Отвечаю на эту тему и сразу про VPN сервер, чтобы не дублировать:
Вот конфигурация моего тестового стенда:
| Код |
Клиент1 (Windows):
LAN:
IP/Mask: 172.16.0.3/16
роутинга нет
Клиент2 (Windows):
LAN:
IP/Mask: 172.16.0.2/16
роутинга нет
Сервер (PPTP):
eth1 Link encap:Ethernet HWaddr 00:0C:29:71:02:5B
inet addr:172.16.0.1 Bcast:172.16.0.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe71:25b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:16 errors:0 dropped:0 overruns:0 frame:0
TX packets:21 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1958 (1.9 KiB) TX bytes:6179 (6.0 KiB)
Interrupt:18 Base address:0x2080
|
Поднимаю VPN c клиентов:
| Код |
Клиент1 (Windows):
LAN:
IP/Mask: 172.16.0.3/16
роутинга нет
VPN:
10.0.1.2/32
Роутинг через этот интерфейс
Клиент2 (Windows):
IP/Mask: 172.16.0.2/16
роутинга нет
VPN:
10.0.1.22/32
Роутинг через этот интерфейс
Сервер (PPTP):
eth1 Link encap:Ethernet HWaddr 00:0C:29:71:02:5B
inet addr:172.16.0.1 Bcast:172.16.0.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fe71:25b/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:249 errors:0 dropped:0 overruns:0 frame:0
TX packets:228 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:27888 (27.2 KiB) TX bytes:19333 (18.8 KiB)
Interrupt:18 Base address:0x2080
ppp0 Link encap:Point-to-Point Protocol
inet addr:10.0.1.1 P-t-P:10.0.1.22 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1408 Metric:1
RX packets:38 errors:0 dropped:0 overruns:0 frame:0
TX packets:33 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:3988 (3.8 KiB) TX bytes:1476 (1.4 KiB)
ppp1 Link encap:Point-to-Point Protocol
inet addr:10.0.1.1 P-t-P:10.0.1.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1408 Metric:1
RX packets:29 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:2519 (2.4 KiB) TX bytes:580 (580.0 b)
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.1.22 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
10.0.1.2 0.0.0.0 255.255.255.255 UH 0 0 0 ppp1
10.0.1.0 0.0.0.0 255.255.255.0 U 0 0 0 *
172.16.0.0 0.0.0.0 255.255.0.0 U 10 0 0 eth1
|
Клиенты видят друг друга по их адресам в VPN, трафик на сервере роутится.
Лог подключения первого клиента:
| Код |
Jan 28 07:58:40 localhost pptpd[4211]: CTRL: Client 172.16.0.2 control connection started
Jan 28 07:58:40 localhost pptpd[4211]: CTRL: Starting call (launching pppd, opening GRE)
Jan 28 07:58:40 localhost pppd[4212]: Plugin radius.so loaded.
Jan 28 07:58:40 localhost pppd[4212]: RADIUS plugin initialized.
Jan 28 07:58:40 localhost pppd[4212]: Plugin radattr.so loaded.
Jan 28 07:58:40 localhost pppd[4212]: RADATTR plugin initialized.
Jan 28 07:58:40 localhost kernel: CSLIP: code copyright 1989 Regents of the University of California
Jan 28 07:58:40 localhost kernel: PPP generic driver version 2.4.2
Jan 28 07:58:40 localhost pptpd[4211]: GRE: Bad checksum from pppd.
Jan 28 07:58:40 localhost pppd[4212]: pppd 2.4.4 started by root, uid 0
Jan 28 07:58:40 localhost pppd[4212]: Using interface ppp0
Jan 28 07:58:40 localhost pppd[4212]: Connect: ppp0 <--> /dev/pts/3
Jan 28 07:58:42 localhost pptpd[4211]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jan 28 07:58:43 localhost kernel: PPP BSD Compression module registered
Jan 28 07:58:43 localhost kernel: PPP Deflate Compression module registered
Jan 28 07:58:43 localhost pppd[4212]: Cannot determine ethernet address for proxy ARP
Jan 28 07:58:43 localhost pppd[4212]: local IP address 10.0.1.1
Jan 28 07:58:43 localhost pppd[4212]: remote IP address 10.0.1.22
|
код подключения второго клиента:
| Код |
Jan 28 08:01:08 localhost pptpd[4332]: CTRL: Client 172.16.0.3 control connection started
Jan 28 08:01:08 localhost pptpd[4332]: CTRL: Starting call (launching pppd, opening GRE)
Jan 28 08:01:08 localhost pppd[4333]: Plugin radius.so loaded.
Jan 28 08:01:08 localhost pppd[4333]: RADIUS plugin initialized.
Jan 28 08:01:08 localhost pppd[4333]: Plugin radattr.so loaded.
Jan 28 08:01:08 localhost pppd[4333]: RADATTR plugin initialized.
Jan 28 08:01:08 localhost pppd[4333]: pppd 2.4.4 started by root, uid 0
Jan 28 08:01:08 localhost pppd[4333]: Using interface ppp1
Jan 28 08:01:08 localhost pppd[4333]: Connect: ppp1 <--> /dev/pts/4
Jan 28 08:01:08 localhost pptpd[4332]: GRE: Bad checksum from pppd.
Jan 28 08:01:11 localhost pptpd[4332]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jan 28 08:01:11 localhost pppd[4333]: Cannot determine ethernet address for proxy ARP
Jan 28 08:01:11 localhost pppd[4333]: local IP address 10.0.1.1
Jan 28 08:01:11 localhost pppd[4333]: remote IP address 10.0.1.2
|
поднял клиентна на линуксе, коннекчусь:
| Код |
Jan 28 08:41:16 mdv_20100 pptp[8150]: anon warn[decaps_hdlc:pptp_gre.c:204]: short read (-1): Input/output error
Jan 28 08:41:16 mdv_20100 pptp[8150]: anon warn[decaps_hdlc:pptp_gre.c:216]: pppd may have shutdown, see pppd log
Jan 28 08:41:16 mdv_20100 pptp[8141]: anon log[callmgr_main:pptp_callmgr.c:234]: Closing connection (unhandled)
Jan 28 08:41:16 mdv_20100 pptp[8141]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Jan 28 08:41:16 mdv_20100 pptp[8141]: anon log[call_callback:pptp_callmgr.c:79]: Closing connection (call state)
Jan 28 08:41:22 mdv_20100 pptp[8297]: anon log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Jan 28 08:41:22 mdv_20100 pptp[8302]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jan 28 08:41:22 mdv_20100 pptp[8302]: anon log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Jan 28 08:41:22 mdv_20100 pptp[8302]: anon log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Jan 28 08:41:23 mdv_20100 pptp[8302]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jan 28 08:41:23 mdv_20100 pptp[8302]: anon log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Jan 28 08:41:23 mdv_20100 pptp[8302]: anon log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 1152).
Jan 28 08:41:23 mdv_20100 pppd[8304]: pppd 2.4.4 started by root, uid 0
Jan 28 08:41:23 mdv_20100 pppd[8304]: Using interface ppp0
Jan 28 08:41:23 mdv_20100 pppd[8304]: Connect: ppp0 <--> /dev/pts/1
Jan 28 08:41:25 mdv_20100 pppd[8304]: PAP authentication succeeded
Jan 28 08:41:25 mdv_20100 pppd[8304]: local IP address 10.0.1.2
Jan 28 08:41:25 mdv_20100 pppd[8304]: remote IP address 10.10.1.1
Jan 28 08:42:23 mdv_20100 pptp[8302]: anon log[logecho:pptp_ctrl.c:677]: Echo Reply received.
Jan 28 08:43:05 mdv_20100 sshd[8346]: Accepted password for vadim from 10.10.1.22 port 4564 ssh2
Jan 28 08:43:23 mdv_20100 pptp[8302]: anon log[logecho:pptp_ctrl.c:677]: Echo Reply received.
|
В этом логе виден даже мой заход по ssh через VPN. |
