VPND com.apple.RemoteAccessServers.plist and OfferedRoutes

[Bill Eccles]

Gentleones,

I’ve managed to get Apple’s vpnd running on a non-OSXS box and therefore don’t have the server admin tools available to manage the com.apple.RemoteAccessServers.plist (hereinafter referred to as “c.a.RAS.p” which almost pronounces well).

The problem I’m having right now is that, though packets get routed from the client (192.168.0.200) to the server (192.168.0.3), the client can’t see anything else. “Else” is anything on the 255.255.255.0 subnet, including a printer I need in the next 24 hours… (nothing like a little pressure, is there?).

Also, the client can’t see any other IP addresses–anywhere! No google, no nothin’. Kinda’ peculiar, no?

So… question is, do I need to:
1) Install the threesome of keys: OfferedRouteAddresses, OfferedRouteMasks, and OfferedRouteTypes, and, if so, what do they look like? (I.e., what’s the correct structure and verbiage for the dictionary?)

and/or

2) Fix something else in my c.a.RAS.p file? It’s been boiled down to the very basics and, in fact, looks exactly like this:

<dict>
        <key>Servers</key>
        <dict>
                <key>myvnc</key>
                <dict>
                        <key>Interface</key>
                        <dict>
                                <key>Type</key>
                                <string>PPP</string>
                                <key>SubType</key>
                                <string>PPTP</string>
                        </dict>



                        <key>IPv4</key>
                        <dict>
                                <key>DestAddresses</key>
                                <array>
                                        <string>192.168.0.200</string>
                                        <string>192.168.0.201</string>
                                        <string>192.168.0.202</string>
                                        <string>192.168.0.203</string>
                                </array>
                        </dict>

                        <key>PPP</key>
                        <dict>
                                <key>CCPEnabled</key>
                                <integer>1</integer>
                                <key>CCPProtocols</key>
                                <array>
                                        <string>MPPE</string>
                                </array>
                                <key>MPPEKeySize128</key>
                                <integer>1</integer>
                                <key>MPPEKeySize40</key>
                                <integer>0</integer>

                                <key>AuthenticatorProtocol</key>
                                <array>
                                        <string>MSCHAP2</string>
                                </array>
                        </dict>

                        <key>AuthenticatorEAPPlugins</key>
                        <array>
                        </array>

                        <key>Server</key>
                        <dict>
                                <key>VerboseLogging</key>
                                <integer>1</integer>
                        </dict>

                </dict>

        </dict>
</dict>

Anyone able to lend a hand?

Thanks,
Bill

[Bill Eccles]

Joel!

You ‘DA MAN!

ASKED and ANSWERED!

OK, I s’pose there are other DA MANs out there, but Joel answered first. And he answered 100% correctly. It does indeed work.

Many thanks, and I hope this helps anyone else who may have encountered this problem,
BIll

[kevinh]

I’d love to see an article like that. 🙂

Kevin
mac-fusion

[Bill Eccles]

Forgot to let you know, I only had to move the vpnd binary over. Nothing else.

Bill

[Author]

Posts