help configure VPN connection to windows office

tasty_minerals · 2012-07-23 21:42:35

I need to set a VPN connection to work office, which is windows lan. I used to set it up via nm-applet, all worked just fine and after the connection was up, I used remmina to connect to remote machine of mine.
Unfortunately I reinstalled the system recently and nm-applet stopped working for some unknown reason. I set up pptp VPN connection and it seems to work, but remmina does not connect to RDP server now.
I need some information to understand the differences of what I did and what I'm doing now.
What methods does nm-applet use to set up VPN link?
How pptp is different?
Can I set VPN from console and how?

Here is the output of "ip addr show" after I run "pon myvpn":

: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether c8:0a:a9:bf:1d:11 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.8/24 brd 192.168.1.255 scope global eth0
    inet6 fe80::ca0a:a9ff:febf:1d11/64 scope link 
       valid_lft forever preferred_lft forever
3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 70:f1:a1:91:3e:c7 brd ff:ff:ff:ff:ff:ff
11: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1396 qdisc pfifo_fast state UNKNOWN qlen 3
    link/ppp 
    inet 10.6.10.16 peer 10.6.9.88/32 scope global ppp0

or ifconfig :

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500  metric 1
        inet 192.168.1.8  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::ca0a:a9ff:febf:1d11  prefixlen 64  scopeid 0x20<link>
        ether c8:0a:a9:bf:1d:11  txqueuelen 1000  (Ethernet)
        RX packets 214388  bytes 288687253 (275.3 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 153994  bytes 17145294 (16.3 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 16436  metric 1
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 0  (Local Loopback)
        RX packets 5  bytes 560 (560.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 5  bytes 560 (560.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1396  metric 1
        inet 10.6.10.16  netmask 255.255.255.255  destination 10.6.9.88
        ppp  txqueuelen 3  (Point-to-Point Protocol)
        RX packets 8  bytes 80 (80.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 8  bytes 80 (80.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Last edited by tasty_minerals (2012-07-23 21:44:28)

fukawi2 · 2012-07-23 23:27:52

What is the output of `netstat -r`?
I'm guessing you don't have a proper-route setup to the address space of your office (10.6.0.0/16 I'm guessing?)

Post your configuration for us too please.

Last edited by fukawi2 (2012-07-23 23:28:03)

tasty_minerals · 2012-07-24 05:36:55

etstat -r
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
default         192.168.1.1     0.0.0.0         UG        0 0          0 eth0
192.168.1.0     *               255.255.255.0   U         0 0          0 eth0
217.21.63.8     192.168.1.1     255.255.255.255 UGH       0 0          0 eth0

after pon epam

ernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
default         192.168.1.1     0.0.0.0         UG        0 0          0 eth0
10.6.9.88       *               255.255.255.255 UH        0 0          0 ppp0
192.168.1.0     *               255.255.255.0   U         0 0          0 eth0
217.21.63.8     192.168.1.1     255.255.255.255 UGH       0 0          0 eth0

Should I use pptp at all?
I'm connected to the internet via DSL line with modem that configured to work as router. And as mentioned before I had no trouble at all with VPN on nm-applet+remmina.

fukawi2 · 2012-07-24 23:19:24

You seem to be missing the route that send the traffic for your work network thru the VPN. You have one route for 10.6.9.88/32, but that is only for that address (hence the /32). I can't remember if there should be a second route for the rest of your network, or if that route should be bigger (ie /24 or /16 etc)

Being that I'm not your network administrator for your company, I can't tell you what it should be, but that certainly seems to be the problem.

windscape · 2012-07-25 02:38:10

Hi,

I agree with fukawi2, in that you're missing the routing entries to route the traffic across your VPN. This article: https://wiki.archlinux.org/index.php/Mi … pptpclient deals with a Microsoft VPN but it has some routing commands that will probably help. The command there will route all traffic through the VPN, which might slow things down. You'll have to decide if the performance loss is worth it or not.

Arch Linux

#1 2012-07-23 21:42:35

help configure VPN connection to windows office

#2 2012-07-23 23:27:52

Re: help configure VPN connection to windows office

#3 2012-07-24 05:36:55

Re: help configure VPN connection to windows office

#4 2012-07-24 23:19:24

Re: help configure VPN connection to windows office

#5 2012-07-25 02:38:10

Re: help configure VPN connection to windows office

Board footer