SEARCH
ASUS Member ID
Password
Forgot password?
Join member

ASUS Support Home Location : Forum > Wireless > RT-AC66U  
  Forum  
  Topic : [Problem]VPN Not working New Topic
RMerlin
VIP Member
Posts : 913
Level :
Tech Points : 494
From: Canada
Posted:10/7/2012 1:39:00 AM # 11

Quote:
Author: ar34z Posted: 10/6/2012 2:57:00 PM

Sorry to say that VPN is still not working :( I'm using 3.0.0.4.220.18 (Merlin build).

My steps:
I cleared the log and tried to connect using my phone. It failed. There's nothing added to the log.

Next I simply clicked "apply" on the VPN screen. No user added cos there's already one in there.
Now this is added to the log:

Oct  6 08:47:07 notify_rc : restart_pptpd
Oct  6 08:47:07 pptpd[944]: MGR: Config file not found!
Oct  6 08:47:07 pptpd[944]: MGR: Maximum of 100 connections reduced to 10, not enough IP addresses given
Oct  6 08:47:07 pptpd[944]: accel-pptpd-0.8.5 compiled for pppd-2.4.5, linux-2.6.22.19
Oct  6 08:47:07 start_nat_rules: apply the nat_rules!
Oct  6 08:47:07 pptpd[946]: MGR: Manager process started
Oct  6 08:47:07 pptpd[946]: MGR: Maximum of 10 connections available

I connect one more time with my phone and it connects.
Now this is added:

Oct  6 08:49:20 pptpd[962]: CTRL: Client 62.133.64.8 control connection started
Oct  6 08:49:20 pptpd[962]: CTRL: Starting call (launching pppd, opening GRE)
Oct  6 08:49:21 pptp[963]: Plugin pptp.so loaded.
Oct  6 08:49:21 pptp[963]: PPTP plugin version 0.8.5 compiled for pppd-2.4.5, linux-2.6.22.19
Oct  6 08:49:21 pptp[963]: pppd 2.4.5 started by admin, uid 0
Oct  6 08:49:21 pptp[963]: Using interface ppp10
Oct  6 08:49:21 pptp[963]: Connect: ppp10 <--> pptp (62.133.64.8)
Oct  6 08:49:27 pptp[963]: MPPE 128-bit stateless compression enabled
Oct  6 08:49:30 pptp[963]: Cannot determine ethernet address for proxy ARP
Oct  6 08:49:30 pptp[963]: local  IP address 192.168.1.1
Oct  6 08:49:30 pptp[963]: remote IP address 192.168.10.11


To me it seems although the interface shows that the pptp service is running (I clicked the tab VPN Status where it says "PPTP VPN Server - Running"), it is not running. Otherwise it say "pptp.so loaded". Or am I wrong?

Any thoughts?


Based on this log, your VPN is working just fine. Your problem is most likely with the routing as seen in the two last lines of that log. Your LAN uses the 192.168.1.0/24 network, while your VPN clients are using the 192.168.10.0/24 client. You can't route the two segments unless you setup a route on the client, or you change your VPN clients to also use the 192.168.1.0/24 network.

Best is to modify the DHCP range to only handle 192.168.1.2-192.168.1.199, then configure VPN clients to allocate address in the 192.168.1.200 to 192.168.1.210 range. That way VPN clients will be able to directly route to your LAN.

  Reply Reply Quote & Reply Quote & Reply
Custom RT-N16/RT-AC56U/RT-N66U/RT-AC66U firmware: http://www.lostrealm.ca/asuswrt-merlin
ar34z
VIP Member
Posts : 11
Level :
Tech Points : 2
From: Netherlands
Posted:10/9/2012 2:29:00 AM # 12
All right, that sounds like a solution :)
I can't remember entering 192.168.10.x, or perhaps it's been a typo that should have been 192.168.1.x or it could have been set by default.

I changed the data, waited 40 minutes and now it finally seems to be working!
Perhaps this was the problem from the beginning :/

Thanks a lot for your help, I hope it keeps working now

  Reply Reply Quote & Reply Quote & Reply
ar34z
VIP Member
Posts : 11
Level :
Tech Points : 2
From: Netherlands
Posted:10/9/2012 4:26:00 AM # 13
Just checking if it's still running but unfortunately it's still doing the same. Thinking of it, how could the IP settings fix it anyway, if it works right after I press some 'save settings' button.

I hung up, and reconnected and checking how it would respond if my credentials are wrong:
Oct  8 21:41:33 pptpd[1308]: CTRL: Client 62.133.68.19 control connection started
Oct  8 21:41:34 pptpd[1308]: CTRL: Starting call (launching pppd, opening GRE)
Oct  8 21:41:34 pptp[1309]: Plugin pptp.so loaded.
Oct  8 21:41:34 pptp[1309]: PPTP plugin version 0.8.5 compiled for pppd-2.4.5, linux-2.6.22.19
Oct  8 21:41:34 pptp[1309]: pppd 2.4.5 started by admin, uid 0
Oct  8 21:41:34 pptp[1309]: Using interface ppp10
Oct  8 21:41:34 pptp[1309]: Connect: ppp10 <--> pptp (62.133.68.19)
Oct  8 21:41:35 pptp[1309]: Peer test failed CHAP authentication
Oct  8 21:41:36 pptp[1309]: Connection terminated.
Oct  8 21:41:36 pptp[1309]: Exit.

Oct  8 21:41:36 pptpd[1308]: CTRL: Client pppd TERM sending
Oct  8 21:41:36 pptpd[1308]: CTRL: Client pppd finish wait
Oct  8 21:41:36 pptpd[1308]: CTRL: EOF or bad error reading ctrl packet length.
Oct  8 21:41:36 pptpd[1308]: CTRL: couldn't read packet header (exit)
Oct  8 21:41:36 pptpd[1308]: CTRL: Fatal error reading control message in disconnect sequence
Oct  8 21:41:36 pptpd[1308]: CTRL: Client 62.133.68.19 control connection finished


Seems like it's responding to that.
I waited like 30 minutes or so and tried again, with no result and nothing in the log.

Are there any commands I can run over ssh to check if there is secretly something wrong inside? Anything to compare: when it does work and when it doesn't work?

  Reply Reply Quote & Reply Quote & Reply
RMerlin
VIP Member
Posts : 913
Level :
Tech Points : 494
From: Canada
Posted:10/9/2012 10:03:00 PM # 14
Oct 8 21:41:35 pptp[1309]: Peer test failed CHAP authentication

That right there is a failed user/password authentication.

  Reply Reply Quote & Reply Quote & Reply
Custom RT-N16/RT-AC56U/RT-N66U/RT-AC66U firmware: http://www.lostrealm.ca/asuswrt-merlin
ar34z
VIP Member
Posts : 11
Level :
Tech Points : 2
From: Netherlands
Posted:10/10/2012 4:55:00 AM # 15
Yes I tried that on purpose, to see if and how it would respond if my user/pass are wrong.
I did that after I first had a successful login after saving some settings.

But if I try to login now, my phone says "incorrect username/password". But there's nothing added to the log. :(

Edit:
Using the 'Run cmd' in the Tools section, I ran "ps" which shows me a list of running services.
I compared both services list in a situation where I couldn't login and where I could login. (As said before, I can login after clicking any "save" button to save settings.)

I think I tested it wrong, now it keeps connecting. I clicked 'apply' before testing if it didn't work. I'll try again tomorrow.
"ps" seems to show '1696 admin      628 S    pptpd -c /tmp/pptpd/pptpd.conf -o /tmp/pptpd/options' in both situations.
I found a log file in /var/log/pptpd-pppd.log and I wanna check that in both situations as well, along with a proper process status test.

  Reply Reply Quote & Reply Quote & Reply
Real
Posts : 3
Level :
Tech Points : 2
From: Canada
Posted:9/25/2014 9:38:00 PM # 16
Hi,

I just wanna thank you for the post. I was looking for a solution for a problem I had setting up my VPN connection with an Asus RT-N56U and an Android phone (Nexus 4). I changes the IP address to use the same range (192.168.1.x) instead of (192.168.10.x). I seems to be working. Unfortunately, the Asus router was using the latest as a default setting witch didn't worked.

Thank you
Real

  Reply Reply Quote & Reply Quote & Reply
mahockey
Member
Posts : 5
Level :
Tech Points : 4
From: IRL
Posted:11/12/2014 7:17:00 PM # 17
I have opened a similar thread about a bug I found which relates to VPN Server.It might  be related...

"Hi,

I would like to report a bug that kills the VPN server on the following device/firmware:

Asus-ac66u       3.0.0.4.376_1123

If the DMZ feature is enabled then it kills all PPTP traffic over the VPN server if enabled.

even though the DMZ is only set for a single LAN i.p it seems to block all packets regardless.
-----------------------------------------------------------------------------------------------
There is a bit of a work around but it really is not ideal:
forward port 1723, 50, 51 and 500 to the internal router IP address seems to allow PPTP traffic get through, thus enabling the VPN Server to function again."


  Reply Reply Quote & Reply Quote & Reply
First  Prev  1 2
Previous Topic:: Next Topic
Feedback for our Website ModeratorModerator: New Topic Related FAQ Related FAQ Forum Home Forum Home
Forum Model :
Legal Information | Privacy Policy | Sitemap | Contact Us | ASUS Global
  ©ASUSTeK Computer Inc. All rights reserved.