Problem setting up pptp VPN to Windows LAN

[Redhat Linux 7.3]

I'm attempting to set up a pptp VPN connection from a Linux system to a
Windows LAN, using pptp-client (downloaded from sourceforge.net). MMPE
is needed and has been set up. I can establish the connection to the VPN
server, but after that I encounter problems.

I can't seem to get farther into the Windows LAN than the VPN server.
The LAN I'm connecting to is set up as 10.0.0.0/8 network, so I added a
route for that LAN using the following statement:

route add -net 10.0.0.0/8 dev ppp0

The internal IP of the VPN server is in a 10.72.0.0/16 group, as is the
gateway from that server into the rest of the LAN (10.72.1.1). The
target computer that I'm trying to connect to inside the Windows lan is
in a 10.70.0.0/16 group.

Traceroute to the target system times out on the 10.72.1.1 gateway.
Direct ping to that system also times out.

Additional note: The linux system is behind a router in its own LAN
(192.168.1.0/24). There is another computer running Win2k Pro on the
same LAN that can VPN to the target Windows LAN, which I made sure was
disconnected before attempting to connect the Linux system.

Does anyone have any suggestions on how I can solve this problem?

Lyle H. Gray wrote:
> [Redhat Linux 7.3]
>
> I'm attempting to set up a pptp VPN connection from a Linux system to a
> Windows LAN, using pptp-client (downloaded from sourceforge.net). MMPE
> is needed and has been set up. I can establish the connection to the VPN
> server, but after that I encounter problems.
>
> I can't seem to get farther into the Windows LAN than the VPN server.
> The LAN I'm connecting to is set up as 10.0.0.0/8 network, so I added a
> route for that LAN using the following statement:
>
> route add -net 10.0.0.0/8 dev ppp0
>
> The internal IP of the VPN server is in a 10.72.0.0/16 group, as is the
> gateway from that server into the rest of the LAN (10.72.1.1). The
> target computer that I'm trying to connect to inside the Windows lan is
> in a 10.70.0.0/16 group.
>
> Traceroute to the target system times out on the 10.72.1.1 gateway.
> Direct ping to that system also times out.
>
> Additional note: The linux system is behind a router in its own LAN
> (192.168.1.0/24). There is another computer running Win2k Pro on the
> same LAN that can VPN to the target Windows LAN, which I made sure was
> disconnected before attempting to connect the Linux system.
>
> Does anyone have any suggestions on how I can solve this problem?

PPtP behind NAT is kinda rough. May want to look at CIPE; its built for
NAT use.

--



"Windows: In a world without fences, who needs gates?"

redhat_devel <(E-Mail Removed)> wrote in
news:(E-Mail Removed):

>> Does anyone have any suggestions on how I can solve this problem?
>
> PPtP behind NAT is kinda rough. May want to look at CIPE; its built
> for NAT use.

Unfortunately, that isn't an option in this case -- I do not have control
of the VPN protocol behind by the target Windows LAN.

Right,

I've just gone through this painful process, and have got it working
on 2.4.19 and 2.4.21 kernels. The latest implementation from
pptp-client is by far the best. I worked my way down the installation
and troubleshooting stuff and got it all working.... my hat's off to
the authors!

However, I have one site that I cannot connect to, whatever I do. When
I'm in the pptp config window, I can see it acting as a bit bucket
from this side, then it disconnects. This site, when I connect via the
M$ vpn client, is at the lowest common denominator of compression and
security... No compression, ms chap authentication, and 40 bit
encryption. The software states that you can rebuild it with this
support, but it still doesn't work.

To get the routing to work correctly, run pptpconfig, select your
tunnel, click on the Routing tab, select client to lan and then add
your network routes.

The Windoze client should make no difference to connecting
successfully to your remote network. Enabling the debug option in
pptpconfig should give you more of an idea as to what's hapenning.

HTH,

Steve

On Thu, 07 Aug 2003 15:00:25 GMT, "Lyle H. Gray"
<(E-Mail Removed)> wrote:

>[Redhat Linux 7.3]
>
>I'm attempting to set up a pptp VPN connection from a Linux system to a
>Windows LAN, using pptp-client (downloaded from sourceforge.net). MMPE
>is needed and has been set up. I can establish the connection to the VPN
>server, but after that I encounter problems.
>
>I can't seem to get farther into the Windows LAN than the VPN server.
>The LAN I'm connecting to is set up as 10.0.0.0/8 network, so I added a
>route for that LAN using the following statement:
>
>route add -net 10.0.0.0/8 dev ppp0
>
>The internal IP of the VPN server is in a 10.72.0.0/16 group, as is the
>gateway from that server into the rest of the LAN (10.72.1.1). The
>target computer that I'm trying to connect to inside the Windows lan is
>in a 10.70.0.0/16 group.
>
>Traceroute to the target system times out on the 10.72.1.1 gateway.
>Direct ping to that system also times out.
>
>Additional note: The linux system is behind a router in its own LAN
>(192.168.1.0/24). There is another computer running Win2k Pro on the
>same LAN that can VPN to the target Windows LAN, which I made sure was
>disconnected before attempting to connect the Linux system.
>
>Does anyone have any suggestions on how I can solve this problem?