Re: PPP dial-up server w/

2000-05-23 Thread Chris Wagner
Each tty has an options file.  The server side and client side ips are
assigned in there.

+---+
|-=I T ' S  P R I N C I P L E  T H A T  C O U N T S=-   |
|=-  -=ALAN KEYES FOR PRESIDENT=- -=|
| Balanced Budgets Personal Freedoms Morality Lower Tax |
|=--  http://www.Keyes2000.com.  --=|
+———+




Re: PPP dial-up server w/ multiple eth adapters: "operation not permitted"

2000-05-23 Thread Ralf G. R. Bergs
On Tue, 23 May 2000 09:12:04 -0200 (GMT+2), Kasparavicius Andrius wrote:

[...]
>> I use mgetty which properly transfers the call to pppd. The clients
>> gets its 
>> correct IP address, but it can't ping the p-t-p address, nor can I ping
>> the 
>> client from the server. If I try to do so I get a "operation not
>> permitted."
>
> I think u need to check ipchains permissions. See ppp.up ppp.down..

I guess you mean ip-up (ip-up.d/*) resp. ip-down (ip-down.d/*)?

Thanks for suggesting this, but I don't think this is the reason.

There aren't any rules that pertain to ppp0. Also, the client machine that 
dials in gets an IP address from out of the LAN. The LAN machines have 
unrestricted access to each other and thru the internal interfaces of the 
router.


-- 
Sign the EU petition against SPAM:  L I N U X   .~.
http://www.politik-digital.de/spam/The  Choice  /V\
of a  GNU  /( )\
   Generation  ^^-^^





Re: PPP dial-up server w/ multiple eth adapters: "operation not permitted"

2000-05-23 Thread Kasparavicius Andrius
On Tue, 23 May 2000, Andreas Abach wrote:

> Hi there,
> 
> I have a strange problem getting a PPP dial-up working.
> 
> The machine is running Debian 2.1 and kernel 2.2.13.
> 
> I use mgetty which properly transfers the call to pppd. The clients
> gets its 
> correct IP address, but it can't ping the p-t-p address, nor can I ping
> the 
> client from the server. If I try to do so I get a "operation not
> permitted."

 I think u need to check ipchains permissions. See ppp.up ppp.down..

  -
Kasparavicius Andrius

http://www.andrius.org  ICQ:17701001  tel.: +370 87 25630 nick: Casper
AK2858-RIPE 




PPP dial-up server w/ multiple eth adapters: "operation not permitted"

2000-05-23 Thread Andreas Abach
Hi there,

I have a strange problem getting a PPP dial-up working.

The machine is running Debian 2.1 and kernel 2.2.13.

I use mgetty which properly transfers the call to pppd. The clients
gets its 
correct IP address, but it can't ping the p-t-p address, nor can I ping
the 
client from the server. If I try to do so I get a "operation not
permitted."

It seems that pppd on the server is confused which ip address to assign
to 
the ppp0 interface. The machine has two network interfaces, eth0 which 
connects it to the rest of the world, and eth1 which connects it to a
LAN.

Since the dial-in machine is being assigned an internal (LAN) address I
need 
proxy-arp. However due to my understanding this can't work if the ppp0 
interface on the server is being assigned the external if address
instead of 
the internal one.

Let me try to draw a simple map of the setup:
   ___
 _/   \___
/ \internet
|_/
 \__/
|
|
O  eth0 with external IP
  +---+
  M---|   |router w/ modem attached
  +---+
O  eth1 w/ internal IP
|
|
+---+---+---+---+---+
|   |   |   |   |   |
   +-+ +-+ +-+ +-+ +-+ +-+
   | | | | | | | | | | | |   LAN machines
   +-+ +-+ +-+ +-+ +-+ +-+


The router's eth1 interface as well as all the LAN machines have
official ip 
addresses from out of the same class C network.

The router's eth0 interface is the router's default gateway.

Questions:

1) Do I need to assign the ppp0 interface a unique IP address? Or can I

leave the default address that pppd assigns (namely the address of the 
external(!) if eth0)? How do I force pppd to assign a specified ip
address? 
Entering an address into options.modem (for serial line /dev/modem)
does NOT 
work for me.

2) What about proxy arp. I had the "proxyarp" entry in "options" but it

wouldn't work this way, so I tried to manually set up a proxy arp entry
that 
connects the client's IP to the router's eth1(!) MAC/ethernet address.
But 
this didn't ehlp either. :-(

Any other gotchas I should watch for?

Thanks,

Ralf, Andreas



-- 
Dipl.-Ing. Andreas Abach * Lehrstuhl fuer Kunststofftechnik Uni Erlangen
 Tel.: +49-9131-85297-06 * Fax.: -09 * email: [EMAIL PROTECTED]
Am Weichselgarten 9 * D-91058 Erlangen * www.keramikspritzgiessen.de
PGPID 0x5672B1F8 F-Print FD50 85C0 7580 5467 65E7 3BE8 58BC 65F4 5672 B1F8