80.72.114.2>]
sent [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 10.100.0.82> <ms-dns1 80.72.123.2> <ms-dns3 80.72.114.2>]
rcvd [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr 10.100.0.82> <ms-dns1 80.72.123.2> <ms-dns3 80.72.114.2>]
rcvd [IPCP ConfReq id=0x2 <addr 2.2.2.2> <compress VJ 0f 01>]
sent [IPCP ConfAck id=0x2 <addr 2.2.2.2> <compress VJ 0f 01>]
local IP address 10.100.0.82
remote IP address 2.2.2.2
primary DNS address 80.72.123.2
secondary DNS address 80.72.114.2
# route -n (after pppd exit)
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
2.2.2.2 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
172.16.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
0.0.0.0 172.16.0.1 0.0.0.0 UG 0 0 0 eth0
pptpconfig: pppd process exit status 0 (started)
ip route replace 80.72.112.118 via 172.16.0.1 dev eth0 src 172.16.0.82
pptpconfig: DNS changes made to /etc/resolv.conf
pptpconfig: connected
# route -n (after completion)
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
80.72.112.118 172.16.0.1 255.255.255.255 UGH 0 0 0 eth0
2.2.2.2 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
172.16.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
0.0.0.0 172.16.0.1 0.0.0.0 UG 0 0 0 eth0
А ping не проходит.
# ping www.ya.ru
PING ya.ru (213.180.204.8) 56(84) bytes of data.
--- ya.ru ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5000ms
VPN сервер - 80.72.112.118
шлюз - 172.16.0.1 (наверно)
Таблица маршрутизации в конце лога соединения. Какие маршруты надо добавить/изменить подскажите плиз. Я в маршрутизации не шарю. :)
Заранее спасибо.