Setting up the routes for pptp

arsham · 10-16-2008, 08:10 AM

Hi there,
I managed to make a pptp connection with kvpnc.
I get connected , but I have problems with routing.
After connection stablished, I have no access to the internet.

Here is my settings :

Code:

eth2 : inet addr:192.168.1.10  Bcast:192.168.1.255  Mask:255.255.255.0

The route table before vpn :

Code:

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth2
169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 eth2
0.0.0.0         192.168.1.1     0.0.0.0         UG    100    0        0 eth2

The route table after vpn :

Code:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     255.255.255.255 UGH   0      0        0 ppp0
10.10.10.1      0.0.0.0         255.255.255.255 UH    0      0        0 ppp0
64.22.72.121    192.168.1.1     255.255.255.255 UGH   0      0        0 eth2
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth2
169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 eth2
0.0.0.0         10.10.10.1      0.0.0.0         UG    0      0        0 ppp0
0.0.0.0         192.168.1.1     0.0.0.0         UG    100    0        0 eth2

Regards

TB0ne · 10-16-2008, 09:11 AM

Quote:

Originally Posted by arsham

Hi there,
I managed to make a pptp connection with kvpnc.
I get connected , but I have problems with routing.
After connection stablished, I have no access to the internet.

That would make sense. When you establish a VPN tunnel, you're essentially becoming a part of that network. Any traffic you send out is by default, routed to it. So if you have a connection to your office network, and they're using a proxy-server to get out to the internet, your home system is now part of your office network...it will also have to use that proxy server.

Unless you've got multiple NIC's, then you can do some tricks with your routing table, but that's alot of work. You'd have to route your office traffic to the office network, and anything unknown out your other NIC.

arsham · 10-16-2008, 12:44 PM

Quote:

Originally Posted by TB0ne

That would make sense. When you establish a VPN tunnel, you're essentially becoming a part of that network. Any traffic you send out is by default, routed to it. So if you have a connection to your office network, and they're using a proxy-server to get out to the internet, your home system is now part of your office network...it will also have to use that proxy server.

Unless you've got multiple NIC's, then you can do some tricks with your routing table, but that's alot of work. You'd have to route your office traffic to the office network, and anything unknown out your other NIC.

Thank you for replying.
What can I do to have access to internet via this vpn?
This is a commercial win server, which provides vpn.

Thanks

TB0ne · 10-16-2008, 12:55 PM

Quote:

Originally Posted by arsham

Thank you for replying.
What can I do to have access to internet via this vpn?
This is a commercial win server, which provides vpn.

Thanks

As I said, either set up a route out another NIC on your machine to the Internet, or find out the proxy server settings on that private network, and use those.

bvn · 10-25-2008, 09:17 PM

I am working on a "best pratice" as to how to configure a Fedora (FC9 on an eeepc-1000 at the moment) laptop to connect to an M$ exchange server. My "operational baseline" is my T40 laptop with XP-pro. The objective is to get the eeepc-1000 with FC9 to operate just as easily (as transparently). Note: both are 802.11 connected.
---
I have installed the network-manager-pptp plugin and configured the connection profile with same information that the T40 required. The M$ machine rejects my eeepc-1000 VPN approaches because FC9 presents "localhost.localdomain" for authentication and all the M$ server wants to hear is userid and password.
---
How do I train my FC9 laptop to speak M$ VPN authentication?
---
I can migrate to certificate based authentication, if I knew where in Fedora I should "park" them. Iv'e also played with open-vpn and vpnc (cisco) but they are not in my target domain (so to speak :-)
--- thanks