[报到]Ubuntu下有PPTP VPN Client吗？(调试遇到问题，请高手看看11.24）

[shrek2005]

公司上网方式是这样的。郁闷啊，刚装上Ubuntu，没法上网。还得要win xp。
详细情况见4楼。
各位高手帮忙指点一下，谢谢。

[mutomubo]

当然有啦, 应该叫 openVPN吧

[shrek2005]

我说的是Client，不是Server。
我已经在软件管理器里面找到并安装了，叫：pptp-linux。
不过还是搞不定啊，要看一大堆的帮助，晕掉了。
先看了一堆pptp的帮助，发现还要用pppd，又去看pppd的帮助，彻底晕了，太多了。
有没有会配的啊，帮帮忙。

[shrek2005]

起因：在公司内网，需通过PPTP VPN拨号上网。
开始是在WinXP下VM虚拟机里安装了Ubuntu 6.10，以为是虚拟机桥接网络的问题，昨天重新分区安装Ubuntu后，还是这个问题。
首先安装client软件，pptp-linux，然后在/etc/ppp/peers目录下建立pptpvpn配置文件，设置内容包括：
取消压缩，require-mppe-128，defaultroute，replacedefaultroute，proxyarp，最后pty调用pptp。
然后在interfaces文件中建立iface vpn后，在root下用ifup vpn执行（配置方法是参照网上的）。
执行后，ppp0接口建立，用户认证通过，IP地址正确分配，缺省路由正确替换。
但是，无法上网，也ping不通，2分钟后本端自动释放PPTP connection。用ifconfig可以看到，在VPN自动断线前，在interface ppp0上发出大量的包，但没有收到的包，而同时interface eth0上没有发送/接收的包（见ifconfig内容，ppp0上已经累计发出了1.1GB，：（）；用系统监视器可以看到发出的包为10.1MB/s，接收为0。
使用debug参数进行观察，拆线原因：closing control connection due to missing echo reply。
郁闷啊。另外，VPN Server没有问题。log信息如下，请高手看看。

首先是断线前ifconfig看到的信息(在两分钟内在ppp0上发送了1.1GB的包，接收为0)：
dongyf@dongyf-desktop:~$ ifconfig
eth0 Link encap:Ethernet HWaddr 00:11:43:A6:AC:BB
inet addr:135.1**.**.** Bcast:135.1**.**.** Mask:255.255.255.192
inet6 addr: fe80::211:43ff:fea6:acbb/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2746 errors:0 dropped:0 overruns:0 frame:0
TX packets:931 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3048135 (2.9 MiB) TX bytes:73228 (71.5 KiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:146 errors:0 dropped:0 overruns:0 frame:0
TX packets:146 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:10852 (10.5 KiB) TX bytes:10852 (10.5 KiB)

ppp0 Link encapoint-to-Point Protocol
inet addr:10.0.4.37 P-t-P:10.0.4.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1496 Metric:1
RX packets:5 errors:0 dropped:0 overruns:0 frame:0
TX packets:3133394 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:86 (86.0 b) TX bytes:1265891244 (1.1 GiB)

其次，/var/log/debug的内容：
Dec 30 08:55:27 dongyf-desktop pppd[5833]: using channel 2
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfNak id=0x1 <magic 0x911431f4>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x5e87e6e1> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x5e87e6e1> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <auth chap MS-v2> <magic 0x96ad8ff5> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfAck id=0x2 <asyncmap 0x0> <auth chap MS-v2> <magic 0x96ad8ff5> <pcomp> <accomp>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CHAP Challenge id=0x3b <c816d0d56a41a167027ce8ea35b9aa70>, name = "pptpd"]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [CHAP Response id=0x3b <86894be60ee53272597b8970a51eb913b7c170e1b76025eed67c80203f85315e1c56a1956e475250b22c39ea4afc551900>, name = "dongyf"]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CHAP Success id=0x3b "S=288BD6230F969D036381A3AFB3EAFEEF33BCB437"]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 10.0.4.1>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [IPCP ConfAck id=0x1 <compress VJ 0f 01> <addr 10.0.4.1>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [IPCP ConfNak id=0x1 <addr 10.0.4.37> <ms-dns1 202.100.128.68> <ms-dns3 202.100.128.68>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 10.0.4.37> <ms-dns1 202.100.128.68> <ms-dns3 202.100.128.68>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr 10.0.4.37> <ms-dns1 202.100.128.68> <ms-dns3 202.100.128.68>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-up started (pid 5850)
Dec 30 08:55:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-up finished (pid 5850), status = 0x0
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Script pptp 135.1**.**.** --nolaunchpppd finished (pid 5837), status = 0x0
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-down started (pid 5927)
Dec 30 08:57:31 dongyf-desktop pppd[5833]: sent [LCP TermReq id=0x2 "MPPE disabled"]
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Waiting for 1 child processes...
Dec 30 08:57:31 dongyf-desktop pppd[5833]: script /etc/ppp/ip-down, pid 5927
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-down finished (pid 5927), status = 0x0

第三，/var/log/syslog的内容
Dec 30 08:55:27 dongyf-desktop pppd[5833]: pppd 2.4.4 started by root, uid 0
Dec 30 08:55:27 dongyf-desktop pppd[5833]: using channel 2
Dec 30 08:55:27 dongyf-desktop pppd[5833]: Using interface ppp0
Dec 30 08:55:27 dongyf-desktop pppd[5833]: Connect: ppp0 <--> /dev/pts/1
Dec 30 08:55:27 dongyf-desktop pptp[5838]: anon log[main:pptp.c:267]: The synchronous pptp option is NOT activated
Dec 30 08:55:27 dongyf-desktop pptp[5844]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Dec 30 08:55:27 dongyf-desktop pptp[5844]: anon log[ctrlp_disp:pptp_ctrl.c:738]: Received Start Control Connection Reply
Dec 30 08:55:27 dongyf-desktop pptp[5844]: anon log[ctrlp_disp:pptp_ctrl.c:772]: Client connection established.
Dec 30 08:55:27 dongyf-desktop ntpdate[5847]: can't find host ntp.ubuntu.com
Dec 30 08:55:27 dongyf-desktop ntpdate[5847]: no servers can be used, exiting
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pptp[5844]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Dec 30 08:55:28 dongyf-desktop pptp[5844]: anon log[ctrlp_disp:pptp_ctrl.c:857]: Received Outgoing Call Reply.
Dec 30 08:55:28 dongyf-desktop pptp[5844]: anon log[ctrlp_disp:pptp_ctrl.c:896]: Outgoing call established (call ID 0, peer's call ID 12.
Dec 30 08:55:28 dongyf-desktop pppd[5833]: rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfNak id=0x1 <magic 0x911431f4>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x5e87e6e1> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x5e87e6e1> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <auth chap MS-v2> <magic 0x96ad8ff5> <pcomp> <accomp>]
Dec 30 08:55:28 dongyf-desktop pppd[5833]: sent [LCP ConfAck id=0x2 <asyncmap 0x0> <auth chap MS-v2> <magic 0x96ad8ff5> <pcomp> <accomp>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xe140bd7c> <pcomp> <accomp>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CHAP Challenge id=0x3b <c816d0d56a41a167027ce8ea35b9aa70>, name = "pptpd"]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [CHAP Response id=0x3b <86894be60ee53272597b8970a51eb913b7c170e1b76025eed67c80203f85315e1c56a1956e475250b22c39ea4afc551900>, name = "dongyf"]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CHAP Success id=0x3b "S=288BD6230F969D036381A3AFB3EAFEEF33BCB437"]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: CHAP authentication succeeded
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: MPPE 128-bit stateless compression enabled
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 10.0.4.1>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [IPCP ConfAck id=0x1 <compress VJ 0f 01> <addr 10.0.4.1>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [IPCP ConfNak id=0x1 <addr 10.0.4.37> <ms-dns1 202.100.128.68> <ms-dns3 202.100.128.68>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: sent [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 10.0.4.37> <ms-dns1 202.100.128.68> <ms-dns3 202.100.128.68>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: rcvd [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr 10.0.4.37> <ms-dns1 202.100.128.68> <ms-dns3 202.100.128.68>]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: replacing old default route to eth0 [135.1**.**.*]
Dec 30 08:55:31 dongyf-desktop pppd[5833]: Cannot determine ethernet address for proxy ARP
Dec 30 08:55:31 dongyf-desktop pppd[5833]: local IP address 10.0.4.37
Dec 30 08:55:31 dongyf-desktop pppd[5833]: remote IP address 10.0.4.1
Dec 30 08:55:31 dongyf-desktop pppd[5833]: primary DNS address 202.100.128.68
Dec 30 08:55:31 dongyf-desktop pppd[5833]: secondary DNS address 202.100.128.68
Dec 30 08:55:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-up started (pid 5850)
Dec 30 08:55:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-up finished (pid 5850), status = 0x0
Dec 30 08:56:31 dongyf-desktop pptp[5844]: anon log[logecho:pptp_ctrl.c:676]: Echo Request received.
Dec 30 08:56:31 dongyf-desktop pptp[5844]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 6 'Echo-Reply'
Dec 30 08:57:31 dongyf-desktop pptp[5844]: anon log[pptp_handle_timer:pptp_ctrl.c:1049]: closing control connection due to missing echo reply
Dec 30 08:57:31 dongyf-desktop pptp[5844]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Dec 30 08:57:31 dongyf-desktop pptp[5844]: anon log[pptp_conn_close:pptp_ctrl.c:430]: Closing PPTP connection
Dec 30 08:57:31 dongyf-desktop pptp[5844]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 3 'Stop-Control-Connection-Request'
Dec 30 08:57:31 dongyf-desktop pptp[5844]: anon log[call_callback:pptp_callmgr.c:78]: Closing connection (call state)
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Script pptp 135.1**.**.** --nolaunchpppd finished (pid 5837), status = 0x0
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Modem hangup
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Connect time 2.0 minutes.
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Sent 1339537469 bytes, received 0 bytes.
Dec 30 08:57:31 dongyf-desktop pppd[5833]: restoring old default route to eth0 [135.192.80.1]
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-down started (pid 5927)
Dec 30 08:57:31 dongyf-desktop pppd[5833]: MPPE disabled
Dec 30 08:57:31 dongyf-desktop pppd[5833]: sent [LCP TermReq id=0x2 "MPPE disabled"]
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Connection terminated.
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Waiting for 1 child processes...
Dec 30 08:57:31 dongyf-desktop pppd[5833]: script /etc/ppp/ip-down, pid 5927
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Script /etc/ppp/ip-down finished (pid 5927), status = 0x0
Dec 30 08:57:31 dongyf-desktop pppd[5833]: Exit.


第四，系统信息：
Ubuntu 6.10 Edgy
dongyf@dongyf-desktop:~$ aptitude show ppp
软件包： ppp
状态: 已安装
自动安装: 否
版本号： 2.4.4rel-1ubuntu1
优先级： 标准
部分： base
维护者： Marco d'Itri <md@linux.it>
未压缩尺寸： 1040k
依赖于: libc6 (>= 2.4-1), libpam0g (>= 0.76), libpcap0.8 (>= 0.9.3-1), zlib1g
(>= 1:1.2.1), libpam-modules, libpam-runtime (>= 0.76-13.1), netbase,
procps
冲突: ppp-pam, ppp-udeb, pppdcapiplugin (<= 1:3.7.2005-07-09-2), makedev (<
2.3.1-56)
代替: ppp-pam, ppp-udeb
描述： Point-to-Point Protocol (PPP) daemon
The Point-to-Point Protocol (PPP) provides a standard way to transmit datagrams
over a serial link, as well as a standard way for the machines at either end of
the link (the "peers" to negotiate various optional characteristics of the
link. Using PPP, a serial link can be used to transmit Internet Protocol (IP)
datagrams, allowing TCP/IP connections between the peers.


dongyf@dongyf-desktop:~$ apeitude show pptp-linux
bash: apeitude: command not found
dongyf@dongyf-desktop:~$ aptitude show pptp-linux
软件包： pptp-linux
状态: 已安装
自动安装: 否
版本号： 1.7.0-2ubuntu1
优先级： 可选
部分： net
维护者： Ola Lundqvist <opal@debian.org>
未压缩尺寸： 168k
依赖于: libc6 (>= 2.4-1), ppp (>= 2.4.2)
建议: kernel-patch-mppe
描述： Point-to-Point Tunneling Protocol (PPTP) Client
Client for the proprietary Microsoft Point-to-Point Tunneling Protocol, PPTP.
Allows connection to a PPTP based VPN as used by employers and some cable and
ADSL service providers. MPPE (Microsoft Point-to-Point Encryption) is supported
with the stock kernel.

[implements]

可以试下。pptpconfig.具体是不是这个名字不记得了。Google下吧。。还有个KVpnc的好象不错。都 可以在源里找到。

[shrek2005]

我是在VMware下装的，难道是这个原因？VM的网络桥接功能和pppd配合有Bug?

[shrek2005]

晕啊，今天（12月29日）直接在机子上安装了Ubuntu 6.10，还是同样的问题。
哭啊！！！！
另外，还有一个现象前面没提，就是用ifconfig可以看到，在VPN自动断线前，发出的包为1.1Mbps，接收为0。

[eexpress]

network-manager
network-manager-gnome
network-manager-pptp
这样的组合最容易配置。通知栏界面的点选配置。

[shrek2005]

command not found。
这三个命令是Ubuntu的吗？
能详细解释一下吗？

在新立得软件管理器里找到network-manager和network-manager-gnome，并安装，不过不知道如何使用啊，还是command not found。
另外，由于上不了网，只能从安装CD上找到这两个包，network-manager-pptp从哪里可以下载啊？

[eexpress]

都是源的。edgy的。比较智能，有些小bug（休眠），缺陷是必须dhcp支持。

[eexpress]

另外：安装了包以后，把系统的/etc/network/interface里面清空，留lo的而已。图标applet是叫nm-applet，服务叫NetworkManager。

[xiaowl]

这个装好pptp-linux之后
去配置下/etc/ppp下面的 chap-secrets
EG
sudo gedit chap-secrets
把下面的内容写进去，

# Secrets for authentication using CHAP
# client server secret IP addresses
test * test
这里写的是pptp拨号的密码和用户
然后 pptp 地址 user test
之后添加你们公司的路由到路由表
EG
router add -net 192.168.0.2 netmask 255.255.255.0 gw 192.168.0.1
这样应该就能通讯了

[xiaowl]

刚我又试了下，能拨通，不能通信！奇怪了，fedora下我用的很正常

[shrek2005]

刚我又试了下，能拨通，不能通信！奇怪了，fedora下我用的很正常

搞好了没有？交流一下啊。我郁闷很久了。
我的配置和你的差不多，只是ppp参数都写在Peers文件里了，optins.pptp我清空了。
我开始怀疑是存在BUG了。所以征集一下6.10edgy下的成功案例。

[peter_ustc]

连接成功以后需要配置路由信息，包括通过以前的网关连接到vpn服务器和默认的网关设置成空，这样就可以正常通信了。

我安装的时候出的就是这个问题，郁闷了好几天，终于在实验室师兄的帮忙下找到了问题所在。