PPTP vpn / static ip help please

janlipi · December 31, 2012, 4:31pm

Hi

I am linux newbie so please help me with this issue:
I need to connect to vpn serwer (PPTP). I am using NetworkManager and a widget for configure/run the connection.

Not the problem: I can connect easilly BUT all the time a have DHCP address assigned automatically even If I put my static VPN IP that I must use for this connection.

My setup:
First tab (PPTP) - VPN IP, user name, NT domain
Second tab (IPv4) - manual method selected, IP (correct) provided, mas, gateway, dns…
THird tab (IPv^) - not used

As I said I can connect but I dont know why I have dynamic IP all the time while there is manual one specified in the setup. For example i use manual IP: 192.168.111.100 but I am assigned 192.168.111.1

OpenSuse12.2

please help… I am already fighting it 2 days

thanks in advance

BTW
From networkmanager log:

Dec 31 16:33:21 pc101aw NetworkManager[631]: CHAP authentication succeeded
Dec 31 16:33:21 pc101aw NetworkManager[631]: MPPE 128-bit stateless compression enabled
Dec 31 16:33:24 pc101aw NetworkManager[631]: local IP address 192.168.111.1
Dec 31 16:33:24 pc101aw NetworkManager[631]: remote IP address XXX
(…)
Dec 31 16:33:24 pc101aw NetworkManager[631]: <info> Tunnel Device: ppp0
Dec 31 16:33:24 pc101aw NetworkManager[631]: <info> Internal IP4 Address: 192.168.111.1
Dec 31 16:33:24 pc101aw NetworkManager[631]: <info> Internal IP4 Prefix: 32

But why the heck 192.168.111.1 when there is different IP in setup…

What is important: I can easilly setup the connecting with this static IP under Win7 so serverside it works and IP is correct…

deano_ferrari · January 1, 2013, 2:39am

Hmm… I connect to my work server via PPTP, but I use DHCP (automatic settings) for this. Is your PPTP network subnet different to your LAN subnet?

deano_ferrari · January 1, 2013, 2:52am

Are you the administrator for your PPTP server? It might be that the PPTP server is not configured to allow the statically assigned IP perhaps. For example, maybe this applies:

http://technet.microsoft.com/en-us/library/ff687875(WS.10).aspx

janlipi · January 2, 2013, 10:33pm

Thanks.
But the problem is that from Windows i can setup connection and it works (static IP). Using Win7 I define VPN connection - I enter VPN address, local IP that I want to have assigned when connected and … voila. It works.
When I switch to suse - no luck, all the time I got IP assigned by DHCP.
So even if there is something weird with the server - when connecting from Win client it works

Unfortunately I am not administrator of this VPN server and I cannot check anything there - I already tried to talk to server admin but they suggested to switch to windows

deano_ferrari · January 2, 2013, 11:37pm

Open a root terminal, and capture the output from when you start the VPN

 tail -f /var/log/messages

Let’s see if that helps tell the story…

Maybe the address you’re trying to assign lies within the server’s DHCP range. You could try assigning another.

deano_ferrari · January 2, 2013, 11:58pm

I have my NM connections all set up as system connections. As such the configurations all reside in /etc/NetworkManager/system-connections/

I would like to see your VPN config. For reference, I have

[connection]
id=****** VPN
uuid=1c0d3cfe-2b7d-489d-ba85-1d46fb122942
type=vpn
autoconnect=false
timestamp=1350533729

[vpn]
service-type=org.freedesktop.NetworkManager.pptp
gateway=*******
user=*******
password-flags=1

[ipv6]
method=ignore

[ipv4]
method=auto

Let’s make sure that your config is as expected for static IP.

janlipi · January 3, 2013, 12:14am

Below is debug log. What is worrying me - i cannot see any reference to the IP i declared as the one to be used as my local vpn ip.
Especially one line is suspicious:

Jan  3 00:54:17 pc101aw NetworkManager[634]: sent [IPCP ConfReq id=0x2  <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
Jan   3 00:54:17 pc101aw NetworkManager[634]: rcvd [IPCP ConfNak id=0x2  <addr 192.168.111.1> <ms-dns1 192.168.202.44> <ms-dns2  192.168.100.44>]

Shouldn’t it be something like: sent [IPCP ConfReq id=0x2 <addr 192.168.111.XXX> (with IP address that I entered in config) ?

debug log: XXX - VPN gateway:

Jan  3 00:54:08 pc101aw NetworkManager[634]: <info> Starting VPN service 'pptp'...
Jan  3 00:54:08 pc101aw NetworkManager[634]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 15044
Jan  3 00:54:08 pc101aw NetworkManager[634]: <info> VPN service 'pptp' appeared; activating connections

(...)

Jan  3 00:54:14 pc101aw NetworkManager[634]: CHAP authentication succeeded
Jan  3 00:54:14 pc101aw NetworkManager[634]: sent [CCP ConfReq id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
Jan  3 00:54:14 pc101aw NetworkManager[634]: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
Jan  3 00:54:14 pc101aw NetworkManager[634]: rcvd [IPCP ConfReq id=0x0 <addr XXX.XXX.XXX.XXX>]
Jan  3 00:54:14 pc101aw NetworkManager[634]: sent [IPCP ConfAck id=0x0 <addr XXX.XXX.XXX.XXX>]
Jan  3 00:54:14 pc101aw NetworkManager[634]: rcvd [CCP ConfReq id=0x0 <mppe +H -M +S +L -D +C>]
Jan  3 00:54:14 pc101aw NetworkManager[634]: sent [CCP ConfRej id=0x0 <mppe +H -M +S +L -D +C>]
Jan  3 00:54:14 pc101aw NetworkManager[634]: rcvd [CCP ConfRej id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
Jan  3 00:54:14 pc101aw NetworkManager[634]: sent [CCP ConfReq id=0x2]
Jan  3 00:54:14 pc101aw NetworkManager[634]: rcvd [CCP ConfReq id=0x1]
Jan  3 00:54:14 pc101aw NetworkManager[634]: sent [CCP ConfAck id=0x1]
Jan  3 00:54:14 pc101aw NetworkManager[634]: rcvd [CCP ConfAck id=0x2]
Jan  3 00:54:14 pc101aw NetworkManager[634]: rcvd [CCP TermReq id=0x2]
Jan  3 00:54:14 pc101aw NetworkManager[634]: CCP terminated by peer
Jan  3 00:54:14 pc101aw NetworkManager[634]: sent [CCP TermAck id=0x2]
Jan  3 00:54:14 pc101aw NetworkManager[634]: Compression disabled by peer.
Jan  3 00:54:17 pc101aw NetworkManager[634]: sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: rcvd [IPCP ConfReq id=0x1 <addr XXX.XXX.XXX.XXX>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: sent [IPCP ConfAck id=0x1 <addr XXX.XXX.XXX.XXX>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: sent [IPCP ConfReq id=0x2 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: rcvd [IPCP ConfNak id=0x2 <addr 192.168.111.1> <ms-dns1 192.168.202.44> <ms-dns2 192.168.100.44>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: sent [IPCP ConfReq id=0x3 <addr 192.168.111.1> <ms-dns1 192.168.202.44> <ms-dns2 192.168.100.44>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: rcvd [IPCP ConfAck id=0x3 <addr 192.168.111.1> <ms-dns1 192.168.202.44> <ms-dns2 192.168.100.44>]
Jan  3 00:54:17 pc101aw NetworkManager[634]: local  IP address 192.168.111.1
Jan  3 00:54:17 pc101aw NetworkManager[634]: remote IP address XXX.XXX.XXX.XXX
Jan  3 00:54:17 pc101aw NetworkManager[634]: primary   DNS address 192.168.202.44
Jan  3 00:54:17 pc101aw NetworkManager[634]: secondary DNS address 192.168.100.44
Jan  3 00:54:17 pc101aw NetworkManager[634]: Script /etc/ppp/ip-up started (pid 15059)
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> VPN connection 'YYYYYYYYYY' (IP Config Get) reply received.
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> Internal IP4 Address: 192.168.111.1
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> Internal IP4 Prefix: 32
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> Internal IP4 Point-to-Point Address: XXX.XXX.XXX.XXX
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> Maximum Segment Size (MSS): 0
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> Forbid Default Route: no
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> Internal IP4 DNS: 192.168.202.44
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> Internal IP4 DNS: 192.168.100.44
Jan  3 00:54:17 pc101aw NetworkManager[634]: <info> DNS Domain: '(none)'
Jan  3 00:54:17 pc101aw NetworkManager[634]: Script /etc/ppp/ip-up finished (pid 15059), status = 0x0
Jan  3 00:54:18 pc101aw NetworkManager[634]: <info> Clearing nscd hosts cache.
Jan  3 00:54:18 pc101aw NetworkManager[634]: <info> VPN connection ************** (IP Config Get) complete.
Jan  3 00:54:18 pc101aw NetworkManager[634]: <info> Policy set ****************** (ppp0) as default for IPv4 routing and DNS.
Jan  3 00:54:18 pc101aw NetworkManager[634]: <info> VPN plugin state changed: started (4)

Config:


[connection]
id=***************
uuid=************
type=vpn
permissions=user:*****:;
autoconnect=false
timestamp=1357171150

[vpn]
service-type=org.freedesktop.NetworkManager.pptp
gateway=*************
domain=*******
user=********
password-flags=1

[ipv6]
method=ignore

[ipv4]
method=manual
addresses1=192.168.111.100;16;0.0.0.0;

deano_ferrari · January 3, 2013, 12:24am

I have just found time to reconfigure my work VPN connection using a ‘manual’ IP address configuration.

[connection]
id=****** VPN
uuid=1c0d3cfe-2b7d-489d-ba85-1d46fb122942
type=vpn
timestamp=1357166666

[vpn]
service-type=org.freedesktop.NetworkManager.pptp
gateway=******
user=******
password-flags=1

[ipv6]
method=ignore

[ipv4]
method=manual
dns=10.16.48.248;
addresses1=10.16.49.197;29;10.16.49.193;

It did not appear to work as expected. Looking at the output of ‘ip address’ I got

12: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1400 qdisc pfifo_fast state UNKNOWN qlen 3
    link/ppp 
    inet 10.16.49.196 peer 10.16.49.193/32 brd 10.16.49.196 scope global ppp0
    inet 10.16.49.197/24 brd 10.16.49.255 scope global ppp0

The last address is added as a secondary address to the same interface.

With ‘automatic’ DHCP assigned addresses, I get

11: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1400 qdisc pfifo_fast state UNKNOWN qlen 3
    link/ppp 
    inet 10.16.49.196 peer 10.16.49.193/32 brd 10.16.49.196 scope global ppp0

I really don’t know if this is a bug, or down to the VPN server policies…

deano_ferrari · January 3, 2013, 12:27am

Your address field doesn’t look right


[ipv4]
method=manual
addresses1=192.168.111.100;16;0.0.0.0;

janlipi · January 3, 2013, 12:43am

What do you mean ? the last 0.0.0.0 is empty gateway on the IPv4 screen, filling this field does not help

I still got a feeling that the local IP I want is not being sent to server at all

janlipi · January 6, 2013, 10:27am

Anybody … Please … I am out of ideas …

deano_ferrari · January 6, 2013, 10:31am

Does your VPN client need a static IP for any particular reason?

My test with my VPN connection wouldn’t allow me to assign a static IP either, but I’ assuming that’s down to the server policy. I’ll check with our administrator (to see if this is the case) in the next couple of days.

tsu2 · January 6, 2013, 8:53pm

Have you tried manually connecting your VPN using CLI?

TSU

elmoh · July 23, 2014, 5:50am

after a deep searching. i think we cannot add a specific address for ppp0 using pptp on linux. since the vpn server is made with a windows network instruction, the argument for specifying its own spesific address works only in windows os. also the cofiguration of /etc/ppp/ip-up.d/provider scripts fails in changing the ip address of dev ppp0.

when using pptp client to windows vpn server u must deal with dhcp and noway for static ip.

also network-manager-pptp do not have this option. we can not add a manual method for ipv4 in vpn config.

on the otherhand, since windows os can do that, u can install a windows os in a VM and bridge the vpn connection into a virtual host network card. this is the only solution found right now.

if someone had a solution plz give help.

Miuku · July 23, 2014, 10:04am

Yes you can.

Really?

http://i.imgur.com/47pW9zR.jpg

The reason many Windows PPTP servers don’t allow you to set a static IP is because the server controls the DHCP pool and enforces the IP.