AFP548 Changing the world one server at a time.

VPN on OSX server: which other services are required?

Home › Forums › OS X Server and Client Discussion › Questions and Answers › VPN on OSX server: which other services are required?

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #355870
    Paul Schoffelen
    Participant

    Thank you for your VPN on OSX articles.
    Having read and implemented these articles, and specifically the last update which included the VPN_ARGS=” ” string, the VPN service started without reporting an error.
    However, I was not able to achieve a connection from an external address (even after bypassing my airport router).
    Since I do not have DHCP or NAT running on the server, but there is some mention of NAT and use of the 10.0.1.x range in the VPN article I wonder which services are required to run besides VPN.

    Momentary setup:
    OSX server running as Web and File server only, no mail – dialin – DHCP or subnets.
    Firewall enabled, “any port’ to my external address = allow
    VPN set up as given in the article https://www.afp548.com/Articles/Jaguar/vpnd.html, starts without error.
    Extra free IP defined as port in network panels, this IP entered in /etc/ppp/pptp_addres for use by VPN.
    No response from the Server when I try PPPoE from the external address.

    My guess:
    Having formerly set up a Proxy ARP linux router I think I’m using the wrong address to get VPN going, probably need to turn on DHCP or NAT and use an address that the IPFORWARD proces can use from the other side of the routing process ?
    or else our incoming router might block VPN on port 1723.

    I would apreciate info on the required services because simply turning on DHCP or NAT might cause problems on our central network, which allready has DHCP in use, so if needed I must do this carefully.

    Paul Schoffelen.

    #355882
    Paul Schoffelen
    Participant

    There is no entry in /var/log/system.log for trying to connect from my external address.
    I’ve setup a local machine (same subnet as server, no router in the path) and tried connecting from this machine: again no entry in the log.
    The client machine simply states “could not find a PPPoE server” allthough VPND is running as a process on the server. An ssh connection from the local machine shows up in the log. I also turned the firewall off for a few moments to test the local connection; no succes.

    If basically all the services needed are running there must be another problem or misconfiguration with the server, and I’ll have to delve deeper in the logs.
    Thanks.
    Paul.

    #355923
    Paul Schoffelen
    Participant

    Hello Joel,

    Yes, I was indeed using the wrong connection!

    I did look at Internet Connect earlier, which only gives the dialog option to use the internal modem unless you enable PPPoE on the ethernet interface. Once you do this the built-in Ethernet shows up as a possible port for Internet Connect, complete with pasword and serveraddress, but its indeed PPPoE instead of PPTP.
    Looking at the File menu of Internet Connect I found the VPN option for PPTP.
    Many thanks for enlightening me 😀

    The server now responds, system log shows connection up to
    pppd[10197]: MSCHAP-v2 peer authentication succeeded for ……
    After that point the connection still fails:
    pppd[10197]: Could not determine local IP address
    pppd[10197]: Connection terminated.

    The extra port I defined on the server functions, I can ping the address, and its correctly entered in pptp_addresses. Its not usable though.
    I gues I still have to setup the server with NAT or DHCP to provide a port ❓

    Best wishes,
    Paul.

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.