On Fri, Jan 12, 2007 at 01:39:53PM +0200, Artem Grishin wrote:
> On Fri, Jan 12, 2007 at 01:27:30PM +0200, Michael Plostak wrote:
> > On Fri, Jan 12, 2007 at 01:10:19PM +0200, Artem Grishin wrote:
> > > On Fri, Jan 12, 2007 at 01:02:21PM +0200, Michael Plostak wrote:
> > > > > >
> > > > > > Аналогично. Последняя попытка была месяц назад на FBSD 6.1-STABLE:
> > > > > > 3.18 - как часы, 4 - безуспешно и с мутной диагностикой.
> > > > >
> > > > > Поставил мпд3. Теперь другая грабля.
> > > > >
> > > > > [pptp0] CHAP: rec'd CHALLENGE #1
> > > > >  Name: "core    "
> > > > >  Using authname "core    "
> > > > >  Warning: no secret for "core    " found
> > > >
> > > > Старая грабля. Используй табуляции вместо пробелов в конфигах.
> > >
> > > [pptp0] CHAP: rec'd CHALLENGE #1
> > >  Name: "core    "
> > >  Using authname "core    "
> > >  Warning: no secret for "core    " found
> > >
> > > поправил:
> > >
> > > core    "berd"
> > >
>
> Вспомнил принцип аутентификации в chap.
> внес изменения в mpd.secret:
>
> core    berd    *
>
> С одной стороны аутентификация проходит.
> Циска пишет следующее:
>
> Jan 12 11:33:24: ppp229 PPP: Phase is AUTHENTICATING, by both
> Jan 12 11:33:24: ppp229 CHAP: O CHALLENGE id 1 len 25 from "core"
> Jan 12 11:33:24: ppp229 MS-CHAP-V2: I CHALLENGE id 1 len 21
> Jan 12 11:33:24: ppp229 MS CHAP V2: No name received from peer
> Jan 12 11:33:24: ppp229 MS CHAP V2: Unable to authenticate for peer
> Jan 12 11:33:24: ppp229 PPP: Sending Acct Event[Down] id[2E8]
> Jan 12 11:33:24: ppp229 PPP: Phase is TERMINATING
> Jan 12 11:33:24: ppp229 LCP: O TERMREQ [Open] id 3 len 4
> Jan 12 11:33:24: ppp229 PPP: LCP not open, discarding CHAP packet
> Jan 12 11:33:24: ppp229 LCP: I TERMACK [TERMsent] id 6 len 4
> Jan 12 11:33:24: ppp229 LCP: State is Closed
> Jan 12 11:33:24: ppp229 PPP: Phase is DOWN
>
> Как МПД заставить слать свой нейм?
>
> в mpd.conf:
>
> default:
>         load pptp0
> pptp0:
>         new -i ng0 pptp0 pptp0
>         set ipcp ranges 0.0.0.0/0 0.0.0.0/0
>         set iface disable on-demand
>         set iface idle 0
>         set iface session 0
>         set link mtu 1400
>         set iface mtu 1400
>         set iface route default
>         set bundle disable multilink
>         set auth authname "berd"
>         set auth password "berd"
>         set link yes acfcomp protocomp
>         set link no pap
>         set link enable chap
>         set link keep-alive 5 30
>         set ipcp yes vjcomp
>         open

добавил:

        set bundle authname "berd"
        set bundle password "berd"

Аутентификация прошла, тунель поднялся -

пакеты по нему не ходят.

ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1400
        inet 212.3.XXX.XX1. --> 212.3.XXX.XX2 netmask 0xffffffff

[root@sirius /usr/local/etc/mpd]# ping 212.3.XXX.XX2
PING 212.3.112.12 (212.3.XXX.XX2): 56 data bytes
ping: sendto: No buffer space available
ping: sendto: No buffer space available
ping: sendto: No buffer space available