Logo 
Search:

Unix / Linux / Ubuntu Forum

Ask Question   UnAnswered
Home » Forum » Unix / Linux / Ubuntu       RSS Feeds

VPN server problem

  Date: Jan 08    Category: Unix / Linux / Ubuntu    Views: 353
  

I am trying to learn a bit about networking and hence I want to set up a
VPN pptp server on my Ubuntu 10.04 desktop. My desktop is connected behind a
D-Link router. I would be accessing my server from a windows 7 machine outside
of my local area network or router. My windows machine is behind another router
(not the same D-Link one)I have tried various sites to configure my vpn and seek
help but I cant seem to get it to work. I have also tried to analyse my syslog
files to see the error. But, my server is not detecting any incoming connection
from the client.Let me explain the problem a bit more in detail.According to
ifconfig, I have got the following details:inet addr:192.168.1.3
Bcast:192.168.1.255 Mask:255.255.255.0Router ip address: 192.168.1.1I first
configured my pptpd.conf. In that file, I configured my localip of the server
and remote ip of the server:ppp /usr/sbin/pppdoption
/etc/ppp/pptpd-optionslogwtmplocalip 192.168.1.3remoteip 10.168.1.241-246 -
randomly pickedIn my chap secrets file, I also added a username and password,
which the client would use.Then, in "pptpd-options" file. The settings are as
follows:name
pptpdrefuse-paprefuse-chaprefuse-mschaprequire-mschap-v2require-mppe-128ms-dns
208.67.222.222ms-dns 208.67.220.220nodefaultroutelocknobsdcomp
authrequire-mppeMoreover, I am using D-link router 2640 router. I have set up
the port forwarding as well in the following manner:Private ip: 192.168.1.3 -
(local machine ip)Protocol type: TCPPublic start port: 1723Public end port:
1723Connection: PVC0
Then, I went to my Microsoft windows 7 pc. And tried to connect my server using
default vpn client:I used the following settings:ip address:
192.168.1.3username: pptpd/usernamepassword: *******
Following that, I get an error on windows machine, "Error 807: The connection
between the server and the client has been interrupted". Noting appears in the
log files on my linux machine. This suggests to me that there is something wrong
on my server setup, maybe ip settings etc.
I would be eternally grateful, if you can help me out on this. I am planning to
make a howto as soon as I get this up and running. Because, I could not find
anything like that on the web. Apologies for the long email. Thank you for your
considerations and hope to hear from you soon,

Share: 

 

7 Answers Found

 
Answer #1    Answered On: Jan 08    

When I sent the original message, the formatting has been completely removed.
So, I guess it is slightly difficult to understand the contents. Therefore, I
posted the message on the ubuntu forums. Please find the link below for the
message regarding my vpn
problem:ubuntuforums.org/showthread.php
If you have any ideas, please let me know.

 
Answer #2    Answered On: Jan 08    

Setting the remote client to connect to 192.168.1.3 is incorrect. You need it to
"call" the IP address of the router. From the Ubuntu desktop (VPN server),
connect to a site such as http://whatismyipaddress.com/ and note the IP address
it displays.

 
Answer #3    Answered On: Jan 08    

How stupid I was. I found my ip on that website and that was completely
different from 192.......
After finding my ip, I restarted my pptp server using the command "sudo
/etc/init.d/pptpd restart". But, still I am getting the same Error 807 from my
windows machine. The syslog file is not detecting any incoming connection
either. I was wondering that can you please guide me on what else I am doing
wrong here.

 
Answer #4    Answered On: Jan 08    

I haven't had any experience with pptp (it's said to be fairly insecure)
but I've used openvpn on linux for many years with excellent results.
It's in the repositories, so easily installable on ubuntu. The openvpn
website has free mac and windows clients for download. That would be
IMHO a better way to go, if you can.

 
Answer #5    Answered On: Jan 08    

I will check the router settings for GRE47 and read more about it. I was reading
on a website that for a D-Link router we do not need to do any settings for
that. The only thing needed is to port forward to 1723. I will double check it
and get back.

I read alot of people using OpenVPN. But, from what I read, there is not
much learning curve associated with it. And, I thought that if once I learn the
nuts and bolts I will move on to more protocol e.g. L2TP, IPSec etc.

 
Answer #6    Answered On: Jan 08    

In my experience, setting up the router's port forwarding is the trickiest part.
Check that part again. I think protocol 47 (GRE) is part of it.

 
Answer #7    Answered On: Jan 08    

OK, the networking class was a few years ago, but I still use it quite a
bit...

Isn't part of the problem that the address you're trying to use on the
remote site isn't seen as outside the remote site's network segment? The
address you're trying to connect to is in the 192.168 range. Those are
internal, non-routable addresses. That is, that's the address that's
seen on the LAN side of your home router. What you need to connect to is
to the IP of the WAN side of your router, which will be some standard,
routable Internet IP address. If you're not sure what it is, you can try
Shields Up at www.grc.com, which will dig it out for you. Also worth
testing your integrity there, so you know if you're "showing" too many
open ports on the WAN side of your router.

Anyway, the IP address shown there is the IP address that shows on the
Internet, which is where you're going to get to your home system. The
way you're configured now, it's looking for a machine at the local
address 192.168.1.3 and telling you it doesn't exist (which would happen
if your local router at the remote site was dispensing addresses in,
say, the 10.0.0.0 segment, which is also not routable, but not in the
same network segment as the address you're requesting).

Now, the NEXT step, which is how to tell your home router, when you've
properly reached it, which private address behind it you want is one
step I haven't tried yet, so I'll leave that to someone who uses VPNs
more. May use the answer, if someone has it, myself.

 
Didn't find what you were looking for? Find more on VPN server problem Or get search suggestion and latest updates.




Tagged: