Home › Forums › OS X Server and Client Discussion › Questions and Answers › VPN on OSX server: which other services are required?
- This topic has 2 replies, 1 voice, and was last updated 23 years, 4 months ago by
Paul Schoffelen.
-
AuthorPosts
-
June 16, 2003 at 9:26 am #355870
Paul Schoffelen
ParticipantThank you for your VPN on OSX articles.
Having read and implemented these articles, and specifically the last update which included the VPN_ARGS=” ” string, the VPN service started without reporting an error.
However, I was not able to achieve a connection from an external address (even after bypassing my airport router).
Since I do not have DHCP or NAT running on the server, but there is some mention of NAT and use of the 10.0.1.x range in the VPN article I wonder which services are required to run besides VPN.Momentary setup:
OSX server running as Web and File server only, no mail – dialin – DHCP or subnets.
Firewall enabled, “any port’ to my external address = allow
VPN set up as given in the article https://www.afp548.com/Articles/Jaguar/vpnd.html, starts without error.
Extra free IP defined as port in network panels, this IP entered in /etc/ppp/pptp_addres for use by VPN.
No response from the Server when I try PPPoE from the external address.My guess:
Having formerly set up a Proxy ARP linux router I think I’m using the wrong address to get VPN going, probably need to turn on DHCP or NAT and use an address that the IPFORWARD proces can use from the other side of the routing process ?
or else our incoming router might block VPN on port 1723.I would apreciate info on the required services because simply turning on DHCP or NAT might cause problems on our central network, which allready has DHCP in use, so if needed I must do this carefully.
Paul Schoffelen.
June 17, 2003 at 9:28 am #355882Paul Schoffelen
ParticipantThere is no entry in /var/log/system.log for trying to connect from my external address.
I’ve setup a local machine (same subnet as server, no router in the path) and tried connecting from this machine: again no entry in the log.
The client machine simply states “could not find a PPPoE server” allthough VPND is running as a process on the server. An ssh connection from the local machine shows up in the log. I also turned the firewall off for a few moments to test the local connection; no succes.If basically all the services needed are running there must be another problem or misconfiguration with the server, and I’ll have to delve deeper in the logs.
Thanks.
Paul.June 19, 2003 at 4:43 pm #355923Paul Schoffelen
ParticipantHello Joel,
Yes, I was indeed using the wrong connection!
I did look at Internet Connect earlier, which only gives the dialog option to use the internal modem unless you enable PPPoE on the ethernet interface. Once you do this the built-in Ethernet shows up as a possible port for Internet Connect, complete with pasword and serveraddress, but its indeed PPPoE instead of PPTP.
Looking at the File menu of Internet Connect I found the VPN option for PPTP.
Many thanks for enlightening me 😀The server now responds, system log shows connection up to
pppd[10197]: MSCHAP-v2 peer authentication succeeded for ……
After that point the connection still fails:
pppd[10197]: Could not determine local IP address
pppd[10197]: Connection terminated.The extra port I defined on the server functions, I can ping the address, and its correctly entered in pptp_addresses. Its not usable though.
I gues I still have to setup the server with NAT or DHCP to provide a port ❓Best wishes,
Paul. -
AuthorPosts
- You must be logged in to reply to this topic.