pppoe
Hi everyone To bring up a pppoe connection, I use ppp -ddial provider But how do I take it down? Also how do I remove old tunx devices? # ifconfig tun0: flags=8051 mtu 1492 inet 219.90.xxx.xxx --> 203.2.124.224 netmask 0x Opened by PID 71830 tun1: flags=8010 mtu 1500 tun2: flags=8010 mtu 1500 inet 219.90.xxx.xxx --> 219.90.174.215 netmask 0x What the? How do I get rid of the others? tun0 seems to be only in use there. If a connection drops out, I just connect again, but it leaves old tun devices and makes a new one, and sometimes I have to manually delete/add correct routes. Cheers Brendan
pppoe
I am setting up an OpenBSD firewall, and have everything working but I am using userland pppoe. I am not sure if it ever became an official part of OpenBSD, but I've heard there might be kernel level pppoe support. Is there kernel level pppoe support? Or is the cybersphere filling my head with dreams? -- www.johntate.org
Difference between pppoe(8) and pppoe(4) ?
Hi all ! I'm facing a weirdness with my DSL connection. I have been using pppoe(4) for years and since 2 days it cannot connect (no public IP affected to pppoe0, only PADI retry increments). I guess there have been some changes at the ISP level. Luckily it works with pppoe(8) with identical config. Anyway pppoe(8) sucks so I wonder what can be the difference that makes it work with pppoe(8) but not pppoe(4). There is, unfortunately, no logs from pppoe(4) explaining what's wrong. Do you have any pointer or clue ? Thank you in advance, Denis * hostname.pppoe0 : --- inet 0.0.0.0 255.255.255.255 NONE \ pppoedev re0 authproto chap \ authname 'me@isp' authkey 'password' \ mtu 1300 up dest 0.0.0.1 !/sbin/route add default -ifp pppoe0 0.0.0.1 * ppp.conf : default: set log Phase Chat LCP IPCP CCP tun command set redial 15 28800 set reconnect 15 28800 pppoe: set device "!/usr/sbin/pppoe -i re0" disable acfcomp protocomp deny acfcomp set mtu max 1492 set speed sync disable lqr deny lqr set cd 5 set dial set login set timeout 0 set authname me@isp set authkey password enable sroutes add default HISADDR add default HISADDR6 enable mssfixup
Sniffing pppoe
Hi, probably a common situation to some people here: I have an "ADSL-router", a box locked down by my ISP. I could reset it, but then I'll lose the connection data. Is there a way to connect my OpenBSD PC to it and to sniff the data (esp. username, password) it sends? The pppoe man page mentions, that it could "act as server", but how to set it up? Which hardware is needed? Can I just connect the router's "DSL" jack with a NIC on my PC? If yes, should I take a crossover cable or a straight one? Regards Alex PS: Don't worry about legal side - I haven't signed any agreements and I just want to forward the incoming ssh connections to an internal IP (and currently can't)
pppoe detail
Hi Folks ..
I had recently installed a OpenBSD 3.8 -current machine, running in-kernel
PPPoE implementation, (man 4 pppoe), while it connect fine to the internet
(via ADSL Modem), and do NAT corectly, I can't access to internal web server
from the internet. it run DynDNS.
The scenario is the next.
Internet - ADSL dc0-- OpenBSD 3.8 fxp0 --switch
- LAN (192.168.0.0/24 <http://192.168.0.0/24>)
While i dodn't have a DMZ yet, I hope shortly have it.
int_if = "fxp0"
ext_if = "pppoe0"
tcp_services = "{ 22, 113 }"
www_server = "192.168.1.100 <http://192.168.1.100>"
webports = "{http, https}"
# port 80 for www service ruunning
icmp_types = "echoreq"
#priv_nets = "{ 127.0.0.0/8 <http://127.0.0.0/8>,
192.168.0.0/16<http://192.168.0.0/16>,
172.16.0.0/12 <http://172.16.0.0/12>, 10.0.0.0/8 <http://10.0.0.0/8> }"
priv_nets = "{127.0.0.0/8 <http://127.0.0.0/8>,
192.168.0.0/16<http://192.168.0.0/16>}"
# options
set block-policy return
set loginterface $ext_if
# scrub
scrub in all
# scrub for NAT in PPPoE for using max mtu value
scrub out on pppoe0 max-mss 1440
# nat/rdr
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $int_if proto tcp from any to any port 21 ->
127.0.0.1<http://127.0.0.1>\
port 8021
# permite acceso al HTTP server
rdr on $ext_if proto tcp from any to any port 80 -> $www_server
#redirecciona el puerto 3128 al 8 para hacer squid transparente
#rdr on $int_if inet proto tcp from any to any port www ->
127.0.0.1<http://127.0.0.1>port 3128
# filter rules
block all
pass quick on lo0 all
block drop in quick on $ext_if from $priv_nets to any
block drop out quick on $ext_if from any to $priv_nets
pass in on $ext_if inet proto tcp from any to ($ext_if) \
port $tcp_services flags S/SA keep state
pass in on $ext_if inet proto tcp from any to ($ext_if) \
user proxy keep state
#pasa todo por el squid
# pass in on $int_if inet proto tcp from any to 127.0.0.1
<http://127.0.0.1>port 3128 keep state
# pass out on $ext_if inet proto tcp from any to any port www keep state
pass in on $int_if from $int_if:network to any keep state
pass out on $int_if from any to $int_if:network keep state
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto { udp, icmp } all keep state
#
pass in on $ext_if proto tcp from any to $www_server port 80 \
flags S/SA synproxy state
Now, the www server (apache) located in 192.168.1.100
<http://192.168.1.100>do not work .
Any suggestions.
Regards.
--
---
BSD - Unix simplicity.
Francisco Valladolid Hdez.
[EMAIL PROTECTED]
PPPoE troubles.
Hi all, I Am a new OpenBSD user and I am trying to set up a home router with OpenBSD, but I am having some troubles with pppoe. I live in Brazil and my connection is an ADSL link with Telefonica. My ip/gateway are both set dynamically. Here's my /etc/hostname.pppoe0 file: pppoedev rl1 !/sbin/ifconfig rl1 up !/usr/sbin/spppcontrol -v \$if myauthproto=pap myauthname=" [EMAIL PROTECTED]" \ myauthkey=mypass !/sbin/ifconfig \$if inet 0.0.0.0 <http://0.0.0.0> 0.0.0.1 <http://0.0.0.1>netmask 0x !/sbin/route add default 0.0.0.1 <http://0.0.0.1> up So, it connects and set the ip, but it gets no gateway: pppoe0: flags=8851 mtu 1492 dev: rl1 state: session sid: 0x8081 PADI retries: 1 PADR retries: 0 time: 0:0:51 inet 200.158.156.121 <http://200.158.156.121> --> 0.0.0.1 <http://0.0.0.1>netmask 0x inet6 fe80::2e0:7dff:fe88:678d%pppoe0 -> prefixlen 64 scopeid 0x7 The netstat -nr command shows me: Destination Gateway Flags Refs Use Mtu Interface 0.0.0.1 <http://0.0.0.1> 0.0.0.0 <http://0.0.0.0> UH 0 0 - pppoe0 I have also tried to get pppoe working with userland pppoe, but I've got the same problem, except I could ping only the ip 200.207.254.248<http://200.207.254.248> . Here's my old router running debian linux ifconfig result: ppp0 Link encap:Point-to-Point Protocol inet addr:200.158.157.XXX P-t-P:200.207.254.248 <http://200.207.254.248>Mask: 255.255.255.255 <http://255.255.255.255> UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1 RX packets:4529 errors:0 dropped:0 overruns:0 frame:0 TX packets:3096 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:5122479 (4.8 MiB) TX bytes:285811 (279.1 KiB) Does anybody here live in Brazil and use the adsl link from telefonica and can get it working with OpenBSD/pppoe ? Does anybody know what this "error" could be ? Thanks in advance, Marcos Vinmcius Buzo
unnumbered PPPoE
I've been reading through manpages and tutorials but have not been able to get an answer to a question I have. I am wondering if it's possible to use OpenBSD as an unnumbered PPPoE client bridge. Basically a transparent bridge that processes packets for PPPoE so the rest of the network doesn't have to deal with PPPoE. [internet]-[ISP(PPPoE Server)][modem]====[openbsd(PPPoE Client)]-[multiple static IPs] Kory T
share PPPoE
hi i want to share the internet conection i configured the PPPoE but i have a bridge i should do NAT whit the interfase which is pppoe client and the if where i want share internet or if a iam doing the bridge i dont need nat? thanks! David
PPPoe question
Hi all, I'm having a weird problem with my connection, I switched from cable to dsl (covad), and they gave me a netopia router to be setup in bridge mode so that my OpenBSD 3.9 current can acquire the IP address. My 3.9 has 2 NIC, (fxp0 and xl0). My xl0 is my public IP, my fxp0 is 192.168.3.2, one of my internal machines(Mac) is 192.168.3.111, and my netopia router is 192.168.3.1 all connected to a dumb switch. My openbsd works fine, I'm able to access the net ping my 192.168.3.111 machine and so forth, however, my 3.111 machine cannot ping the 3.2 interface on my BSD even though the BSD can ping the 3.111 and they're on a dumb switch. Any idea why it's behaving like this, I was able to ping my server before installing the covad router. Unless the covad router is denying my request. My pf.conf file allows me to ping my bsd box internally. Mac(3.111)- --- |-- |switch|--fxp0(3.2)-- | BSD|--xl0Internet Netopia(3.1) -| | | | --- My ppp.conf default: set log Phase Chat IPCP CCP tun command set redial 15 0 set reconnect 15 1 pppoe: set device "!/usr/sbin/pppoe -i xl0" disable acfcomp protocomp deny acfcomp set mtu max 1492 set speed sync enable lqr set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname xxx set authkey xx add! default HISADDR enable dns enable mssfixup Thank you
Re: pppoe
Hi everyone To bring up a pppoe connection, I use ppp -ddial provider But how do I take it down? Maybe just "kill" the connection? Also how do I remove old tunx devices? What the? How do I get rid of the others? tun0 seems to be only in use there. If a connection drops out, I just connect again, but it leaves old tun devices and makes a new one, and sometimes I have to manually delete/add correct routes. Not sure if this is the correct way, let alone the easiest, but this is how I do it: if [ `ifconfig -a|grep -c tun0` -ne 0 ]; then /sbin/ifconfig tun0 destroy fi && start connection here where you would do this depends on your setup. In mycase I have a specific script that brings the connection up.
Re: pppoe
eric.p wrote: > if [ `ifconfig -a|grep -c tun0` -ne 0 ]; then More ellegant is: if ! ifconfig -a | grep -q tun0; then # Han
Re: pppoe
> >Also how do I remove old tunx devices? > > > >What the? How do I get rid of the others? tun0 seems to be > only in use > >there. > > > >If a connection drops out, I just connect again, but it > leaves old tun > >devices and makes a new one, and sometimes I have to manually > >delete/add correct routes. > > Not sure if this is the correct way, let alone the easiest, > but this is how I do > it: > > if [ `ifconfig -a|grep -c tun0` -ne 0 ]; then > /sbin/ifconfig tun0 destroy > fi && > > start connection here > > where you would do this depends on your setup. In mycase I > have a specific script that brings the connection up. > That works nicely. Unfortunately I've had to change my gateway from OpenBSD to FreeBSD, and even though destroy is specified in the manpage, it says this... ifconfig: SIOCIFDESTROY: Invalid argument
Re: pppoe
On Tue, Apr 18, 2006 at 11:52:47AM +0930, Brendan Grossman wrote: > Hi everyone > > To bring up a pppoe connection, I use ppp -ddial provider > > But how do I take it down? > > Also how do I remove old tunx devices? > > # ifconfig > tun0: flags=8051 mtu 1492 > inet 219.90.xxx.xxx --> 203.2.124.224 netmask 0x > Opened by PID 71830 > tun1: flags=8010 mtu 1500 > tun2: flags=8010 mtu 1500 > inet 219.90.xxx.xxx --> 219.90.174.215 netmask 0x > > What the? How do I get rid of the others? tun0 seems to be only in use > there. you can force ppp(8) to always use the same interface with the '-unit' option (see man page). For instance, ppp -ddial -unit0 provider will always use the tun0 interface. Then, to bring down the connection: kill `cat /var/run/tun0.pid` and wait few seconds. This will bring down the interface and remove routes. HTH, -- Alexandre
Re: pppoe
On Tue, Apr 18, 2006 at 11:52:47AM +0930, Brendan Grossman wrote: > Hi everyone > > To bring up a pppoe connection, I use ppp -ddial provider > > But how do I take it down? > > Also how do I remove old tunx devices? > > # ifconfig > tun0: flags=8051 mtu 1492 > inet 219.90.xxx.xxx --> 203.2.124.224 netmask 0x > Opened by PID 71830 > tun1: flags=8010 mtu 1500 > tun2: flags=8010 mtu 1500 > inet 219.90.xxx.xxx --> 219.90.174.215 netmask 0x > > What the? How do I get rid of the others? tun0 seems to be only in use > there. It seems strange to me that you have this problem because I once had a setup similar to yours (under 3.4-3.5-3.6) and never had this problem. Maybe you did not do something right, maybe it's a bug but without showing more info one can only guess. The info required here would be the version you are running, your ppp.conf file (sanitized to remove passwords, of course) and your linkup and linkdown script if they contain anything. On another topic, if you are running 3.7 or higher, you could give the in-kernel pppoe a try, unless, of course, you have already tried and some wierd thing your provider is doing prevents it from working. Arnaud -- "i think we should rewrite the kernel in java since it has good support for threads." - Ted Unangst
Re: pppoe
On 4/18/06, Han Boetes <[EMAIL PROTECTED]> wrote: > More ellegant is: > > if ! ifconfig -a | grep -q tun0; then Yet another way to write this: (Though not quite as readable?) ifconfig tun0 >/dev/null 2>&1 && ifconfig $_ destroy
Re: pppoe
NetNeanderthal wrote: > On 4/18/06, Han Boetes <[EMAIL PROTECTED]> wrote: > > More ellegant is: > > > > if ! ifconfig -a | grep -q tun0; then > > Yet another way to write this: (Though not quite as readable?) > > ifconfig tun0 > /dev/null 2>&1 && ifconfig $_ destroy I thought up the same construction after I posted the previous message. Though I didn't know that $_ means the last argument. Nice trick, though not very readable indeed. :-) The point is the same though: To check the return value instead of the resulting text. # Han
Re: pppoe
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Arnaud Bergeron > Sent: Wednesday, 19 April 2006 9:57 AM > To: misc@openbsd.org > Cc: Brendan Grossman > Subject: Re: pppoe > > On Tue, Apr 18, 2006 at 11:52:47AM +0930, Brendan Grossman wrote: > > Hi everyone > > > > To bring up a pppoe connection, I use ppp -ddial provider > > > > But how do I take it down? > > > > Also how do I remove old tunx devices? > > > > # ifconfig > > tun0: flags=8051 mtu 1492 > > inet 219.90.xxx.xxx --> 203.2.124.224 netmask 0x > > Opened by PID 71830 > > tun1: flags=8010 mtu 1500 > > tun2: flags=8010 mtu 1500 > > inet 219.90.xxx.xxx --> 219.90.174.215 netmask 0x > > > > What the? How do I get rid of the others? tun0 seems to be > only in use > > there. > > It seems strange to me that you have this problem because I > once had a setup similar to yours (under 3.4-3.5-3.6) and > never had this problem. > Maybe you did not do something right, maybe it's a bug but > without showing more info one can only guess. > > The info required here would be the version you are running, > your ppp.conf file (sanitized to remove passwords, of course) > and your linkup and linkdown script if they contain anything. > > On another topic, if you are running 3.7 or higher, you could > give the in-kernel pppoe a try, unless, of course, you have > already tried and some wierd thing your provider is doing > prevents it from working. Hi Arnaud, Running 3.8-stable # linkup MYADDR: ! sh -c "/sbin/pfctl -e -F all -f /etc/pf.conf" No linkdown # ppp.conf default: set log Phase Chat IPCP CCP tun command set redial 15 0 set reconnect 15 1 isp: set device "!/usr/sbin/pppoe -i bce0" disable acfcomp protocomp deny acfcomp set mtu max 1492 set speed sync enable lqr set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname [EMAIL PROTECTED] set authkey add! default HISADDR #enable dns enable mssfixup Cheers Brendan
Re: pppoe
On 4/19/06, Brendan Grossman <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > On Behalf Of Arnaud Bergeron > > Sent: Wednesday, 19 April 2006 9:57 AM > > To: misc@openbsd.org > > Cc: Brendan Grossman > > Subject: Re: pppoe > > > > On Tue, Apr 18, 2006 at 11:52:47AM +0930, Brendan Grossman wrote: > > > Hi everyone > > > > > > To bring up a pppoe connection, I use ppp -ddial provider > > > > > > But how do I take it down? > > > > > > Also how do I remove old tunx devices? > > > > > > # ifconfig > > > tun0: flags=8051 mtu 1492 > > > inet 219.90.xxx.xxx --> 203.2.124.224 netmask 0x > > > Opened by PID 71830 > > > tun1: flags=8010 mtu 1500 > > > tun2: flags=8010 mtu 1500 > > > inet 219.90.xxx.xxx --> 219.90.174.215 netmask 0x > > > > > > What the? How do I get rid of the others? tun0 seems to be > > only in use > > > there. > > > > It seems strange to me that you have this problem because I > > once had a setup similar to yours (under 3.4-3.5-3.6) and > > never had this problem. > > Maybe you did not do something right, maybe it's a bug but > > without showing more info one can only guess. > > > > The info required here would be the version you are running, > > your ppp.conf file (sanitized to remove passwords, of course) > > and your linkup and linkdown script if they contain anything. > > > > On another topic, if you are running 3.7 or higher, you could > > give the in-kernel pppoe a try, unless, of course, you have > > already tried and some wierd thing your provider is doing > > prevents it from working. > > Hi Arnaud, > > Running 3.8-stable > > # linkup > MYADDR: > ! sh -c "/sbin/pfctl -e -F all -f /etc/pf.conf" > > No linkdown > > # ppp.conf > default: > set log Phase Chat IPCP CCP tun command > set redial 15 0 > set reconnect 15 1 This not needed when using -ddial mode. Trust the defaults. > isp: > set device "!/usr/sbin/pppoe -i bce0" > disable acfcomp protocomp > deny acfcomp > set mtu max 1492 > set speed sync This looks good. > enable lqr > set lqrperiod 5 > set cd 5 Why set the default explicitly? > set dial > set login Those are not needed with pppoe. > set timeout 0 This is useless with -ddial, it's ignored. > set authname [EMAIL PROTECTED] > set authkey > add! default HISADDR > #enable dns > enable mssfixup > > Cheers > Brendan >From what I know, it is probably set redial and set reconnect that is causing ppp to attempt a reconnect before the previous connection is completly closed. Try removing these and it -MAY- work. Also, simple is better, trust the default and specify the minimum configuration needed for it to work (see my comments above). Just to nag you a bit more, since your are running 3.8, why don't you try the in-kernel pppoe, it works great! (unless, you have tried it and it doesn't or you absolutly want something ppp does) Arnaud -- "i think we should rewrite the kernel in java since it has good support for threads." - Ted Unangst
Re: pppoe
mh i've had the same problem. I dont know if my way is really nice but ifconfig tunX destroy has done the job On Apr 20, 2006, at 8:55 PM, Arnaud Bergeron wrote: On 4/19/06, Brendan Grossman <[EMAIL PROTECTED]> wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Arnaud Bergeron Sent: Wednesday, 19 April 2006 9:57 AM To: misc@openbsd.org Cc: Brendan Grossman Subject: Re: pppoe On Tue, Apr 18, 2006 at 11:52:47AM +0930, Brendan Grossman wrote: Hi everyone To bring up a pppoe connection, I use ppp -ddial provider But how do I take it down? Also how do I remove old tunx devices? # ifconfig tun0: flags=8051 mtu 1492 inet 219.90.xxx.xxx --> 203.2.124.224 netmask 0x Opened by PID 71830 tun1: flags=8010 mtu 1500 tun2: flags=8010 mtu 1500 inet 219.90.xxx.xxx --> 219.90.174.215 netmask 0x What the? How do I get rid of the others? tun0 seems to be only in use there. It seems strange to me that you have this problem because I once had a setup similar to yours (under 3.4-3.5-3.6) and never had this problem. Maybe you did not do something right, maybe it's a bug but without showing more info one can only guess. The info required here would be the version you are running, your ppp.conf file (sanitized to remove passwords, of course) and your linkup and linkdown script if they contain anything. On another topic, if you are running 3.7 or higher, you could give the in-kernel pppoe a try, unless, of course, you have already tried and some wierd thing your provider is doing prevents it from working. Hi Arnaud, Running 3.8-stable # linkup MYADDR: ! sh -c "/sbin/pfctl -e -F all -f /etc/pf.conf" No linkdown # ppp.conf default: set log Phase Chat IPCP CCP tun command set redial 15 0 set reconnect 15 1 This not needed when using -ddial mode. Trust the defaults. isp: set device "!/usr/sbin/pppoe -i bce0" disable acfcomp protocomp deny acfcomp set mtu max 1492 set speed sync This looks good. enable lqr set lqrperiod 5 set cd 5 Why set the default explicitly? set dial set login Those are not needed with pppoe. set timeout 0 This is useless with -ddial, it's ignored. set authname [EMAIL PROTECTED] set authkey add! default HISADDR #enable dns enable mssfixup Cheers Brendan From what I know, it is probably set redial and set reconnect that is causing ppp to attempt a reconnect before the previous connection is completly closed. Try removing these and it -MAY- work. Also, simple is better, trust the default and specify the minimum configuration needed for it to work (see my comments above). Just to nag you a bit more, since your are running 3.8, why don't you try the in-kernel pppoe, it works great! (unless, you have tried it and it doesn't or you absolutly want something ppp does) Arnaud -- "i think we should rewrite the kernel in java since it has good support for threads." - Ted Unangst
Re: pppoe
I used $ sudo kill -HUP Regards On 4/17/06, Brendan Grossman <[EMAIL PROTECTED]> wrote: > > Hi everyone > > To bring up a pppoe connection, I use ppp -ddial provider > > But how do I take it down? > > Also how do I remove old tunx devices? > > # ifconfig > tun0: flags=8051 mtu 1492 > inet 219.90.xxx.xxx --> 203.2.124.224 netmask 0x > Opened by PID 71830 > tun1: flags=8010 mtu 1500 > tun2: flags=8010 mtu 1500 > inet 219.90.xxx.xxx --> 219.90.174.215 netmask 0x > > What the? How do I get rid of the others? tun0 seems to be only in use > there. > > If a connection drops out, I just connect again, but it leaves old tun > devices and makes a new one, and sometimes I have to manually delete/add > correct routes. > > Cheers > Brendan > > -- --- BSD - Unix simplicity. Francisco Valladolid Hdez. [EMAIL PROTECTED]
Unstable PPPoE
Hello ladies and gentlemen!
I'm having a frustrating problem. My internet is highly unstable when
using bit torrent. I don't think there's anything special about my
configuration: my gateway is a craptop with inbuilt Intel ethernet and
a url0 USB ethernet for the modem. The connection is bridged, using pf
(obviously) for routing / firewall and kernel PPPoE for dialing via my
bridged netcomm nb5+.
Basically, when I try to use bit torrent the connection dies after
about 20mins. The kernel PPPoE daemon doesn't bring it back up. In
fact, even doing
#sh /etc/netstart
doesn't bring it back up. The only way to bring it back up is via a
reboot :( Very frustrating. It also takes about 10-15mins to
reconnect; surely that's a bit too long, even for PPPoE? I know this
isn't a problem with my ISP as I've always been able to download bt
stably when I was using the modem in router mode. I thought it might
have been an MTU problem, but I'm using the mss fix in /etc/pf.conf,
so I don't think it's that. I played around with a few values just to
be sure, but I'm open to suggestions.
I'll post my dmesg, /etc/pf.conf and /etc/hostname.pppoe. If there's
anything else I should send, please let me know!
/etc/pf.conf:
# Timothy's PF.conf, running on failtop
# My fun as ports!
#
# Bit torrent
shitbox_bt = "6881"
craptop_bt = "6882"
failtop_bt = "{ 6883, 6884, 6885, 6886 }"
# SSH
shitbox_ssh = "22"
craptop_ssh = "24"
failtop_ssh = "25"
# VoIP
johnbox_voip= "{ 3478, 5060, 8000, 8001 }"
# Macro fun!!!
#tcp_services = "{ www, ssh, domain, auth }"
udp_services= "{ domain, ntp, 3478, 5060, 8000, 8001 }" #look at
adding NTP for clients
allow_out = "{ 1863, 6969, www, ftp-data, ftp, ssh, domain, pop3,
smtp, auth, http, https, 446, 8080 }"
icmp_types = "{ echoreq, unreach }"
bt_pass = "{ 6881,6880,6882,6883, 6884, 6885, 6886 }"
# Fun fun interfaces
ext_if = "pppoe0"
int_if = "fxp0"
local = $int_if:network
outside = $ext_if:network
#ftpProxy = "127.0.0.1"
# IP Map (lots of fun)
shitbox_ip = "192.168.1.10"
craptop_ip = "192.168.1.3"
failtop_ip = "192.168.1.55"
johnbox_ip = "192.168.1.8"
martians= "{ 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, \
10.0.0.0/8, 169.254.0.0/16, 192.0.2.0/24, \
0.0.0.0/8, 240.0.0.0/4 }"
# Normalisation fun!
scrub in #all
scrub out on pppoe0 max-mss 1440
# Fun fun rules!
#
# NAT section
nat on $ext_if from $local to any -> ($ext_if)
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
# Services
#
#Squid
rdr on $ext_if proto tcp from $ext_if:network to any port www ->
$failtop_ip port 3128
# Outside users!
# Redirect Bit Torrent
rdr on $ext_if proto {udp,tcp} from any to $ext_if port $shitbox_bt ->
$shitbox_ip
rdr on $ext_if proto tcp from any to $ext_if port $craptop_bt -> $craptop_ip
rdr on $ext_if proto {udp,tcp} from any to $ext_if port $failtop_bt ->
$failtop_ip
# Redirect SSH
rdr on $ext_if proto tcp from any to $ext_if port $shitbox_ssh -> $shitbox_ip
rdr on $ext_if proto tcp from any to $ext_if port $craptop_ssh -> $craptop_ip
rdr on $ext_if proto tcp from any to $ext_if port $failtop_ssh -> $failtop_ip
# Redirect VoIP
rdr on $ext_if proto {tcp, udp} from any to $ext_if port $johnbox_voip
-> $johnbox_ip
# Local users!
# Redirect SSH
rdr on $int_if proto tcp from $local to $ext_if port $shitbox_ssh ->
$shitbox_ip
rdr on $int_if proto tcp from $local to $ext_if port $craptop_ssh ->
$craptop_ip
rdr on $int_if proto tcp from $local to $ext_if port $failtop_ssh ->
$failtop_ip
# Fun fun filtering section
antispoof for $ext_if
antispoof for $int_if
block drop in quick on $ext_if from $martians to any
block drop out quick on $ext_if from any to $martians
block return
pass from { lo0, $local } to any keep state
# Fun FTP allow fun
anchor "ftp-proxy/*"
pass out proto tcp from 127.0.0.1 to any port 21
# Fun services for everyone to be passed out
# Allow outgoing dns, needed by pfctl to resolve names.
pass out proto tcp to any port $allow_out
pass proto udp to any port domain
# Allow BitTorrent
pass inet proto { tcp, udp } to $shitbox_ip port $bt_pass flags S/SA
keep state (max-src-conn 500)
pass inet proto { tcp, udp } to $failtop_ip port $bt_pass flags S/SA
keep state (max-src-conn 500)
#pass proto tcp from $local to any port $allow_out
pass quick inet proto { tcp, udp } to any port $udp_services keep state
# Let ICMP traffic from local as well as outside
pass inet proto icmp all icmp-type $icmp_types keep state
# Traceroute
pass out on $ext_
pppoe problems
hi, after upgrading my router to -current the dsl pppoe connection does not work anymore. userland ppp connects fine but freezes after K 30 seconds. freeze means the connection is still there no errors shown in logs and ifconfig state is normal but there is no more incoming traffic. the provider and modem hardware is ok since i'm connected now through a netscreen to write this mail. i changed nothing in ppp configuration since years and disabled pf for testing... same problem. as i can see in source changes: not much has changed in userland ppp and nfe code since 4.1. i read in some forums that it would be better to user kernel pppoe... so i tried to use kernel pppoe as workaround, but its does not connect. i used following configuration in /etc/hostname.pppoe0: inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \ authproto pap authname authkey up !/sbin/route add default 0.0.0.1 and of course: "up" in /etc/hostname.nfe1 if i enable debug i see a lot of outgoing packages... and then a timeout after a while. reconnect and again the same... it stays in the sppp phase of "establish connection using pap authname " I'm located in germany using arcor as provider. anyone else using dsl pppoe (kernel/userland) in current or latest snapshots - maybe in germany with arcor? any hints are really welcome. dmesg follows regards, joerg OpenBSD 4.2 (GENERIC.MP) #0: Wed Aug 8 17:31:49 CEST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 2145972224 (2046MB) avail mem = 2072682496 (1976MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (78 entries) bios0: vendor Phoenix Technologies, LTD version "ASUS M2N32-SLI DELUXE ACPI BIOS Revision 0603" date 06/27/2006 bios0: ASUSTeK Computer INC. M2N32-SLI DELUXE acpi0 at mainbus0: rev 0 acpi0: tables DSDT FACP SSDT MCFG APIC acpitimer at acpi0 not configured acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2411.34 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: apic clock running at 200MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2410.98 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative ioapic0 at mainbus0 apid 2 pa 0xfec0, version 11, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 2 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 5 (HUB0) acpicpu at acpi0 not configured acpicpu at acpi0 not configured acpitz at acpi0 not configured acpibtn at acpi0 not configured cpu0: PowerNow! K8 2410 MHz: speeds: 2400 2200 2000 1800 1000 MHz pci0 at mainbus0 bus 0: configuration mode 1 "NVIDIA C51 Host" rev 0xa2 at pci0 dev 0 function 0 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 1 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 2 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 3 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 4 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 5 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 6 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 7 not configured ppb0 at pci0 dev 3 function 0 "NVIDIA C51 PCIE" rev 0xa1 pci1 at ppb0 bus 1 ppb1 at pci0 dev 4 function 0 "NVIDIA C51 PCIE" rev 0xa1 pci2 at ppb1 bus 2 ppb2 at pci2 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x07 pci3 at ppb2 bus 3 arc0 at pci3 dev 14 function 0 "Areca ARC-1210" rev 0x00: apic 2 int 11 (irq 11) arc0: 4 SATA Ports, 256MB SDRAM, FW Version: V1.42 2006-10-13 scsibus0 at arc0: 16 targets sd0 at scsibus0 targ 0 lun 0: SCSI3 0/direct fixed sd0: 476837MB, 56514 cyl, 36 head, 480 sec, 512 bytes/sec, 976562176 sec total ppb3 at pci2 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x07 pci4 at ppb3 bus 4 "NVIDIA MCP55 Memory" rev 0xa1 at pci0 dev 8 function 0 not configured pcib0 at pci0 dev 9 function 0 "NVIDIA MCP55 ISA" rev 0xa2 nviic0 at pci0 dev 9 function 1 "NVIDIA MCP55 SMBus" rev 0xa2 iic0 at nviic0 adt0 at iic0 addr
CARP & PPPoE
Is it possible to have a 2 node firewall using carp & be able to use pppoe? so if one node dies the other one picks up the & reinitiates the connection for example. Sevan / Venture37 _ Free games, great prizes - get gaming at Gamesbox. http://www.searchgamesbox.com
starting pppoe
I cant recall if I need to do this or not... fxp1 is my NIC used to connect to my DSL modem. I have this setup: % cat /etc/hostname.tun0 !/usr/sbin/ppp -ddial isp PF=YES is set in rc.conf Do I still need to have this file? % cat /etc/hostname.fxp1 up -JD -- J.D. Bronson Telecommunications Site Support Aurora West Allis Memorial Hospital Office: 414.978.8282 Fax: 414.977.5299
kernel pppoe
Dear list members,
i have followed pppoe(4) instructions on setting it up. It works
perfectly. But, i am very confused with the output for the netstat -rn
command (only relevant part)
Internet:
DestinationGatewayFlagsRefs UseMtu Interface
default0.0.0.1UGS 18 - pppoe0
0.0.0.1defaultUH 10 - pppoe0
127/8 127.0.0.1 UGRS00 33224 lo0
127.0.0.1 127.0.0.1 UH 10 33224 lo0
224/4 127.0.0.1 URS 00 33224 lo0
For ifconfig -a, we have (only relevant part too):
pppoe0: flags=8851 mtu 1492
dev: bge0 state: session
sid: 0xf0e2 PADI retries: 1 PADR retries: 0 time: 00:00:44
sppp: phase network authproto pap authname "[EMAIL PROTECTED]"
groups: pppoe egress
inet6 fe80::211:11ff:fee3:927e%pppoe0 -> prefixlen 64 scopeid 0x6
inet 201.78.17.238 --> 0.0.0.1 netmask 0x
I am not able to understand the cycle between 0.0.0.1 to default and
default to 0.0.0.1 entries for the routing information.
I am very confused.
Thanks in advance.
Multilink PPPoE
Just had a quick search through the misc@ archives & came up with this: http://marc.theaimsgroup.com/?l=openbsd-misc&m=98020447629037&w=2 Is this still the way to setup a mlppp connection or has it been superceeded by something else?? Regards Sevan / Venture37 -- "The truth, the half-truth, and nothing like the truth." - Mark Brandon Read
PPTP + PPPoE ?
Hi all, I'm running OpenBSD 3.7. I use my OpenBSD machine as a firewall, including a PPTP server and it runs ok. But... I want to connect to my ISP with PPPoE and configure my router as bridge and I've achieve it!! But now my PPTP server is not running, I cannot connect from a Windows client as before. Does anybody know why? Can I use ppp.conf with two different applications? Or the problem is with the tun devices? Thanks a lot. My ppp.conf: pptp: #set ifaddr 172.16.1.100 172.16.1.10-172.16.1.20 enable proxy set timeout 0 enable MSChapV2 disable ipv6cp disable ipv6 default: set log Phase Chat LCP IPCP CCP tun command set device /dev/cua01 set speed 115200 # set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\" AT OK-AT-OK ATE1Q0 OK \\dATDT\\T TIMEOUT 40 CONNECT" CHAPserver: enable chap enable proxy set ifaddr 192.244.176.44 292.244.184.31 accept dns pppoe: set device "!/usr/sbin/pppoe -i rl0" set mtu max 1492 set mru max 1492 set speed sync disable acfcomp protocomp deny acfcomp set authname "[EMAIL PROTECTED]" set authkey "adslppp" add default HISADDR enable dns enable mssfixup -- Abel Talaversn Estevez Ingeniero Superior de Telecomunicaciones Analista de Proyectos OpenWired Caballero 87 - Bajos 08029 - Barcelona Tel. 93 495 0990 Fax. 93 419 4591 Openwired Alejandro Villegas,29 28043 - MADRID - ESPAQA Telifono: 91 300 51 09 Fax: 91 300 28 13 http://www.openwired.com
pppoe loopback
Hi!
Today one of my clients' firewall lost its pppoe connection and had to be
manually restarted (ifconfig pppoe0 down/up). The funny thing was this log
message:
Feb 2 04:57:08 wall /bsd: pppoe0: loopback
Feb 2 04:57:08 wall /bsd: pppoe0: phase terminate
Feb 2 04:57:08 wall /bsd: pppoe0: phase dead
I traced the "loopback" message to the state engine in
/usr/src/sys/net/if_spppsubr.c
if (nmagic == sp->lcp.magic) {
/* Line loopback mode detected. */
printf(SPP_FMT "loopback\n", SPP_ARGS(ifp));
/* Shut down the PPP link. */
lcp.Close(sp);
break;
}
Can in this case the link be reinitialized automatically or at least retry a
couple of times?
Regards, Mitja
pppoe server
Hi! I wish to experiment setting up a PPPoE server (AC) on OpenBSD 4.4. Although I've read the pppoe(8) man page and googled around, it is not clear for me how to set up such configuration. If one could point me to some docs and howtos, especially if it could be done using the kernel ppp driver (to avoid excessive cpu load), I would greatly appreciate that. Thanks! Daniel -- LEVAI Daniel PGP key ID = 0x4AC0A4B1 Key fingerprint = D037 03B9 C12D D338 4412 2D83 1373 917A 4AC0 A4B1
PPPoE problem
Hi, I'm trying to setup a PPPoE connection to my ISP (solcon.nl). I've read pppoe(4) and pppoe(8) and got the following configuration: cat /etc/hostname.pppoe0 inet 0.0.0.0 255.255.255.255 NONE \ pppoedev em2 authproto pap \ authname '@solcon.net' authkey '' up dest 0.0.0.1 !/sbin/route add default -ifp pppoe0 0.0.0.1 cat /etc/hostname.em2 up According to my ISP I should specify my IP-address and netmask which makes the following: cat /etc/hostname.pppoe0 inet 123.123.123.1 255.255.255.128 NONE \ pppoedev em2 authproto pap \ authname '@solcon.net' authkey '' up dest 0.0.0.1 !/sbin/route add default -ifp pppoe0 0.0.0.1 In both cases I'm getting "pppoe0: pap failure". This seems to indicate that the authentications is wrong, but according to my ISP they don't see any traffic from me to their radius server and we double checked the username and password. Since they don't support OpenBSD they gave me a sample config for Cisco: interface FastEthernet0/0 description LAN klant ip address 123.123.123.1 255.255.255.128 duplex auto speed auto no keepalive ! interface FastEthernet0/1 description WAN no ip address duplex full speed 100 pppoe enable pppoe-client dial-pool-number 1 ! interface Dialer0 ip unnumbered FastEthernet0/0 encapsulation ppp ip tcp adjust-mss 1452 dialer pool 1 dialer idle-time dialer-group 1 no cdp enable ppp authentication pap callin ppp pap sent-username @solcon.net password ! ip route 0.0.0.0 0.0.0.0 Dialer0 permanent Any suggestions on what I'm doing wrong or how to configure this? Kind regards, Martijn Rijkeboer
PPPoE issues
Hi, I'm trying to replace a PC Engines Alix board with an APU 2c4 board, but I'm having some issues to get it up and running. I have a fiber connection and my ISP requires a PPPoE connection over VLAN 6. With the old setup, this works like a charm. With the new setup, I can't get the PPPoE connection to work. When I use tcpdump on the ethernet interface, I can see the PADI packets leave the system on VLAN6, but there is no answer at all. OpenBSD keeps sending a PADI every minute or so, to no avail. I have tried to get it running with 5.9-stable (amd64), with a recent snapshot (amd64), with 5.9-stable (i386, as that works fine on the Alix), but none of them work. When I have a working connection on the old router and then quickly move the cable (the one that is connected to the fiber/copper converter) to the new router, I can see some packets (belonging to the 'old' PPPoE connection) arriving on the new router (with tcpdump). So at the ethernet level the link is OK. Does anyone have a clue what could be causing this? Some VLAN-tagging issue with the I210 NIC on the APU? Does anyone have a similar setup working? Thanks a lot in advance, Maurice
PPPoE Dropping
Good Morning, I've recently migrated to a new ISP (Zen UK), from BT, and am facing an annoying problem - head banging against a brick-wall has started - it is the same broadband product, i.e VDSL2/FTTC, just a different ISP. For the last 3 years my current setup has functioned on BT, since the migration to Zen things seem to have gone a bit wonky - the Zen aspect may or may not be related. I have an OpenBSD 5.7 router connected to either an HG612 or ECI modem, via a switch the PPPoE interface is on a VLAN and in its own rdomain, I encounter the same problem with both. The problem? PPPoE (kernel) drops frequently between 1 - 15 minutes of connected time and reconnects, then repeats, the modem sync is not dropping. The router has an OpenVPN (UDP) VPN connection that routes all traffic to the OpenVPN server in the DC. I should add, I still have another line still with BT with the exact same setup and this does not encounter the problem and has been up for some 70 days. Between migrating from BT -> Zen, the only thing that changed on the OpenBSD router was the PPPoE username/password. From the moment the migration occurred, this problem started occurring. Thing's I have ruled out: - Cabling, no errors on switch ports but all cables have been replaced - Not HG612 or ECI modem related, that I can see, problem happens with both. Initially thought it could be the HG612 bug with UDP/VPNs, however the modem is unlocked and running the latest release. The trick of unplugging and reseating the eth cable doesn't make any difference. - OpenBSD config, there is minimal kernel PPPoE config same setup works with BT and continues to work - OpenBSD OS versions (tried 3 different releases, 5.5, 5.6 and 5.7) - Rolled back RFC4638 setup, i.e for MTU 1500. The Max Payload is negotiated successfully during the connection process, so I don't believe this is the issue but have tried without anyway. - LCP echo/replies are all being sent and responded to in a timely manner, there are no ignore/dropped echos/replies before the 'term-req' is received' Enabled debug on the OpenBSD pppoe interface and it seems to me, that Zen are sending 'term-req' - although I need to make sure my reading of the logs is correct i.e 'lcp input' is the ISP/Zen? However, the below logs also show 'Down event (carrier loss)' but there is no carrier loss (the modem stays in sync) and all ethernet ports between the modem/switch/router stay up, no errors, etc - although this could be because the term-req has already been received and the disconnection is in process. ### Jun 28 21:15:56 rtr00 /bsd: pppoe0 (8864) state=3, session=0x2eb output -> 84:26:2b:a2:3c:da, len=139 Jun 28 21:15:56 rtr00 /bsd: pppoe0 (8864) state=3, session=0x2eb output -> 84:26:2b:a2:3c:da, len=139 Jun 28 21:15:56 rtr00 /bsd: pppoe0: lcp input(opened): Jun 28 21:15:56 rtr00 /bsd: pppoe0: lcp opened->stopping Jun 28 21:15:56 rtr00 /bsd: pppoe0: phase terminate Jun 28 21:15:56 rtr00 /bsd: pppoe0: ipcp down(opened) Jun 28 21:15:56 rtr00 /bsd: pppoe0: ipcp opened->starting Jun 28 21:15:56 rtr00 /bsd: pppoe0: ipcp close(starting) Jun 28 21:15:56 rtr00 /bsd: pppoe0: ipcp starting->initial Jun 28 21:15:56 rtr00 /bsd: pppoe0: lcp send terminate-ack Jun 28 21:15:56 rtr00 /bsd: pppoe0: lcp output Jun 28 21:15:56 rtr00 /bsd: pppoe0 (8864) state=3, session=0x2eb output -> 84:26:2b:a2:3c:da, len=12 Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp TO(stopping) rst_counter = 0 Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp stopping->stopped Jun 28 21:16:06 rtr00 /bsd: pppoe0: phase dead Jun 28 21:16:06 rtr00 /bsd: pppoe0: timeout Jun 28 21:16:06 rtr00 /bsd: pppoe0: disconnecting Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp down(stopped) Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp stopped->starting Jun 28 21:16:06 rtr00 /bsd: pppoe0: phase establish Jun 28 21:16:06 rtr00 /bsd: pppoe0 (8863) state=1, session=0x0 output -> ff:ff:ff:ff:ff:ff, len=18 Jun 28 21:16:06 rtr00 /bsd: pppoe0: Down event (carrier loss), taking interface down.<7>pppoe0: lcp close(starting) Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp starting->initial Jun 28 21:16:06 rtr00 /bsd: pppoe0: phase dead Jun 28 21:16:06 rtr00 /bsd: pppoe0 (8863) state=2, session=0x0 output -> 84:26:2b:a2:3c:da, len=38 Jun 28 21:16:06 rtr00 /bsd: pppoe0: session 0x2ee connected Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp open(initial) Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp initial->starting Jun 28 21:16:06 rtr00 /bsd: pppoe0: phase establish Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp up(starting) Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp starting->req-sent Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp output Jun 28 21:16:06 rtr00 /bsd: pppoe0 (8864) state=3, session=0x2ee output -> 84:26:2b:a2:3c:da, len=22 Jun 28 21:16:06 rtr00 /bsd: pppoe0: lcp input(req-sent): ### .. If anyone has any suggestions, or seen anything similar previously, I'm all ears. Going to open a case with the ISP as well. Thanks, Ed
PPPOE issue
Greetings I already posted this question here but i think i didn't explain very well, i have a issue in a openbsd 5.7 (tried also 5.6 and 5.5 same thing) with pppoe internet broadband connection , when i start the pppoe0 interface the connection does not estabilish and shows the message below repeatdly ,how can i troubleshoot this , does anyone here have any idea ? pppoe0: host unique tag found , but it belongs to a connection in state 3 pppoe: received PADO but could not find request for it Best Regards Dante F. B. Colò
OpenBSD PPPOE
Dear All, I would like to setup my openbsd as router. /etc/hostname.fxp0 up /etc/hostname.pppoe0 pppoedev fxp0 authproto pap authname "" authkey "" up dest 0.0.0.1 !/sbin/route add default -ifp pppoe0 0.0.0.1 Not able to get a connection. What wrong with it? -- Sent from: http://openbsd-archive.7691.n7.nabble.com/openbsd-user-misc-f3.html
pppoe problems
Hello misc@ I installed 7.1-release to an edgerouter-lite-3 (mips64, octeon). In the errata, I saw there was a security fix https://ftp.openbsd.org/pub/OpenBSD/patches/7.1/common/005_pppoe.patch.sig which was especially pertinent as this is a router. So, cvs-uped to 7.1-stable and built the kernel from those sources as mips64 isn't supported with syspatch. It installed fine, boots up fine. The problem is that I can't get pppoe to work. Before seeing if it's an issue with pppoe, what I'd like to know is, should I have also rebuilt the userland? The reason I didn't in the first place is that the pppoe patch mentions rebuilding/installing the kernel only, and building the userland will take an age on this hardware. Was just building and installing a new kernel incorrect, in this context? thanks in advance for any clarification
Re: pppoe
On Sun, Nov 20, 2011 at 6:37 PM, John Tate wrote: > I am setting up an OpenBSD firewall, and have everything working but I > am using userland pppoe. I am not sure if it ever became an official > part of OpenBSD, but I've heard there might be kernel level pppoe > support. > > Is there kernel level pppoe support? Or is the cybersphere filling my > head with dreams? man 4 pppoe
Re: pppoe
John Tate writes: > Is there kernel level pppoe support? Or is the cybersphere filling my > head with dreams? $ man -k pppoe pppoe (4) - PPP Over Ethernet protocol network interface pppoe (8) - PPP Over Ethernet translator -- http://www.wistly.net
Re: pppoe
On Nov 21 12:37:37, John Tate wrote: > I am setting up an OpenBSD firewall, and have everything working but I > am using userland pppoe. I am not sure if it ever became an official > part of OpenBSD, but I've heard there might be kernel level pppoe > support. > > Is there kernel level pppoe support? Or is the cybersphere filling my > head with dreams? Is http://www.openbsd.org/faq/faq6.html#PPP a part of "cybersphere"?
Re: pppoe
On Monday, November 21, 2011 7:57 AM, "Jan Stary" wrote: > On Nov 21 12:37:37, John Tate wrote: > > I am setting up an OpenBSD firewall, and have everything working but I > > am using userland pppoe. I am not sure if it ever became an official > > part of OpenBSD, but I've heard there might be kernel level pppoe > > support. > > > > Is there kernel level pppoe support? Or is the cybersphere filling my > > head with dreams? > > Is http://www.openbsd.org/faq/faq6.html#PPP a part of "cybersphere"? PPP?!?!?!? Aughugh, hsss, hs. It hurts usss it hurts uss! Take it away take it away!!! LOL Sorry, you have my sympathy...
Re: pppoe
Using userland ppp, this pf configuration is preventing proper pppoe
connections. The same would happen with pppoe(4). I know how to accept, but
I'm not sure about (a) pppoe only (2) the order and position of where it
should go, though i didn't plagiarize these filters except from the manual.
I generally understand them.
# cat
/etc/pf.conf
int_if="xl0"
ext_if="tun0" #has to be changed to pppoe(4)
thenetwrk="10.0.0.0/8"
rothbard="10.0.0.10"
baal="10.0.0.2"
smass="10.0.0.1"
etcp_services="{22}"
itcp_services="{22,53}"
icmp_types="echoreq"
ports_rothbard="{17000,17001,17002,17003,17004,17005,2322}"
ports_smass="{17100,17101,17102,17103,17104,17105,}"
set block-policy
return
set loginterface
$ext_if
set skip on
lo
anchor
"ftp-proxy/*"
pass in quick on $int_if inet proto tcp to any port ftp
\
divert-to 127.0.0.1 port
8021
match out on $ext_if from 10.0.0.0/8 to any nat-to
$int_if
pass on $ext_if from 10.0.0.0/8 to
any
pass out on $ext_if proto tcp from any to
any
pass in on $ext_if proto tcp from any to any port $ports_rothbard rdr-to
$rothba
rd
pass in on $ext_if proto tcp from any to any port $ports_smass rdr-to
$smass
antispoof quick for { lo $int_if
}
pass in on egress inet proto tcp from any to (egress)
\
port
$etcp_services
pass in on egress inet proto tcp from any to $baal port
$itcp_services
pass in inet proto icmp all icmp-type $icmp_types
On Mon, Nov 21, 2011 at 8:46 PM, Eric Furman wrote:
> On Monday, November 21, 2011 7:57 AM, "Jan Stary" wrote:
> > On Nov 21 12:37:37, John Tate wrote:
> > > I am setting up an OpenBSD firewall, and have everything working but I
> > > am using userland pppoe. I am not sure if it ever became an official
> > > part of OpenBSD, but I've heard there might be kernel level pppoe
> > > support.
> > >
> > > Is there kernel level pppoe support? Or is the cybersphere filling my
> > > head with dreams?
> >
> > Is http://www.openbsd.org/faq/faq6.html#PPP a part of "cybersphere"?
>
> PPP?!?!?!?
> Aughugh, hsss, hs. It hurts usss it hurts uss!
> Take it away take it away!!!
> LOL
>
> Sorry, you have my sympathy...
>
--
www.johntate.org
Re: Difference between pppoe(8) and pppoe(4) ?
On 2013-12-26, Denis Fondras wrote: > There is, unfortunately, no logs from pppoe(4) explaining what's wrong. You can try these to see if they give any clues: - 'ifconfig pppoe0 debug' and watch dmesg - 'tcpdump -nvvs1500 -iem0' (where 'em0' is the parent device of pppoe) Have you made any changes to your machine (i.e. updated to a newer snapshot etc) in the time when pppoe(4) broke?
Re: Difference between pppoe(8) and pppoe(4) ?
Hi Stuart,
As some have replied offlist, I tried to change the MTU and change
authentication to pap but to no avail.
> You can try these to see if they give any clues:
>
> - 'ifconfig pppoe0 debug' and watch dmesg
> - 'tcpdump -nvvs1500 -iem0' (where 'em0' is the parent device of pppoe)
>
Here are some logs :
* tcpdump with pppoe(4) :
18:37:12.817003 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 6
CHAP: Success
18:37:12.817017 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 12
IPCP: Configure-Request, IP-Address=178.132.16.250
18:37:12.817230 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 16
IPV6CP: Configure-Request, Interface-ID=0200:24ff:fecb:a3e4
18:37:12.817238 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 12
IPCP: Configure-Nak, IP-Address=0.0.0.0
18:37:12.818840 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 16
IPV6CP: Configure-Request, Interface-ID=0218:74ff:feb4:ac1b
18:37:12.818901 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 16
IPV6CP: Configure-Ack, Interface-ID=0218:74ff:feb4:ac1b
18:37:12.866829 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 16
IPV6CP: Configure-Ack, Interface-ID=0200:24ff:fecb:a3e4
18:37:12.868835 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 6
IPCP: Configure-Request, Unknown IPCP code 0x0
18:37:12.868879 PPPoE-Session
code Session, version 1, type 1, id 0x056a, length 12
IPCP: Configure-Nak, IP-Address=0.0.0.0
* pppoe0 debug :
pppoe0 (8864) state=3, session=0x333 output -> 00:30:88:10:3d:0e, len=18
pppoe0 (8864) state=3, session=0x333 output -> 00:30:88:10:3d:0e, len=20
pppoe0 (8864) state=3, session=0x333 output -> 00:30:88:10:3d:0e, len=18
pppoe0 (8864) state=3, session=0x333 output -> 00:30:88:10:3d:0e, len=18
pppoe0 (8864) state=3, session=0x333 output -> 00:30:88:10:3d:0e, len=18
* tcpdump with pppoe(8) :
18:39:54.343170 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 6
CHAP: Success
18:39:54.343188 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 12
IPCP: Configure-Request, IP-Address=178.132.16.246
18:39:54.343201 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 16
IPV6CP: Configure-Request, Interface-ID=0219:a9ff:fe51:281b
18:39:54.348551 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 12
CCP:
18:39:54.348773 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 18
IPCP: Configure-Request, IP-Address=192.168.10.1
18:39:54.348935 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 16
IPV6CP: Configure-Request, Interface-ID=0200:24ff:fecb:a3e4
18:39:54.349097 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 12
IPCP: Configure-Ack, IP-Address=178.132.16.246
18:39:54.349257 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 16
IPV6CP: Configure-Ack, Interface-ID=0219:a9ff:fe51:281b
18:39:54.399169 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 18
LCP: Protocol-Reject
18:39:54.399190 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 12
IPCP: Configure-Reject, IP-Compression-Protocol
18:39:54.400959 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 12
IPCP: Configure-Request, IP-Address=192.168.10.1
18:39:54.401178 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 16
IPV6CP: Configure-Ack, Interface-ID=0200:24ff:fecb:a3e4
18:39:54.405113 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 66
IPV6: :: > ff02::1:ffcb:a3e4: icmp6: neighbor sol: who has
fe80::200:24ff:fecb:a3e4 (len 24, hlim 255)
18:39:54.405307 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 66
IPV6: :: > ff02::1:ffcb:a3e4: icmp6: neighbor sol: who has
fe80::200:24ff:fecb:a3e4 (len 24, hlim 255)
18:39:54.409174 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 66
IPV6: fe80::219:a9ff:fe51:281b > ff02::1: icmp6: neighbor adv:
tgt is fe80::219:a9ff:fe51:281b(R) [class 0xe0] (len 24, hlim 255)
18:39:54.409195 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 78
IPV6: fe80::219:a9ff:fe51:281b > ff02::16: HBH (rtalert: 0x)
multicast listener report v2, 1 group record(s) [gaddr ff02::2 to_ex {
}] [class 0xe0] [hlim 1] (len 36)
18:39:54.409209 PPPoE-Session
code Session, version 1, type 1, id 0x0422, length 78
IPV6: fe80::219:a9ff:fe51:281b > ff02::16: HBH (rtalert: 0x)
multicast listener report v2, 1 group record(s) [gaddr ff02::
kernel pppoe problems
Ok, this probably isn't too big a surprise to frequent readers, but I'm
having trouble with the new kernelized pppoe. From the console messages
below, it looks like it's "dialing" (for lack of a better term) and
logging in successfully:
May 23 00:42:47 bbhhs96 /bsd: pppoe0: phase establish
May 23 00:42:47 bbhhs96 /bsd: pppoe0: phase authenticate
May 23 00:42:49 bbhhs96 /bsd: pppoe0: phase network
ifconfig seems to support this:
newtest# ifconfig
lo0: flags=8049 mtu 33224
inet 127.0.0.1 netmask 0xff00
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x7
fxp0: flags=8843 mtu 1500
address: 00:d0:b7:a0:dd:3f
media: Ethernet autoselect (10baseT)
status: active
inet6 fe80::2d0:b7ff:fea0:dd3f%fxp0 prefixlen 64 scopeid 0x1
fxp1: flags=8843 mtu 1500
address: 00:a0:c9:77:80:0d
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet 192.168.0.10 netmask 0xff00 broadcast 192.168.0.255
inet6 fe80::2a0:c9ff:fe77:800d%fxp1 prefixlen 64 scopeid 0x2
ral0: flags=8802 mtu 1500
address: 00:11:50:14:f6:a0
ieee80211: nwid "" 100dBm
media: IEEE802.11 autoselect
status: no network
pflog0: flags=0<> mtu 33224
pfsync0: flags=0<> mtu 2020
enc0: flags=0<> mtu 1536
pppoe0: flags=8851 mtu 1492
dev: fxp0 state: session
sid: 0x50f4 PADI retries: 3 PADR retries: 0 time: 0:1:2
inet 68.77.176.95 --> 0.0.0.1 netmask 0x
inet6 fe80::2d0:b7ff:fea0:dd3f%pppoe0 -> prefixlen 64 scopeid 0x8
The IP address looks valid, and it's in the same the netblocks I was
being assigned previously, but the gateway isn't being updated. 100%
packet loss when pinging a remote host confirms this. I have not
activated PF yet, since knowing the connection itself is working is
rather important before I throw filtering into the mix. My
/etc/hostname.pppoe0 is taken nearly verbatim from the pppoe(8) man page:
newtest# cat /etc/hostname.pppoe0
pppoedev fxp0
!/sbin/ifconfig fxp0 up
!/usr/sbin/spppcontrol \$if myauthproto=pap [EMAIL PROTECTED]
myauthkey=imnottellin
!/sbin/ifconfig \$if inet 0.0.0.0 0.0.0.1 netmask 0x
!/sbin/route add default 0.0.0.1
up
According to the manpage, 0.0.0.1 is considered a remote-assigned
wildcard, but it doesn't seem to actually be working that way (I also
tried 0.0.0.0 just in case). I removed the /etc/mygate file that was
created during the install process, so that's not getting in the way,
either. The IPv4 routing table after roughly 5 minutes:
newtest# route show
Routing tables
Internet:
DestinationGatewayFlagsRefs UseMtu
Interface
default0.0.0.1UGS 03 - pppoe0
0.0.0.1defaultUH 00 - pppoe0
loopback localhost UGRS00 33224 lo0
localhost localhost UH 00 33224 lo0
192.168.0/24 link#2 UC 00 - fxp1
BASE-ADDRESS.MCAST localhost URS 00 33224 lo0
I'm guessing I'm missing something that's probably obvious, but being
obvious, it's eluding me. Someone have a cluestick handy? Oh, dmesg...
newtest# cat /var/run/dmesg.boot
OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium (P54C) ("GenuineIntel" 586-class) 171 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8
cpu0: F00F bug workaround installed
real mem = 100245504 (97896K)
avail mem = 84451328 (82472K)
using 1249 buffers containing 5115904 bytes (4996K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(c8) BIOS, date 02/26/97, BIOS32 rev. 0 @ 0xfb340
apm0 at bios0: Power Management spec V1.2
apm0: APM engage (device 1): power management disabled (1)
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev 2.1 @ 0xf/0xb804
pcibios0: PCI BIOS has 6 Interrupt Routing table entries
pcibios0: PCI Interrupt Router at 000:07:0 ("Intel 82371SB ISA" rev 0x00)
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc/0x8000 0xc8000/0x1000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82437VX" rev 0x02
pcib0 at pci0 dev 7 function 0 "Intel 82371SB ISA" rev 0x01
pciide0 at pci0 dev 7 function 1 "Intel 82371SB IDE" rev 0x00: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibili
ty
wd0 at pciide0 channel 0 drive 0:
wd0: 16-sector PIO, LBA, 12970MB, 26563824 sectors
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2
wd1 at pciide0 channel 1 drive 0:
wd1: 16-sector PIO, LBA, 9770MB, 20010816 sectors
wd1(pciide0:1:0): using PIO mode 4, DMA mode 2
fxp0 at pci0 dev 8 function 0 "Intel 82557" rev 0x08, i8
ADSL connection (PPPoE)
I am about to take ADSL connection and the service provider gives it over PPPoE. I am going to get a LinkSys ADSL modem: http://www.linksys.com/international/product.asp?coid=19&ipid=670; the data sheet of the modem can also be found here: ftp://ftp.linksys.com/international/datasheets/AG241-EU-UK_datasheet_Rev_NC_pdf.pdf Is there any issues I should consider before buying this modem? Will it work with Open3.7? I know it works fine with Linux. Is there any issues I should consider before taking the connection from the service prodiver? Any other technical details? I really want my ADSL connection to work with Open3.7. TIA. --Z.
PPPoE on 486
I'd like to give a big hoot and cheer Theo and the gang. The new kernelized PPPoE is fast enough to keep up with two MMORPG instances, three internet radio streams, and three large downloads combining for an average of 130kb/sec all at once, while still being 30-50% idle! It never even came close when I tried with 3.4 and 3.5 (see threads from around this time last year). dmesg below. Both ep's are 3C509B in non-PNP mode, full duplex enabled. I imagine it would still grind to a halt if I tried to SSH stuff on account of the crypto (it's a 33MHz chip), but DSL firewalling doesn't require that :) top says... load averages: 0.34, 0.27, 0.25 CPU states: 5% user, 0% nice, 5% system, 55% interrupt, 35% idle OpenBSD 3.7 (GENERIC) #50: Sun Mar 20 00:01:57 MST 2005 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel 486DX (486-class) real mem = 66695168 (65132K) avail mem = 53452800 (52200K) using 839 buffers containing 3436544 bytes (3356K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(00) BIOS, date 05/05/91 pcibios at bios0 function 0x1a not configured bios0: ROM list: 0xc/0x8000 0xd/0x4000 cpu0 at mainbus0 isa0 at mainbus0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0 (mux 1 ignored for console): console keyboard vga0 at isa0 port 0x3b0/48 iomem 0xa/131072 wsdisplay0 at vga0: console (80x25, vt100 emulation), using wskbd0 wsdisplay0: screen 1-5 added (80x25, vt100 emulation) wdc0 at isa0 port 0x1f0/8 irq 14 wd0 at wdc0 channel 0 drive 0: wd0: 8-sector PIO, LBA, 2457MB, 5033952 sectors wd0(wdc0:0:0): using BIOS timings wdc1 at isa0 port 0x170/8 irq 15 atapiscsi0 at wdc1 channel 0 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: SCSI0 5/cdrom removable cd0(wdc1:0:0): using BIOS timings ep0 at isa0 port 0x2a0/16 irq 12: address 00:60:97:b6:04:8e, utp (default utp) ep1 at isa0 port 0x300/16 irq 11: address 00:60:08:12:df:f5, utp (default utp) sb0 at isa0 port 0x220/24 irq 5 drq 1: dsp v4.11 midi0 at sb0: audio0 at sb0 opl0 at sb0: model OPL3 midi1 at opl0: pcppi0 at isa0 port 0x61 midi2 at pcppi0: sysbeep0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec fd1 at fdc0 drive 1: 1.2MB 80 cyl, 2 head, 15 sec biomask e745 netmask ff45 ttymask ffc7 pctr: no performance counters in CPU dkcsum: wd0 matched BIOS disk 80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 pppoe0: phase establish pppoe0: phase authenticate pppoe0: phase network
kernel pppoe addon
Hi!
Please forgive me if I missed something about the kernel pppoe but my initial
tests with the program were positive. However I noticed that when my ISP
disconnects the connection, it reauthenticates with a new IP and the default
route has to be set anew for the outgoing IP's to change. One can write a
few dirty scripts to do this with crontab or you can try out my new program
that I wrote just for this purpose. It waits until the IP on the pppoe0
interface changes and then it sets a new default route. Initial tests with
this program show it works positively.
program below - peter
/*
* Copyright (c) 2005 Peter Philipp
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*notice, this list of conditions and the following disclaimer in the
*documentation and/or other materials provided with the distribution.
* 3. The name of the author may not be used to endorse or promote products
*derived from this software without specific prior written permission
*
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#include
#define INTERFACE "pppoe0"
#define BUFLEN (sizeof(struct rt_msghdr) + 512)
#define WAITPERIOD 60
extern char *__progname;
u_int32_t get_ip(char *interface);
int
main(int argc, char *argv[])
{
struct timeval tv;
struct sockaddr_in *sin;
struct rt_msghdr *rtm, *rtm2;
in_addr_t last_address;
in_addr_t curr_address;
int so, sel;
int rs, n;
int seq, ch;
int waitperiod = WAITPERIOD;
pid_t pid;
char *interface = INTERFACE;
char *buf, *sbuf;
char lastip[INET_ADDRSTRLEN];
char currip[INET_ADDRSTRLEN];
if (geteuid() != 0) {
fprintf(stderr, "must be root\n");
exit(1);
}
while ((ch = getopt(argc, argv, "i:w:")) != -1) {
switch (ch) {
case 'i':
interface = optarg;
break;
case 'w':
waitperiod = atoi(optarg);
break;
default:
fprintf(stderr, "usage: %s [-i interface][-w
waittime]\n", __progname);
exit(1);
}
}
last_address = get_ip(interface);
seq = arc4random();
openlog(__progname, LOG_NDELAY | LOG_PID | LOG_CONS, LOG_DAEMON);
daemon(0, 0);
for (;;) {
tv.tv_sec = waitperiod;
tv.tv_usec = 0;
sel = select(0, NULL, NULL, NULL, &tv);
if (sel < 0)
continue;
curr_address = get_ip(interface);
if (last_address != curr_address) {
inet_ntop(AF_INET, &last_address, (char *)&lastip,
sizeof(lastip));
inet_ntop(AF_INET, &curr_address, (char *)&currip,
sizeof(currip));
syslog(LOG_INFO, "interface %s changed its address from
%s to %s, adding new default route", interface, lastip, currip);
last_address = curr_address;
rs = socket(AF_ROUTE, SOCK_RAW, 0);
if (rs < 0) {
syslog(LOG_INFO, "socket: %m");
continue;
}
sbuf = calloc(1, BUFLEN);
if (sbuf == NULL) {
syslog(LOG_INFO, "calloc: %m");
close(rs);
continue;
nmap Over pppoe
Anyone else experiencing issues when scanning a host on the Internet and using pppoe? It's as if nmap never sees the packets, but tcpdump clearly shows packets being received. I'm running 3.7 -release and nmap works fine when scanning on all the other interfaces. This issue is reproducible with pf enabled and disabled. Thoughts appreciated... $ sudo nmap -v -P0 -O 208.139.x.x Starting nmap 3.81 ( http://www.insecure.org/nmap/ ) at 2005-07-15 17:38 MDT Initiating SYN Stealth Scan against 208.139.x.x [1663 ports] at 17:38 SYN Stealth Scan Timing: About 8.78% done; ETC: 17:43 (0:05:14 remaining) The SYN Stealth Scan took 337.75s to scan 1663 total ports. Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port Host 208.139.x.x appears to be up ... good. All 1663 scanned ports on 208.139.x.x are: filtered Too many fingerprints match this host to give specific OS details TCP/IP fingerprint: SInfo(V=3.81%P=i386-unknown-openbsd3.7%D=7/15%Tm=42D84A53%O=-1%C=-1) T5(Resp=N) T6(Resp=N) T7(Resp=N) PU(Resp=N) Nmap finished: 1 IP address (1 host up) scanned in 375.502 seconds Raw packets sent: 3344 (134KB) | Rcvd: 0 (0B) $ sudo tcpdump -ni pppoe0 src host 208.139.x.x tcpdump: listening on pppoe0, link-type PPP_ETHER 17:38:05.191581 208.139.x.x.22 > 216.160.x.x.50360: S 2447336077:2447336077(0) ack 1845698994 win 16384 (DF) 17:38:07.222825 208.139.x.x.22 > 216.160.x.x.50361: S 4087438315:4087438315(0) ack 1845633457 win 16384 (DF) 17:38:08.212759 208.139.x.x.80 > 216.160.x.x.50360: S 3547667142:3547667142(0) ack 1845698994 win 16384 (DF) 17:38:09.231993 208.139.x.x.80 > 216.160.x.x.50361: S 2807575700:2807575700(0) ack 1845633457 win 16384 (DF)
Re: Sniffing pppoe
If you only need to redirect port 22 to internal IP, phone your ISP and ask them for this redirect. I have made it on every ADS that I have and thay never reject my request. Regards, Yanko -Original Message- From: Alexander Farber [mailto:[EMAIL PROTECTED] Sent: Monday, August 01, 2005 10:19 PM To: misc@openbsd.org Subject: Sniffing pppoe Hi, probably a common situation to some people here: I have an "ADSL-router", a box locked down by my ISP. I could reset it, but then I'll lose the connection data. Is there a way to connect my OpenBSD PC to it and to sniff the data (esp. username, password) it sends? The pppoe man page mentions, that it could "act as server", but how to set it up? Which hardware is needed? Can I just connect the router's "DSL" jack with a NIC on my PC? If yes, should I take a crossover cable or a straight one? Regards Alex PS: Don't worry about legal side - I haven't signed any agreements and I just want to forward the incoming ssh connections to an internal IP (and currently can't)
Re: Sniffing pppoe
I already asked. This won't happen 2005/8/1, Yanko Karkalichev <[EMAIL PROTECTED]>: > If you only need to redirect port 22 to internal IP, phone your ISP and ask > them for this redirect. > I have made it on every ADS that I have and thay never reject my request.
Re: pppoe detail
look in www.openbsd.org in faqs there is a very good faq on how implement that
and in openbsd support too
David
2005/9/28, Francisco Valladolid <[EMAIL PROTECTED]>:
> Hi Folks ..
> I had recently installed a OpenBSD 3.8 -current machine, running in-kernel
> PPPoE implementation, (man 4 pppoe), while it connect fine to the internet
> (via ADSL Modem), and do NAT corectly, I can't access to internal web server
> from the internet. it run DynDNS.
> The scenario is the next.
> Internet - ADSL dc0-- OpenBSD 3.8 fxp0 --switch
> - LAN (192.168.0.0/24 <http://192.168.0.0/24>)
> While i dodn't have a DMZ yet, I hope shortly have it.
>
> int_if = "fxp0"
> ext_if = "pppoe0"
>
> tcp_services = "{ 22, 113 }"
> www_server = "192.168.1.100 <http://192.168.1.100>"
> webports = "{http, https}"
>
> # port 80 for www service ruunning
> icmp_types = "echoreq"
>
> #priv_nets = "{ 127.0.0.0/8 <http://127.0.0.0/8>,
> 192.168.0.0/16<http://192.168.0.0/16>,
> 172.16.0.0/12 <http://172.16.0.0/12>, 10.0.0.0/8 <http://10.0.0.0/8> }"
> priv_nets = "{127.0.0.0/8 <http://127.0.0.0/8>,
> 192.168.0.0/16<http://192.168.0.0/16>}"
>
> # options
> set block-policy return
> set loginterface $ext_if
>
> # scrub
> scrub in all
>
> # scrub for NAT in PPPoE for using max mtu value
> scrub out on pppoe0 max-mss 1440
>
> # nat/rdr
> nat on $ext_if from $int_if:network to any -> ($ext_if)
> rdr on $int_if proto tcp from any to any port 21 ->
> 127.0.0.1<http://127.0.0.1>\
> port 8021
>
> # permite acceso al HTTP server
> rdr on $ext_if proto tcp from any to any port 80 -> $www_server
>
> #redirecciona el puerto 3128 al 8 para hacer squid transparente
> #rdr on $int_if inet proto tcp from any to any port www ->
> 127.0.0.1<http://127.0.0.1>port 3128
>
> # filter rules
> block all
>
> pass quick on lo0 all
>
> block drop in quick on $ext_if from $priv_nets to any
> block drop out quick on $ext_if from any to $priv_nets
>
> pass in on $ext_if inet proto tcp from any to ($ext_if) \
> port $tcp_services flags S/SA keep state
>
> pass in on $ext_if inet proto tcp from any to ($ext_if) \
> user proxy keep state
>
> #pasa todo por el squid
>
> # pass in on $int_if inet proto tcp from any to 127.0.0.1
> <http://127.0.0.1>port 3128 keep state
> # pass out on $ext_if inet proto tcp from any to any port www keep state
>
> pass in on $int_if from $int_if:network to any keep state
> pass out on $int_if from any to $int_if:network keep state
>
> pass out on $ext_if proto tcp all modulate state flags S/SA
> pass out on $ext_if proto { udp, icmp } all keep state
>
> #
>
> pass in on $ext_if proto tcp from any to $www_server port 80 \
> flags S/SA synproxy state
>
> Now, the www server (apache) located in 192.168.1.100
> <http://192.168.1.100>do not work .
>
> Any suggestions.
>
> Regards.
>
> --
> ---
> BSD - Unix simplicity.
> Francisco Valladolid Hdez.
> [EMAIL PROTECTED]
Re: PPPoE troubles.
Hi Marcos, I never used PPPoE myself, but let me try to help you out... On Sat, Oct 01, 2005 at 05:36:24PM -0300, Marcos Vinicius Buzo wrote: > I live in Brazil and my connection is an ADSL link with Telefonica. Then you probably live somewhere in the state of Sao Paulo :-) > !/sbin/ifconfig \$if inet 0.0.0.0 0.0.0.1 netmask 0x > !/sbin/route add default 0.0.0.1 Why are you doing this? You're setting your gateway to 0.0.0.1. > The netstat -nr command shows me: > > Destination Gateway Flags Refs Use Mtu Interface > 0.0.0.1 0.0.0.0 UH 0 0 - pppoe0 Which matches the set of ifconfig + route commands that you used, no? > Does anybody here live in Brazil and use the adsl link from telefonica and > can get it working with OpenBSD/pppoe ? No. I've a friend who uses PPPoE for Velox. Shall you have more trouble and I will put you in touch with him. -p.
Re: PPPoE troubles.
On Sat, Oct 01, 2005 at 07:04:47PM -0300, Pedro Martelletto wrote: > > > !/sbin/ifconfig \$if inet 0.0.0.0 0.0.0.1 netmask 0x > > !/sbin/route add default 0.0.0.1 > > Why are you doing this? You're setting your gateway to 0.0.0.1. > it is correct for this scenario - pppoe(4) explains why. jmc
Re: PPPoE troubles.
Yes Pedro, I live in the state of Sao Paulo. I used that configuration because is how the man 4 pppoe is telling i should do, these adresses should be replaced with the adresses I would receive from my ISP. A typical */etc/hostname.pppoe0* file looks like this: pppoedev ne0 !/sbin/ifconfig ne0 up !/usr/sbin/spppcontrol \$if myauthproto=pap myauthname=testcaller \ myauthkey=donttell !/sbin/ifconfig \$if inet 0.0.0.0 <http://0.0.0.0> 0.0.0.1 <http://0.0.0.1> netmask 0x !/sbin/route add default 0.0.0.1 <http://0.0.0.1> up Since this is a PPP interface, the addresses assigned to the interface may change during PPP negotiation. There is no fine grained control available for deciding which addresses are acceptable and which are not. For the local side and the remote address there is exactly one choice: hard coded address or wildcard. If a real address is assigned to one side of the connection, PPP negotiation will only agree to exactly this address. If one side is wildcarded, every address suggested by the peer will be accepted. To wildcard the local address set it to 0.0.0.0 <http://0.0.0.0>; to wildcard the remote address set it to 0.0.0.1 <http://0.0.0.1>. I would like to talk to your friend to know what he is doing to get pppoe working, Thanks in advance man.. On 10/1/05, Pedro Martelletto <[EMAIL PROTECTED]> wrote: > > Hi Marcos, > > I never used PPPoE myself, but let me try to help you out... > > On Sat, Oct 01, 2005 at 05:36:24PM -0300, Marcos Vinicius Buzo wrote: > > I live in Brazil and my connection is an ADSL link with Telefonica. > > Then you probably live somewhere in the state of Sao Paulo :-) > > > !/sbin/ifconfig \$if inet 0.0.0.0 <http://0.0.0.0> 0.0.0.1<http://0.0.0.1>netmask 0x > > !/sbin/route add default 0.0.0.1 <http://0.0.0.1> > > Why are you doing this? You're setting your gateway to 0.0.0.1<http://0.0.0.1> > . > > > The netstat -nr command shows me: > > > > Destination Gateway Flags Refs Use Mtu Interface > > 0.0.0.1 <http://0.0.0.1> 0.0.0.0 <http://0.0.0.0> UH 0 0 - pppoe0 > > Which matches the set of ifconfig + route commands that you used, no? > > > Does anybody here live in Brazil and use the adsl link from telefonica > and > > can get it working with OpenBSD/pppoe ? > > No. I've a friend who uses PPPoE for Velox. Shall you have more trouble > and I will put you in touch with him. > > -p.
Re: PPPoE troubles.
On Sat, Oct 01, 2005 at 07:23:55PM -0300, Marcos Vinicius Buzo wrote: > Yes Pedro, I live in the state of Sao Paulo. I used that configuration > because is how the man 4 pppoe is telling i should do, these adresses should > be replaced with the adresses I would receive from my ISP. Oh, so never mind. :-) Anyway, does the PPPoE code yield any kind of log? If so, have you tried digging through it to find anything interesting? > I would like to talk to your friend to know what he is doing to get pppoe > working, Sure, please get in touch with Luiz Gustavo <[EMAIL PROTECTED]>, and if you get it to work, then please post the solution in the list, so future users can find it in the archives. -p.
Re: PPPoE troubles.
On Sat, Oct 01, 2005 at 07:04:47PM -0300, Pedro Martelletto wrote: > On Sat, Oct 01, 2005 at 05:36:24PM -0300, Marcos Vinicius Buzo wrote: > > Does anybody here live in Brazil and use the adsl link from telefonica and > > can get it working with OpenBSD/pppoe ? > > No. I've a friend who uses PPPoE for Velox. Shall you have more trouble > and I will put you in touch with him. > > -p. Actually, I was wrong. I know some guy in Sao Paulo who uses the ADSL services provided by Telefonica with OpenBSD and userland PPPoE. These are the settings he's using: pppoe: set device "!/usr/sbin/pppoe -i INTERFACE" set mtu max 1492 set mru max 1492 set speed sync disable acfcomp protocomp deny acfcomp set authname "[EMAIL PROTECTED]" set authkey "senha" add! default HISADDR enable dns -p.
Re: PPPoE troubles.
Thanks for all your replies. I will test the userland pppoe too. I solved my problem, I just removed a clean /etc/mygate file, and it worked fine using the pppoe kernel implementation. It is really normal to have a 0.0.0.1 <http://0.0.0.1>gateway, it worked very fine. Thanks again :) []s On 10/1/05, Pedro Martelletto <[EMAIL PROTECTED]> wrote: > > On Sat, Oct 01, 2005 at 07:04:47PM -0300, Pedro Martelletto wrote: > > On Sat, Oct 01, 2005 at 05:36:24PM -0300, Marcos Vinicius Buzo wrote: > > > Does anybody here live in Brazil and use the adsl link from telefonica > and > > > can get it working with OpenBSD/pppoe ? > > > > No. I've a friend who uses PPPoE for Velox. Shall you have more trouble > > and I will put you in touch with him. > > > > -p. > > Actually, I was wrong. I know some guy in Sao Paulo who uses the ADSL > services provided by Telefonica with OpenBSD and userland PPPoE. > > These are the settings he's using: > > pppoe: > set device "!/usr/sbin/pppoe -i INTERFACE" > set mtu max 1492 > set mru max 1492 > set speed sync > disable acfcomp protocomp > deny acfcomp > set authname "[EMAIL PROTECTED]" > set authkey "senha" > add! default HISADDR > enable dns > > -p.
Re: unnumbered PPPoE
While I have never done it myself, I THINK that you might be able to do it with bridging the pppoe interface with an ethernet interface. Play around a little bit. -- Chris On 10-Oct-05, at 8:44 AM, Talmage wrote: I've been reading through manpages and tutorials but have not been able to get an answer to a question I have. I am wondering if it's possible to use OpenBSD as an unnumbered PPPoE client bridge. Basically a transparent bridge that processes packets for PPPoE so the rest of the network doesn't have to deal with PPPoE. [internet]-[ISP(PPPoE Server)][modem]====[openbsd(PPPoE Client)]-[multiple static IPs] Kory T
Re: unnumbered PPPoE
Thanks for the suggestion. Unfortunately, bridge(4) doesn't support pppoe(4) as a possible interface. I don't know why, but it just rejects it. Anyone know of a workaround for this? I'm on a 100mb/s FTTH line so a userland pppoe is not an option. Kory T On Oct 10, 2005, at 11:42 PM, Christopher Hylarides wrote: While I have never done it myself, I THINK that you might be able to do it with bridging the pppoe interface with an ethernet interface. Play around a little bit. -- Chris On 10-Oct-05, at 8:44 AM, Talmage wrote: I've been reading through manpages and tutorials but have not been able to get an answer to a question I have. I am wondering if it's possible to use OpenBSD as an unnumbered PPPoE client bridge. Basically a transparent bridge that processes packets for PPPoE so the rest of the network doesn't have to deal with PPPoE. [internet]-[ISP(PPPoE Server)][modem][openbsd(PPPoE Client)]-[multiple static IPs] Kory T
Re: unnumbered PPPoE
>Thanks for the suggestion. Unfortunately, bridge(4) doesn't support >pppoe(4) as a possible interface. I don't know why, but it just >rejects it. Anyone know of a workaround for this? I'm on a 100mb/s >FTTH line so a userland pppoe is not an option. > >Kory T i don't think you can filter PPPOE packets b/c they're setup as ethernet frames. see http://www.bsdforums.org/forums/showthread.php?t=29843&highlight=pppoe+bridge or search the archives. AFAIK, the point of a pppoe tunnel is to put the packets into and out the frames needed to use PPPOE. so until the packets pop out of the ethernet frames, pf can't grok them. i'm pretty sure i'm not talking garbage, but someone can feel free to correct me if i'm wrong. cheers, jake > >On Oct 10, 2005, at 11:42 PM, Christopher Hylarides wrote: > >> While I have never done it myself, I THINK that you might be able >> to do it with bridging the pppoe interface with an ethernet >> interface. Play around a little bit. >> >> -- >> Chris >> >> On 10-Oct-05, at 8:44 AM, Talmage wrote: >> >> >>> I've been reading through manpages and tutorials but have not been >>> able to get an answer to a question I have. >>> >>> I am wondering if it's possible to use OpenBSD as an unnumbered >>> PPPoE client bridge. Basically a transparent bridge that >>> processes packets for PPPoE so the rest of the network doesn't >>> have to deal with PPPoE. >>> >>> [internet]-[ISP(PPPoE Server)][modem][openbsd(PPPoE >>> Client)]-[multiple static IPs] >>> >>> Kory T
Re: share PPPoE
On Fri, Nov 11, 2005 at 09:34:35AM -0300, David fire wrote: > hi > i want to share the internet conection i configured the PPPoE but i have a > bridge i should do NAT whit the interfase which is pppoe client and the if > where i want share internet or if a iam doing the bridge i dont need nat? > thanks! > David I am sorry, please rephrase this in a way I can understand. ;-) If you intended to ask this: yes, when using an OpenBSD box as a PPPoE router, it is possible to do NAT or bridging (probably both, too). I'd go with NAT, as this allows you to run multiple hosts and has some security benefits. [1] Someone else will have to comment on doing both. Joachim [1] Compared to a bridge, when neither is using pf. If using pf, well, it doesn't matter.
Re: share PPPoE
yes you understand i will send you your certificate of indan english translator so i will use bridge and i was all the day reading the pf user guide. thanks David 2005/11/11, Joachim Schipper <[EMAIL PROTECTED]>: > > On Fri, Nov 11, 2005 at 09:34:35AM -0300, David fire wrote: > > hi > > i want to share the internet conection i configured the PPPoE but i have > a > > bridge i should do NAT whit the interfase which is pppoe client and the > if > > where i want share internet or if a iam doing the bridge i dont need > nat? > > thanks! > > David > > I am sorry, please rephrase this in a way I can understand. ;-) > > If you intended to ask this: yes, when using an OpenBSD box as a PPPoE > router, it is possible to do NAT or bridging (probably both, too). I'd go > with NAT, as this allows you to run multiple hosts and has some security > benefits. [1] > > Someone else will have to comment on doing both. > > Joachim > > [1] Compared to a bridge, when neither is using pf. If using pf, well, > it doesn't matter.
PPPoE performance test...
Dear Juuso: Searching over the internet, I found an e-mail about some performance test you run with PPPoE over OpenBSD. This e-mail is dated Dec 2, 2002. Currently I'm installing some PPPoE access servers in the headquarters of a client of mine. This client now is requesting us some performance tests for PPPoE, but being honest, I can't find an affordable way to configure hundreds and even thousands of concurrent pppoe client connections for such a test. As I read in your e-mail, I was wondering if you have a more clever methodology for doing this that you may share with us. Any help or enlightment you may give us would be greatly appreciated. Thank you in advance for your kind reply. Regards. Ing. Marco Antonio Castillo Chief Design Engineer Van Der Kaaden IT Consulting Guatemala, Guatemala C.A. tel: +502 59186971 e-mail: [EMAIL PROTECTED] sip: [EMAIL PROTECTED]
Re: Unstable PPPoE
On 7/27/07, Timothy Wilson <[EMAIL PROTECTED]> wrote: > I'm having a frustrating problem. My internet is highly unstable when > using bit torrent. I don't think there's anything special about my > configuration: my gateway is a craptop with inbuilt Intel ethernet and > a url0 USB ethernet for the modem. The connection is bridged, using pf > (obviously) for routing / firewall and kernel PPPoE for dialing via my > bridged netcomm nb5+. > > Basically, when I try to use bit torrent the connection dies after > about 20mins. The kernel PPPoE daemon doesn't bring it back up. In > fact, even doing > #sh /etc/netstart > doesn't bring it back up. The only way to bring it back up is via a > reboot :( Very frustrating. It also takes about 10-15mins to > reconnect; surely that's a bit too long, even for PPPoE? I know this > isn't a problem with my ISP as I've always been able to download bt > stably when I was using the modem in router mode. I thought it might > have been an MTU problem, but I'm using the mss fix in /etc/pf.conf, > so I don't think it's that. I played around with a few values just to > be sure, but I'm open to suggestions. > dmesg: > pppoe0: received unexpected PADO > pppoe0: received unexpected PADO > pppoe0: received unexpected PADO > pppoe0: received unexpected PADO > pppoe0: received unexpected PADO > pppoe0: received unexpected PADO > pppoe0: received unexpected PADO > pppoe0: received unexpected PADO > url0: usb error on tx: TIMEOUT > pppoe0: LCP keepalive timeout Based on your dmesg, it appears this might be related to url0whether it's the hardware, driver or something associated, I don't know. You might want to try another Ethernet connection. FWIW, I've never been a fan of "USB Ethernet."
Re: Unstable PPPoE
> Hello ladies and gentlemen! > > I'm having a frustrating problem. My internet is highly unstable when > using bit torrent. I don't think there's anything special about my > configuration: my gateway is a craptop with inbuilt Intel ethernet and > a url0 USB ethernet for the modem. The connection is bridged, using pf > (obviously) for routing / firewall and kernel PPPoE for dialing via my > bridged netcomm nb5+. I suspect it is a problem with your modem. Have you tried replacing it? I have seen modems lock up on bittorrent/mule traffic. Usually bridge mode prevents this, but I have no experience with your particular modem. > Basically, when I try to use bit torrent the connection dies after > about 20mins. The kernel PPPoE daemon doesn't bring it back up. In > fact, even doing > #sh /etc/netstart > doesn't bring it back up. The only way to bring it back up is via a > reboot :( In your case, reboot == disconnect + connect USB ethernet, it may even reset the modem if it is powered by USB. Perhaps you can just unplug/replug your USB ethernet cable and see if this removes the need to reboot? It may also be a problem with the url0 ethernet driver. > Very frustrating. It also takes about 10-15mins to > reconnect; surely that's a bit too long, even for PPPoE? This is expected since your ISP does not know you terminated the old session. Thus you are waiting for it to timeout before your ISP would let you establish a new one. You can compile a kernel with PPPOE_TERM_UNKNOWN_SESSIONS (see pppoe(4)) to have pppoe terminate the old session. > I know this > isn't a problem with my ISP as I've always been able to download bt > stably when I was using the modem in router mode. I thought it might > have been an MTU problem, but I'm using the mss fix in /etc/pf.conf, > so I don't think it's that. I played around with a few values just to > be sure, but I'm open to suggestions. What you describe is not related to MSS/MTU > I'll post my dmesg, /etc/pf.conf and /etc/hostname.pppoe. If there's > anything else I should send, please let me know! After you have tried the above suggestions, and if the problem is NOT in url(4) driver and/or the modem you can enable debugging on the pppoe0 interface 'ifconfig pppoe0 debug' and/or use tcpdump on the ethernet interface to examine pppoe packets. Check the archives for details. -- In theory, there is no difference between theory and practice. But, in practice, there is.
Re: Unstable PPPoE
> it's the hardware, driver or something associated, I don't know. You > might want to try another Ethernet connection. FWIW, I've never been > a fan of "USB Ethernet." url works surprisingly well, but I didn't like aue much. All luck of the draw with cheap ebay vendors though :)
Re: Unstable PPPoE
Timothy Wilson wrote: /etc/hostname.pppoe: inet 0.0.0.0 255.255.255.255 NONE pppoedev url0 authproto auto authname 'user' authkey 'pass' up dest 0.0.0.1 !/sbin/route/ add default -ifp pppoe0 0.0.0.1 echo "up" > /etc/hostname.url0 Please feel free to give suggetions to my pf.conf etc! Hi Timothy, I'm recently setting up my box to do pppoe as well, and I found your hostname.pppoe not working at all, unless I changed authproto to pap. auto isn't even supposed to work. Here's what man ifconfig says: authproto proto Set the PPP authentication protocol on the specified interface acting as a client. The protocol name can be either `chap', `pap', or `none'. In the latter case, authentication will be turned off. I'm wondering why your box goes online at all? Regards, Dorian
kernelmode pppoe 4.1
I finally got this to work and it works GREAT! My question is, is there a way to politely shut down the pppoe0 interface during a reboot? My ISP doesnt like being 'dropped' and as such, on a reboot it can take many attempts to successfully authenticate back in. When I was running userland, I could kill off 'ppp' via rc.shutdown and avoid this timeout during reboot. Any thoughts? -JD
kernel pppoe issues
Hi, I've got some trouble with in-kernel pppoe and adsl. >From time to time the connection just "hangs up": # grep pppoe /var/log/messages [...] Jul 26 09:41:21 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 26 10:34:51 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 26 10:34:57 dslgw /bsd: pppoe0: pap failure Jul 26 10:35:07 dslgw /bsd: pppoe0: pap failure Jul 26 10:35:17 dslgw /bsd: pppoe0: pap failure Jul 26 10:35:28 dslgw /bsd: pppoe0: pap failure Jul 27 11:05:27 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 28 03:09:01 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 29 14:35:39 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 29 15:01:20 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 30 07:33:53 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 30 07:43:23 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 30 07:46:33 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 30 08:01:34 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 30 18:23:16 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 31 10:34:30 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 31 11:04:20 dslgw /bsd: pppoe0: LCP keepalive timeout Jul 31 14:31:21 dslgw /bsd: pppoe0: LCP keepalive timeout Aug 1 10:31:56 dslgw /bsd: pppoe0: LCP keepalive timeout Aug 1 11:09:36 dslgw /bsd: pppoe0: LCP keepalive timeout Aug 2 09:45:42 dslgw /bsd: pppoe0: LCP keepalive timeout Aug 2 10:13:02 dslgw /bsd: pppoe0: LCP keepalive timeout Aug 2 10:13:07 dslgw /bsd: pppoe0: pap failure Aug 3 07:31:15 dslgw /bsd: pppoe0: pap failure Aug 3 07:31:25 dslgw /bsd: pppoe0: pap failure Aug 3 07:31:35 dslgw /bsd: pppoe0: pap failure Aug 3 09:34:08 dslgw /bsd: pppoe0: LCP keepalive timeout Aug 3 09:34:13 dslgw /bsd: pppoe0: pap failure Aug 3 09:50:08 dslgw /bsd: pppoe0: LCP keepalive timeout Aug 3 09:50:28 dslgw /bsd: pppoe0: pap failure Aug 3 09:50:38 dslgw /bsd: pppoe0: pap failure /etc/hostname.pppoe0 inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev fxp0 authproto pap authname "@t-online.de" authkey up !/sbin/route add default 0.0.0.1 /etc/hostname.fxp0 up fxp0 is connected to my providers stupid (no webinterface) dsl-modem. The modems diode shows that there still is a connection to my providers dslam. Would really like to provide a dmesg but the pppoe messages flooded away the boot messages. So the question is, is this a provider issue or is it hardware/openbsd related? -- thanks Chris
Re: pppoe problems
resend, since stupid webmailer killed linebreaks: hi, after upgrading my router to -current the dsl pppoe connection does not work anymore. userland ppp connects fine but freezes after K 30 seconds. freeze means the connection is still there no errors shown in logs and ifconfig state is normal but there is no more incoming traffic. the provider and modem hardware is ok since i'm connected now through a netscreen to write this mail. i changed nothing in ppp configuration since years and disabled pf for testing... same problem. as i can see in source changes: not much has changed in userland ppp and nfe code since 4.1. i read in some forums that it would be better to user kernel pppoe... so i tried to use kernel pppoe as workaround, but its does not connect. i used following configuration in /etc/hostname.pppoe0: inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \ authproto pap authname authkey up !/sbin/route add default 0.0.0.1 and of course: "up" in /etc/hostname.nfe1 if i enable debug i see a lot of outgoing packages... and then a timeout after a while. reconnect and again the same... it stays in the sppp phase of "establish connection using pap authname " I'm located in germany using arcor as provider. anyone else using dsl pppoe (kernel/userland) in current or latest snapshots - maybe in germany with arcor? any hints are really welcome. dmesg follows regards, joerg OpenBSD 4.2 (GENERIC.MP) #0: Wed Aug 8 17:31:49 CEST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 2145972224 (2046MB) avail mem = 2072682496 (1976MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (78 entries) bios0: vendor Phoenix Technologies, LTD version "ASUS M2N32-SLI DELUXE ACPI BIOS Revision 0603" date 06/27/2006 bios0: ASUSTeK Computer INC. M2N32-SLI DELUXE acpi0 at mainbus0: rev 0 acpi0: tables DSDT FACP SSDT MCFG APIC acpitimer at acpi0 not configured acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2411.34 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: apic clock running at 200MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2410.98 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative ioapic0 at mainbus0 apid 2 pa 0xfec0, version 11, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 2 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 5 (HUB0) acpicpu at acpi0 not configured acpicpu at acpi0 not configured acpitz at acpi0 not configured acpibtn at acpi0 not configured cpu0: PowerNow! K8 2410 MHz: speeds: 2400 2200 2000 1800 1000 MHz pci0 at mainbus0 bus 0: configuration mode 1 "NVIDIA C51 Host" rev 0xa2 at pci0 dev 0 function 0 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 1 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 2 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 3 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 4 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 5 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 6 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 7 not configured ppb0 at pci0 dev 3 function 0 "NVIDIA C51 PCIE" rev 0xa1 pci1 at ppb0 bus 1 ppb1 at pci0 dev 4 function 0 "NVIDIA C51 PCIE" rev 0xa1 pci2 at ppb1 bus 2 ppb2 at pci2 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x07 pci3 at ppb2 bus 3 arc0 at pci3 dev 14 function 0 "Areca ARC-1210" rev 0x00: apic 2 int 11 (irq 11) arc0: 4 SATA Ports, 256MB SDRAM, FW Version: V1.42 2006-10-13 scsibus0 at arc0: 16 targets sd0 at scsibus0 targ 0 lun 0: SCSI3 0/direct fixed sd0: 476837MB, 56514 cyl, 36 head, 480 sec, 512 bytes/sec, 976562176 sec total ppb3 at pci2 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x07 pci4 at ppb3 bus 4 "NVIDIA MCP55 Memory" rev 0xa1 at pci0 dev 8 function 0 not configured pcib0 at pci0 dev 9 function 0 "NVIDIA MCP55 ISA" rev 0xa2 nviic0 at pci0 dev 9 function 1 &
Re: pppoe problems
Just want to make a confirmation with two other providers. Also I observe this behavior with both pppoe(4) and pppoe(8). Umaxx wrote: resend, since stupid webmailer killed linebreaks: hi, after upgrading my router to -current the dsl pppoe connection does not work anymore. userland ppp connects fine but freezes after K 30 seconds. freeze means the connection is still there no errors shown in logs and ifconfig state is normal but there is no more incoming traffic. the provider and modem hardware is ok since i'm connected now through a netscreen to write this mail. i changed nothing in ppp configuration since years and disabled pf for testing... same problem. as i can see in source changes: not much has changed in userland ppp and nfe code since 4.1. i read in some forums that it would be better to user kernel pppoe... so i tried to use kernel pppoe as workaround, but its does not connect. i used following configuration in /etc/hostname.pppoe0: inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \ authproto pap authname authkey up !/sbin/route add default 0.0.0.1 and of course: "up" in /etc/hostname.nfe1 if i enable debug i see a lot of outgoing packages... and then a timeout after a while. reconnect and again the same... it stays in the sppp phase of "establish connection using pap authname " I'm located in germany using arcor as provider. anyone else using dsl pppoe (kernel/userland) in current or latest snapshots - maybe in germany with arcor? any hints are really welcome. dmesg follows regards, joerg OpenBSD 4.2 (GENERIC.MP) #0: Wed Aug 8 17:31:49 CEST 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 2145972224 (2046MB) avail mem = 2072682496 (1976MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (78 entries) bios0: vendor Phoenix Technologies, LTD version "ASUS M2N32-SLI DELUXE ACPI BIOS Revision 0603" date 06/27/2006 bios0: ASUSTeK Computer INC. M2N32-SLI DELUXE acpi0 at mainbus0: rev 0 acpi0: tables DSDT FACP SSDT MCFG APIC acpitimer at acpi0 not configured acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2411.34 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: apic clock running at 200MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2410.98 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative ioapic0 at mainbus0 apid 2 pa 0xfec0, version 11, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 2 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 5 (HUB0) acpicpu at acpi0 not configured acpicpu at acpi0 not configured acpitz at acpi0 not configured acpibtn at acpi0 not configured cpu0: PowerNow! K8 2410 MHz: speeds: 2400 2200 2000 1800 1000 MHz pci0 at mainbus0 bus 0: configuration mode 1 "NVIDIA C51 Host" rev 0xa2 at pci0 dev 0 function 0 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 1 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 2 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 3 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 4 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 5 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 6 not configured "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 7 not configured ppb0 at pci0 dev 3 function 0 "NVIDIA C51 PCIE" rev 0xa1 pci1 at ppb0 bus 1 ppb1 at pci0 dev 4 function 0 "NVIDIA C51 PCIE" rev 0xa1 pci2 at ppb1 bus 2 ppb2 at pci2 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x07 pci3 at ppb2 bus 3 arc0 at pci3 dev 14 function 0 "Areca ARC-1210" rev 0x00: apic 2 int 11 (irq 11) arc0: 4 SATA Ports, 256MB SDRAM, FW Version: V1.42 2006-10-13 scsibus0 at arc0: 16 targets sd0 at scsibus0 targ 0 lun 0: SCSI3 0/direct fixed sd0: 476837MB, 56514 cyl, 36 head, 480 sec, 512 bytes/sec, 976562176 sec total ppb3 at pci2 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x07 pci4 at ppb3 bus 4 "NVIDIA MCP55 Memory" rev 0xa1
Re: pppoe problems
Umaxx wrote: > hi, > > after upgrading my router to -current the dsl pppoe connection does not work > anymore. > userland ppp connects fine but freezes after K 30 seconds. freeze means the > connection is still there no errors shown in logs and ifconfig state is normal > but there is no more incoming traffic. the provider and modem hardware is ok > since i'm connected now through a netscreen to write this mail. i changed > nothing > in ppp configuration since years and disabled pf for testing... same problem. > as i can see in source changes: not much has changed in userland ppp and nfe > code > since 4.1. I would suggest you try with a different ethernet card if possible just to rule out that possibility. Have you checked your cables? You can also try to experiment with media settings (speed/duplex) of your card. > i read in some forums that it would be better to user kernel pppoe... > so i tried to use kernel pppoe as workaround, but its does not connect. i used > following configuration in /etc/hostname.pppoe0: > > inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \ > authproto pap authname authkey up > !/sbin/route add default 0.0.0.1 Please read pppoe(4) for -current, you need to add "-ifp pppoe0" in -current to your route command. First test using a kernel from the latest snapshot. With and without MP. This will make sure we are testing/debugging the same thing. If your problem persists, please send me the debug outputs from /var/log/messages after "ifconfig pppoe0 debug" and the binary tcpdump of a session: tcpdump -w pppoe.dump -i nfe1 not ip Thanks Can > and of course: "up" in /etc/hostname.nfe1 > > if i enable debug i see a lot of outgoing packages... and then a timeout after > a > while. reconnect and again the same... > it stays in the sppp phase of "establish connection using pap authname " > > I'm located in germany using arcor as provider. > anyone else using dsl pppoe (kernel/userland) in current or latest snapshots - > maybe in germany with arcor? > > any hints are really welcome. > dmesg follows > > regards, > > joerg > > OpenBSD 4.2 (GENERIC.MP) #0: Wed Aug 8 17:31:49 CEST 2007 > [EMAIL PROTECTED]:/usr/src/sys/arch/amd64/compile/GENERIC.MP > real mem = 2145972224 (2046MB) > avail mem = 2072682496 (1976MB) > mainbus0 at root > bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (78 entries) > bios0: vendor Phoenix Technologies, LTD version "ASUS M2N32-SLI DELUXE ACPI > BIOS > Revision 0603" date 06/27/2006 > bios0: ASUSTeK Computer INC. M2N32-SLI DELUXE > acpi0 at mainbus0: rev 0 > acpi0: tables DSDT FACP SSDT MCFG APIC > acpitimer at acpi0 not configured > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat > cpu0 at mainbus0: apid 0 (boot processor) > cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2411.34 MHz > cpu0: > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW > cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line > 16-way L2 cache > cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative > cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative > cpu0: apic clock running at 200MHz > cpu1 at mainbus0: apid 1 (application processor) > cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2410.98 MHz > cpu1: > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW > cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line > 16-way L2 cache > cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative > cpu1: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative > ioapic0 at mainbus0 apid 2 pa 0xfec0, version 11, 24 pins > ioapic0: misconfigured as apic 0, remapped to apid 2 > acpiprt0 at acpi0: bus 0 (PCI0) > acpiprt1 at acpi0: bus 5 (HUB0) > acpicpu at acpi0 not configured > acpicpu at acpi0 not configured > acpitz at acpi0 not configured > acpibtn at acpi0 not configured > cpu0: PowerNow! K8 2410 MHz: speeds: 2400 2200 2000 1800 1000 MHz > pci0 at mainbus0 bus 0: configuration mode 1 > "NVIDIA C51 Host" rev 0xa2 at pci0 dev 0 function 0 not configured > "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 1 not configured > "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 2 not configured > "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 3 not configured > "NVIDIA C51 Memory" rev 0xa2 at pci0 dev 0 function 4 not configured > "NVIDIA C51 Mem
Re: pppoe problems
Hi! Umaxx wrote: i hope this stupid webmailer does not send this as html mail can you please give more details? is your userland ppp connecting? did you use snapshot or recent current? Yes, with most recent sources from cvs my userland ppp is connecting... But hangs shortly. First I thought it is the problem in the nfe driver, but after switching to rl it hangs too. So, it definitely not a problem with underlaying device. If I ping the other site (no matter which), I could see that it hangs after some 25 - 30 (depending on the situation) pings. is your kernel pppoe connecting or what happens exactly? My kernel mode pppoe even does not connect, though I've tried any option for many times. After looking at sources, it seems like something, in case of userland ppp, is screwed up with locks, possibly in if_tun.c, but I am not sure yet. In case of kernelmode pppoe - I can never use it . It never connect to any of my providers. maybe as cc to the list. regards, joerg *On Don Aug 9 15:18 , Gregory Edigarov sent: * Just want to make a confirmation with two other providers. Also I observe this behavior with both pppoe(4) and pppoe(8). Umaxx wrote: > resend, since stupid webmailer killed linebreaks: > > > > hi, > > after upgrading my router to -current the dsl pppoe connection does not work > anymore. > userland ppp connects fine but freezes after K 30 seconds. freeze means the > connection is still there no errors shown in logs and ifconfig state is normal > but there is no more incoming traffic. the provider and modem hardware is ok > since i'm connected now through a netscreen to write this mail. i changed > nothing > in ppp configuration since years and disabled pf for testing... same problem. > as i can see in source changes: not much has changed in userland ppp and nfe > code > since 4.1. > > i read in some forums that it would be better to user kernel pppoe... > so i tried to use kernel pppoe as workaround, but its does not connect. i used > following configuration in /etc/hostname.pppoe0: > > inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \ > authproto pap authname authkey up > !/sbin/route add default 0.0.0.1 > > and of course: "up" in /etc/hostname.nfe1 > > if i enable debug i see a lot of outgoing packages... and then a timeout after > a > while. reconnect and again the same... > it stays in the sppp phase of "establish connection using pap authname " > > I'm located in germany using arcor as provider. > anyone else using dsl pppoe (kernel/userland) in current or latest snapshots - > maybe in germany with arcor? > > any hints are really welcome. > dmesg follows > > regards, > > joerg > > OpenBSD 4.2 (GENERIC.MP) #0: Wed Aug 8 17:31:49 CEST 2007 > [EMAIL PROTECTED] :/usr/src/sys/arch/amd64/compile/GENERIC.MP > real mem = 2145972224 (2046MB) > avail mem = 2072682496 (1976MB) > mainbus0 at root > bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (78 entries) > bios0: vendor Phoenix Technologies, LTD version "ASUS M2N32-SLI DELUXE ACPI > BIOS > Revision 0603" date 06/27/2006 > bios0: ASUSTeK Computer INC. M2N32-SLI DELUXE > acpi0 at mainbus0: rev 0 > acpi0: tables DSDT FACP SSDT MCFG APIC > acpitimer at acpi0 not configured > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat > cpu0 at mainbus0: apid 0 (boot processor) > cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2411.34 MHz > cpu0: > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW > cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line > 16-way L2 cache > cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative > cpu0: DTLB 32 4KB entries fully associative, 8 4MB entries fully associative > cpu0: apic clock running at 200MHz > cpu1 at mainbus0: apid 1 (application processor) > cpu1: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2410.98 MHz > cpu1: > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW > cpu1: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, 512KB 64b/line > 16-way L2 cache > cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative >
Re: pppoe problems
oh this is exactly the same behavior as mine... which architecture did you use? i use amd64. On Fre Aug 10 10:40 , Gregory Edigarov sent: Hi! Umaxx wrote: > > > i hope this stupid webmailer does not send this as html mail > > can you please give more details? is your userland ppp connecting? did > you use snapshot or recent current? > Yes, with most recent sources from cvs my userland ppp is connecting... But hangs shortly. First I thought it is the problem in the nfe driver, but after switching to rl it hangs too. So, it definitely not a problem with underlaying device. If I ping the other site (no matter which), I could see that it hangs after some 25 - 30 (depending on the situation) pings. > > > is your kernel pppoe connecting or what happens exactly? > My kernel mode pppoe even does not connect, though I've tried any option for many times. After looking at sources, it seems like something, in case of userland ppp, is screwed up with locks, possibly in if_tun.c, but I am not sure yet. In case of kernelmode pppoe - I can never use it . It never connect to any of my providers. > > maybe as cc to the list. > > regards, > > > > joerg > > > *On Don Aug 9 15:18 , Gregory Edigarov sent: > > * > > Just want to make a confirmation with two other providers. Also I > observe this behavior with both pppoe(4) and pppoe(8). > > Umaxx wrote: > > resend, since stupid webmailer killed linebreaks: > > > > > > > > hi, > > > > after upgrading my router to -current the dsl pppoe connection > does not work > > anymore. > > userland ppp connects fine but freezes after K 30 seconds. > freeze means the > > connection is still there no errors shown in logs and ifconfig > state is normal > > but there is no more incoming traffic. the provider and modem > hardware is ok > > since i'm connected now through a netscreen to write this mail. > i changed > > nothing > > in ppp configuration since years and disabled pf for testing... > same problem. > > as i can see in source changes: not much has changed in userland > ppp and nfe > > code > > since 4.1. > > > > i read in some forums that it would be better to user kernel > pppoe... > > so i tried to use kernel pppoe as workaround, but its does not > connect. i used > > following configuration in /etc/hostname.pppoe0: > > > > inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \ > > authproto pap authname authkey up > > !/sbin/route add default 0.0.0.1 > > > > and of course: "up" in /etc/hostname.nfe1 > > > > if i enable debug i see a lot of outgoing packages... and then a > timeout after > > a > > while. reconnect and again the same... > > it stays in the sppp phase of "establish connection using pap > authname " > > > > I'm located in germany using arcor as provider. > > anyone else using dsl pppoe (kernel/userland) in current or > latest snapshots - > > maybe in germany with arcor? > > > > any hints are really welcome. > > dmesg follows > > > > regards, > > > > joerg > > > > OpenBSD 4.2 (GENERIC.MP) #0: Wed Aug 8 17:31:49 CEST 2007 > > [EMAIL PROTECTED] .local > [EMAIL PROTECTED] .local','','','')>:/usr/src/sys/arch/amd64/compile/GENERIC.MP > > real mem = 2145972224 (2046MB) > > avail mem = 2072682496 (1976MB) > > mainbus0 at root > > bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (78 entries) > > bios0: vendor Phoenix Technologies, LTD version "ASUS M2N32-SLI > DELUXE ACPI > > BIOS > > Revision 0603" date 06/27/2006 > > bios0: ASUSTeK Computer INC. M2N32-SLI DELUXE > > acpi0 at mainbus0: rev 0 > > acpi0: tables DSDT FACP SSDT MCFG APIC > > acpitimer at acpi0 not configured > > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat > > cpu0 at mainbus0: apid 0 (boot processor) > > cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2411.34 MHz > > cpu0: > > > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > > H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW > > cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, > 512KB 64b/line > > 16-way L2 cache > > cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully > associat
Re: pppoe problems
hi, i can show my ppp.conf, because i have the same errors. this config was working since years, i tried to comment lqr lines today... but changed nothing in behavior. default: set log Phase Chat IPCP CCP tun command set redial 15 0 set reconnect 15 1 pppoe: set device "!/usr/sbin/pppoe -i nfe1" set server /var/run/pppoe "" 0177 disable acfcomp protocomp deny acfcomp set mtu max 1454 set mru max 1454 set crtscts off set speed sync enable lqr set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname ** set authkey ** add! default HISADDR enable dns resolv readonly enable mssfixup On Fre Aug 10 16:54 , Gregory Edigarov sent: Oops, I am sorry, I cannot show you my ppp.conf. It's at home, and the pc is now turned off. James Lepthien wrote: > Hi, > > Am 10.08.2007 um 09:40 schrieb Gregory Edigarov: >> Yes, with most recent sources from cvs my userland ppp is >> connecting... But hangs shortly. >> First I thought it is the problem in the nfe driver, but after >> switching to rl it hangs too. So, it definitely not a problem with >> underlaying device. If I ping the other site (no matter which), I >> could see that it hangs after some 25 - 30 (depending on the >> situation) pings. > > I did not see your ppp.conf but I had a similar problem and my > connection dropped every now and then. I had to disable the lqr > setting in my ppp.conf. Since then I never had any problems with my > connection. > > Cheers, > James > > -- With best regards, Gregory Edigarov _ versendet mit www.Oleco.de Mail - Anmeldung und Nutzung kostenlos! Oleco www.netlcr.de jetzt auch mit SPAMSCHUTZ.
Re: pppoe problems
Hi,
On Don Aug 9 10:55 , Can Erkin Acar sent:
Umaxx wrote:
> hi,
>
> after upgrading my router to -current the dsl pppoe connection does
not work
> anymore.
> userland ppp connects fine but freezes after K 30 seconds. freeze
means the
> connection is still there no errors shown in logs and ifconfig
state is normal
> but there is no more incoming traffic. the provider and modem
hardware is ok
> since i'm connected now through a netscreen to write this mail. i
changed
> nothing
> in ppp configuration since years and disabled pf for testing...
same problem.
> as i can see in source changes: not much has changed in userland
ppp and nfe
> code
> since 4.1.
I would suggest you try with a different ethernet card if possible
just to rule out that possibility. Have you checked your cables?
You can also try to experiment with media settings (speed/duplex)
of your card.
I tried with different settings for example 10 baseT on nfe1, no
difference.
I have no other ethernet card around here, but Gregory Edigarov tried
that already, no difference too.
> i read in some forums that it would be better to user kernel
pppoe...
> so i tried to use kernel pppoe as workaround, but its does not
connect. i used
> following configuration in /etc/hostname.pppoe0:
>
> inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \
> authproto pap authname authkey **** up
> !/sbin/route add default 0.0.0.1
Please read pppoe(4) for -current, you need to add "-ifp pppoe0"
in -current
to your route command.
Yes I know the manpage, I tried that already before. I copy and
pasted the lines from manpage, was not working too. The above example
was the fifth attempt :)
First test using a kernel from the latest snapshot. With and
without MP.
This will make sure we are testing/debugging the same thing.
I tried with and without MP and with enabled and disabled ACPI,
everytime the same results. I downgraded (yes, I know its not
suggested) to latest snapshots, same results, not working. Now I'm
back on -current.
If your problem persists, please send me the debug outputs
from /var/log/messages after "ifconfig pppoe0 debug"
and the binary tcpdump of a session:
tcpdump -w pppoe.dump -i nfe1 not ip
I send you the debug output in an extra mail not on the list.
Thanks for your help,
Cheers,
Joerg
_
versendet mit www.Oleco.de Mail - Anmeldung und Nutzung kostenlos!
Oleco www.netlcr.de jetzt auch mit SPAMSCHUTZ.
Re: pppoe problems
Oops, I am sorry, I cannot show you my ppp.conf. It's at home, and the pc is now turned off. James Lepthien wrote: Hi, Am 10.08.2007 um 09:40 schrieb Gregory Edigarov: Yes, with most recent sources from cvs my userland ppp is connecting... But hangs shortly. First I thought it is the problem in the nfe driver, but after switching to rl it hangs too. So, it definitely not a problem with underlaying device. If I ping the other site (no matter which), I could see that it hangs after some 25 - 30 (depending on the situation) pings. I did not see your ppp.conf but I had a similar problem and my connection dropped every now and then. I had to disable the lqr setting in my ppp.conf. Since then I never had any problems with my connection. Cheers, James -- With best regards, Gregory Edigarov
Re: pppoe problems
Hi, Am 10.08.2007 um 19:42 schrieb Umaxx: hi, i can show my ppp.conf, because i have the same errors. this config was working since years, i tried to comment lqr lines today... but changed nothing in behavior. default: set log Phase Chat IPCP CCP tun command set redial 15 0 set reconnect 15 1 pppoe: set device "!/usr/sbin/pppoe -i nfe1" set server /var/run/pppoe "" 0177 disable acfcomp protocomp deny acfcomp set mtu max 1454 set mru max 1454 set crtscts off set speed sync enable lqr set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname ** set authkey ** add! default HISADDR enable dns resolv readonly enable mssfixup Try deleting these two statements: enable lqr set lqrperiod 5 The default is that these settings are disabled then and if it is required they are automatically added. Since I disabled those two settings my pppoe connection runs flawlessly. Hope that helps. Cheers, James
Re: pppoe problems
Hi, Am 10.08.2007 um 09:40 schrieb Gregory Edigarov: Yes, with most recent sources from cvs my userland ppp is connecting... But hangs shortly. First I thought it is the problem in the nfe driver, but after switching to rl it hangs too. So, it definitely not a problem with underlaying device. If I ping the other site (no matter which), I could see that it hangs after some 25 - 30 (depending on the situation) pings. I did not see your ppp.conf but I had a similar problem and my connection dropped every now and then. I had to disable the lqr setting in my ppp.conf. Since then I never had any problems with my connection. Cheers, James
Re: pppoe problems
Hi, > Am 10.08.2007 um 19:42 schrieb Umaxx: > > > > Try deleting these two statements: > > > enable lqr > > set lqrperiod 5 > > The default is that these settings are disabled then and if it is > required they are automatically added. Since I disabled those two > settings my pppoe connection runs flawlessly. > Thanks for the hint, I tried that already - was not working. Cheers, Joerg
Re: pppoe problems
I use amd64 too. Umaxx wrote: oh this is exactly the same behavior as mine... which architecture did you use? i use amd64. On Fre Aug 10 10:40 , Gregory Edigarov sent: Hi! Umaxx wrote: > > > i hope this stupid webmailer does not send this as html mail > > can you please give more details? is your userland ppp connecting? did > you use snapshot or recent current? > Yes, with most recent sources from cvs my userland ppp is connecting... But hangs shortly. First I thought it is the problem in the nfe driver, but after switching to rl it hangs too. So, it definitely not a problem with underlaying device. If I ping the other site (no matter which), I could see that it hangs after some 25 - 30 (depending on the situation) pings. > > > is your kernel pppoe connecting or what happens exactly? > My kernel mode pppoe even does not connect, though I've tried any option for many times. After looking at sources, it seems like something, in case of userland ppp, is screwed up with locks, possibly in if_tun.c, but I am not sure yet. In case of kernelmode pppoe - I can never use it . It never connect to any of my providers. > > maybe as cc to the list. > > regards, > > > > joerg > > > *On Don Aug 9 15:18 , Gregory Edigarov sent: > > * > > Just want to make a confirmation with two other providers. Also I > observe this behavior with both pppoe(4) and pppoe(8). > > Umaxx wrote: > > resend, since stupid webmailer killed linebreaks: > > > > > > > > hi, > > > > after upgrading my router to -current the dsl pppoe connection > does not work > > anymore. > > userland ppp connects fine but freezes after K 30 seconds. > freeze means the > > connection is still there no errors shown in logs and ifconfig > state is normal > > but there is no more incoming traffic. the provider and modem > hardware is ok > > since i'm connected now through a netscreen to write this mail. > i changed > > nothing > > in ppp configuration since years and disabled pf for testing... > same problem. > > as i can see in source changes: not much has changed in userland > ppp and nfe > > code > > since 4.1. > > > > i read in some forums that it would be better to user kernel > pppoe... > > so i tried to use kernel pppoe as workaround, but its does not > connect. i used > > following configuration in /etc/hostname.pppoe0: > > > > inet 0.0.0.0 255.255.255.255 0.0.0.1 pppoedev nfe1 \ > > authproto pap authname authkey up > > !/sbin/route add default 0.0.0.1 > > > > and of course: "up" in /etc/hostname.nfe1 > > > > if i enable debug i see a lot of outgoing packages... and then a > timeout after > > a > > while. reconnect and again the same... > > it stays in the sppp phase of "establish connection using pap > authname " > > > > I'm located in germany using arcor as provider. > > anyone else using dsl pppoe (kernel/userland) in current or > latest snapshots - > > maybe in germany with arcor? > > > > any hints are really welcome. > > dmesg follows > > > > regards, > > > > joerg > > > > OpenBSD 4.2 (GENERIC.MP) #0: Wed Aug 8 17:31:49 CEST 2007 > > [EMAIL PROTECTED] .local > [EMAIL PROTECTED] .local','','','')>:/usr/src/sys/arch/amd64/compile/GENERIC.MP > > real mem = 2145972224 (2046MB) > > avail mem = 2072682496 (1976MB) > > mainbus0 at root > > bios0 at mainbus0: SMBIOS rev. 2.3 @ 0xf (78 entries) > > bios0: vendor Phoenix Technologies, LTD version "ASUS M2N32-SLI > DELUXE ACPI > > BIOS > > Revision 0603" date 06/27/2006 > > bios0: ASUSTeK Computer INC. M2N32-SLI DELUXE > > acpi0 at mainbus0: rev 0 > > acpi0: tables DSDT FACP SSDT MCFG APIC > > acpitimer at acpi0 not configured > > acpimadt0 at acpi0 addr 0xfee0: PC-AT compat > > cpu0 at mainbus0: apid 0 (boot processor) > > cpu0: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, 2411.34 MHz > > cpu0: > > > FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > > H,MMX,FXSR,SSE,SSE2,HTT,SSE3,CX16,NXE,MMXX,FFXSR,LONG,3DNOW2,3DNOW > > cpu0: 64KB 64b/line 2-way I-cache, 64KB 64b/line 2-way D-cache, > 512KB 64b/line > > 16-way L2 cache > > cpu0: ITLB 32 4KB entries fully associative, 8
Re: pppoe problems
James Lepthien wrote: Hi, Am 10.08.2007 um 19:42 schrieb Umaxx: hi, i can show my ppp.conf, because i have the same errors. this config was working since years, i tried to comment lqr lines today... but changed nothing in behavior. default: set log Phase Chat IPCP CCP tun command set redial 15 0 set reconnect 15 1 pppoe: set device "!/usr/sbin/pppoe -i nfe1" set server /var/run/pppoe "" 0177 disable acfcomp protocomp deny acfcomp set mtu max 1454 set mru max 1454 set crtscts off set speed sync enable lqr set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname ** set authkey ** add! default HISADDR enable dns resolv readonly enable mssfixup Try deleting these two statements: enable lqr set lqrperiod 5 I don't have lqr enabled in my config. So it doesn't help. -- With best regards, Gregory Edigarov
Re: pppoe problems
my ppp.conf for you ref: default: set log Phase Chat LCP IPCP CCP tun command set redial 15 0 set reconnect 15 1 pppoe: set device "!/usr/sbin/pppoe -i rl0" set mtu max 1492 set mru max 1492 disable acfcomp protocomp deny acfcomp set speed sync set crtscts off enable lqr enable mssfixup set dial set login set authname "xxx" set authkey xx add! default HISADDR On Sat, Aug 11, 2007 at 12:42:31PM +0200, Joerg Zinke wrote: > Hi, > > > Am 10.08.2007 um 19:42 schrieb Umaxx: > > > > > > > Try deleting these two statements: > > > > > enable lqr > > > set lqrperiod 5 > > > > The default is that these settings are disabled then and if it is > > required they are automatically added. Since I disabled those two > > settings my pppoe connection runs flawlessly. > > > > Thanks for the hint, I tried that already - was not working. > > Cheers, > > Joerg > > -- Best Regards, No.23 [EMAIL PROTECTED]
ifstated.conf for pppoe
anybody got an ifstated.conf they're willing to share for having redundancy on their pppoe connection? example: your firewall that does the pppoe goes down and you want another machine to restart the pppoe session and route your network. am building one right now and will post it if nobody else ponies up in the next few hours. cheers, jake --
Concurrecnt PPPoE(4)?
Just wondering has anyone ever used 2 PPPoE(4) connections on one real interface and rather if it should work or not? I only have one account with my ISP but they gave me 2 logins and up 4 concurrent logins are allowed with their TOS. My hardware ethernet gem(4) is connected to a modem, with the modem running in bridge mode. I were able to establish one pppoe(4) connection which I can nat machines behind OBSD to the internet... and also ssh back to OBSD from the internet. Modem (Bridge) <-> OBSD <-> LAN But it doesn't work quite the way I wanted but I made 2 pppoe(4) connections, with hostname.pppoe0 and hostname.pppoe1 under /etc/. I were able to nat machines behind OBSD with either pppoe0 OR pppoe1. So are far as nat goes, it is fine. But I were only able to ssh to pppoe1's IP address from the internet, but not pppoe0's IP address. I also attempted to traceroute the 2 IP from the internet, only pppoe1's IP works. It is very surprising as nat works... where the 'response' must make its way back to pppoe0's Ip somehow... -- Please avoid sending me Word or PowerPoint attachments. See http://www.gnu.org/philosophy/no-word-attachments.html 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
Re: CARP & PPPoE
> Yes. > > I don't know how it would work in the sense of the 'conventional' way. I do > it with dynamic IP's, which even have MAC address reservations and works > good for me... I'm considering posting an undeadly.org article on it with my > scripts on how I do it, just not sure if anyone would be interested? > I definitely would be! _ Get Hotmail on your mobile, text MSN to 63463! http://mobile.uk.msn.com/pc/mail.aspx
PPPoE MTU Problem
Hi, I've been experiencing some strange problems. I have a PPPoE/PPPoA bridging ethernet modem in the UK and am using userland ppp to connect to my DSL provider. I have been setting MTU/MRU to 1458 in ppp.conf and have been getting a *lot* of these messages: ppp[18688]: tun0: Error: ip_Input: deflink: wrote 1429, got Message too long By looking at the ppp logs I can see that my ISP is requesting an MTU of 1420 and, indeed, that is what the tun0 device is set to. However, if, once connected, I manually set the MTU for tun0 to 1458 all these messages disappear and I experience no packet loss. I have tried setting my MTU in ppp.conf to match the requested 1420 but weirdly this still causes packet loss. I am assuming that though ppp is setting the tun0 interface's MTU to 1420 somehow the outgoing packets are taking their MRU value from ppp.conf and not the interface's value. Or maybe this has something to do with the PPPoE stuff going on. For now I have my ppp.linkup doing ifconfig tun0 mtu 1458 which seems like an odd fix. Will [EMAIL PROTECTED]:~> cat /etc/ppp/ppp.conf default: set log Phase Chat LCP IPCP CCP tun command set redial 15 0 set reconnect 15 1 pppoe: set device "!/usr/sbin/pppoe -i sis0" disable acfcomp protocomp deny acfcomp set mtu max 1458 set mru max 1458 set speed sync #enable lqr #set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname [EMAIL PROTECTED] set authkey password add! default HISADDR enable dns
Re: kernel pppoe
Gustavo, On Wed, Nov 15, 2006 at 11:14:23PM -0300, Gustavo Rios wrote: >i have followed pppoe(4) instructions on setting it up. It works >perfectly. as long as it works :) >But, i am very confused with the output for the netstat -rn >command (only relevant part) > >Internet: >DestinationGatewayFlagsRefs UseMtu >Interface >default0.0.0.1UGS 18 - pppoe0 this routing table entry has 0/0 in destination (prints as "default"), and 0.0.0.1/32 as gateway. That is the kinda line you would find on most of the systems. The word "default" netstat prints instead of 0/0 are probably appropriate here, as it really means "any address that didn't match any other destination in my routing table". >0.0.0.1defaultUH 10 - pppoe0 this routing table entry has 0.0.0.1/32 as destination and 0/0 as gateway >127/8 127.0.0.1 UGRS00 33224 lo0 >127.0.0.1 127.0.0.1 UH 10 33224 lo0 >224/4 127.0.0.1 URS 00 33224 lo0 > >For ifconfig -a, we have (only relevant part too): > >pppoe0: flags=8851 mtu 1492 > dev: bge0 state: session > sid: 0xf0e2 PADI retries: 1 PADR retries: 0 time: 00:00:44 > sppp: phase network authproto pap authname > "[EMAIL PROTECTED]" > groups: pppoe egress > inet6 fe80::211:11ff:fee3:927e%pppoe0 -> prefixlen 64 scopeid 0x6 > inet 201.78.17.238 --> 0.0.0.1 netmask 0x > >I am not able to understand the cycle between 0.0.0.1 to default and >default to 0.0.0.1 entries for the routing information. I would guess that for the "host" route (ipv4 only), the only necessary knowledge it the interface through which the packet needs to be sent. At least in case of p2p interfaces. So the "gateway" is left at 0/0. Netstat, perhaps unfortunately, prints 0/0 as "default". >I am very confused. -- Pawel.
Bellnet.ca PPPOE Problems
I've been having trouble since 3.9 trying to get BELL dsl with a reserved ip to actually work as a second connection on my openbsd machine. I've upgrade to the Aug 31st snapshot of 4 to try and use the new ifconfig pppoe commands. I'm getting sporadic and not always directly reproducible problems. hostname.pppoe0 inet 70.52.123.23 255.255.255.255 64.230.199.12 pppoedev rl1 authproto pap authname [EMAIL PROTECTED] authkey BELL2005 up !/sbin/route add 64.230.199.12 70.52.242.23 1st Tcpdump tcpdump: listening on pppoe0, link-type PPP_ETHER 12:24:32.019294 Configure-Request, Magic-Number=874803770, Vendor-Ext 12:24:32.020965 Configure-Request, Max-Rx-Unit=1492, Auth-Prot PAP, Magic-Number=67343315, Vendor-Ext 12:24:32.020981 Configure-Ack, Max-Rx-Unit=1492, Auth-Prot PAP, Magic-Number=67343315, Vendor-Ext 12:24:32.031198 Configure-Ack, Magic-Number=874803770, Vendor-Ext 12:24:32.031213 Authenticate-Request, [EMAIL PROTECTED], Passwd=BELL2005 12:24:33.067456 Authenticate-Request, [EMAIL PROTECTED], Passwd=BELL2005 12:24:33.335544 Authenticate-Ack *12:24:33.335563 Configure-Request, Unknown IPCP code 0x61 12:24:33.361609 Configure-Ack, Unknown IPCP code 0x0* 12:24:33.543443 Configure-Request, IP-Address=64.230.199.12 12:24:33.543458 Configure-Ack, IP-Address=64.230.199.12 *12:24:33.569420 Terminate-Request, Unknown IPCP code 0x0 12:24:33.569428 Terminate-Ack, Unknown IPCP code 0x0* 2nd Tcpdump # ifconfig pppoe0 up; tcpdump -i pppoe0 tcpdump: listening on pppoe0, link-type PPP_ETHER 12:25:42.012908 Configure-Request, Magic-Number=67551440, Vendor-Ext 12:25:42.015055 Configure-Request, Max-Rx-Unit=1492, Auth-Prot PAP, Magic-Number=1151254039, Vendor-Ext 12:25:42.015070 Configure-Ack, Max-Rx-Unit=1492, Auth-Prot PAP, Magic-Number=1151254039, Vendor-Ext 12:25:42.026045 Configure-Ack, Magic-Number=67551440, Vendor-Ext 12:25:42.026060 Authenticate-Request, [EMAIL PROTECTED], Passwd=BELL2005 12:25:43.062236 Authenticate-Request, [EMAIL PROTECTED], Passwd=BELL2005 12:25:43.330642 Authenticate-Ack 12:25:43.330660 Terminate-Request 12:25:43.356947 Terminate-Ack If i destroy the pppoe0 adapter and use sh netstart pppoe0 to recreate it i'll get the same results over, over. Occasionally it will connect without the IPCP errors listed in the first dump.
IPv6 over PPPoE
Hi all With the help of my ISP I'm trying to get native IPv6 over ADSL (PPPoE). This isn't a regular offer and I'm the first customer who tries it out. My ISP has set me the following two RADIUS attributes: Framed-IPv6-Prefix = 2001:x:3000::1 Framed-IPv6-Route = 2001:x:4000::/48 2001:x:3000::1 1 To debug everything I used userspace ppp with the following ppp.conf: -->--<-- default: set log Phase Chat IPCP IPV6CP CCP tun command set redial 15 0 set reconnect 15 0 pppoe: set device "!/usr/sbin/pppoe -i sis1" disable acfcomp protocomp deny acfcomp set mtu max 1454 set speed sync enable lqr set lqrperiod 5 set cd 5 set dial set login set timeout 0 set authname username set authkey password add! default HISADDR add! default HISADDR6 disable dns enable mssfixup enable ipv6 enable ipv6cp -->--<-- I'm unable to receive any IPv6 traffic over the wire: -->--<-- PPP ON clockwork> show ipv6cp IPV6CP [Opened] His side:fe80::ff1c:1402 My side: fe80::2fe9:29b9 Queued packets: 0 Defaults: FSM retry = 3s, max 5 Config REQs, 5 Term REQs Connect time: 0:04:04 0 octets in, 4472 octets out 0 packets in, 77 packets out overall 18 bytes/sec currently 0 bytes/sec in, 56 bytes/sec out (over the last 5 secs) peak 280 bytes/sec on Sun Oct 8 16:46:09 2006 PPP ON clockwork> -->--<-- Some packets out, but no packets in. If I run tcpdump on my sis1 interface I see that the icmp echo-requests are actually sent encapsulated in PPPoE. But I never get an answer. I tried to reach fe80::ff1c:1402 and some other IPv6-enabled sites (like mirror.switch.ch). Wasn't sucessful. I'm not really sure if I'm doing a mistake in my configuration. Has anyone of you any comments about my configuration or even a sample ppp.conf for using IPv6? I haven't found any IPv6-capable sample configuration with Google. Besides that there are two things which I worry about: - Both sides of the connection have link-local addresses assigned (fe80::). Is this the expected behaviour? - According to the manual page the Framed-IPv6-Prefix can be used in commands through the IPV6PREFIX variable. Does that mean that I manually need to set the non link-local address to the device? How? I tried out with ifconfig tun0 inet6 2001:x:3000::1 This resulted in the icmp echo-requests being sent with src address 2001:x:3000::1 - but there was still no answer. According to the log files on my system everything looks fine. Has anyone advice about how to further debug that issue? Regards, Thomas.
Re: PPTP + PPPoE ?
The problem is GRE. Take a look at http://sourceforge.net/projects/frickin On Monday 05 December 2005 18:58, Abel Talaversn Estevez wrote: > Hi all, > > I'm running OpenBSD 3.7. I use my OpenBSD machine as a firewall, including a > PPTP server and it runs ok. But... > > I want to connect to my ISP with PPPoE and configure my router as bridge and > I've achieve it!! But now my PPTP server is not running, I cannot connect > from a Windows client as before. Does anybody know why? Can I use ppp.conf > with two different applications? Or the problem is with the tun devices? > > Thanks a lot. > > > My ppp.conf: > > pptp: > #set ifaddr 172.16.1.100 172.16.1.10-172.16.1.20 > enable proxy > set timeout 0 > enable MSChapV2 > disable ipv6cp > disable ipv6 > > default: > set log Phase Chat LCP IPCP CCP tun command > set device /dev/cua01 > set speed 115200 > # set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\" AT OK-AT-OK ATE1Q0 > OK > \\dATDT\\T TIMEOUT 40 CONNECT" > > > CHAPserver: > enable chap > enable proxy > set ifaddr 192.244.176.44 292.244.184.31 > accept dns > > pppoe: > set device "!/usr/sbin/pppoe -i rl0" > set mtu max 1492 > set mru max 1492 > set speed sync > disable acfcomp protocomp > deny acfcomp > set authname "[EMAIL PROTECTED]" > set authkey "adslppp" > add default HISADDR > enable dns > enable mssfixup > > -- Best regards Maxim Bourmistrov
Re: PPTP + PPPoE ?
Alternatively, you can use in-kernel pppoe for adsl to your ISP and user-space ppp for pptp. Look at the man pages. Regards, David On 12/5/05, Maxim Bourmistrov <[EMAIL PROTECTED]> wrote: > The problem is GRE. > Take a look at http://sourceforge.net/projects/frickin > > > On Monday 05 December 2005 18:58, Abel Talaversn Estevez wrote: > > Hi all, > > > > I'm running OpenBSD 3.7. I use my OpenBSD machine as a firewall, including a > > PPTP server and it runs ok. But... > > > > I want to connect to my ISP with PPPoE and configure my router as bridge and > > I've achieve it!! But now my PPTP server is not running, I cannot connect > > from a Windows client as before. Does anybody know why? Can I use ppp.conf > > with two different applications? Or the problem is with the tun devices? > > > > Thanks a lot. > > > > > > My ppp.conf: > > > > pptp: > > #set ifaddr 172.16.1.100 172.16.1.10-172.16.1.20 > > enable proxy > > set timeout 0 > > enable MSChapV2 > > disable ipv6cp > > disable ipv6 > > > > default: > > set log Phase Chat LCP IPCP CCP tun command > > set device /dev/cua01 > > set speed 115200 > > # set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\" AT OK-AT-OK ATE1Q0 > > OK > > \\dATDT\\T TIMEOUT 40 CONNECT" > > > > > > CHAPserver: > > enable chap > > enable proxy > > set ifaddr 192.244.176.44 292.244.184.31 > > accept dns > > > > pppoe: > > set device "!/usr/sbin/pppoe -i rl0" > > set mtu max 1492 > > set mru max 1492 > > set speed sync > > disable acfcomp protocomp > > deny acfcomp > > set authname "[EMAIL PROTECTED]" > > set authkey "adslppp" > > add default HISADDR > > enable dns > > enable mssfixup > > > > > > -- > Best regards > Maxim Bourmistrov
Re: pppoe loopback
> Today one of my clients' firewall lost its pppoe connection
3.8-stable, dmesg follows:
OpenBSD 3.8-stable (GENERIC) #0: Wed Nov 30 15:41:10 CET 2005
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium II ("GenuineIntel" 686-class, 512KB L2 cache) 349 MHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
real mem = 133787648 (130652K)
avail mem = 115462144 (112756K)
using 1658 buffers containing 6791168 bytes (6632K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 07/19/01, BIOS32 rev. 0 @ 0xfd801
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf1c50/176 (9 entries)
pcibios0: PCI Interrupt Router at 000:02:0 ("Intel 82371FB ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc/0x8000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x03
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 1 function 0 "S3 Trio3D AGP" rev 0x01
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pcib0 at pci0 dev 2 function 0 "Intel 82371AB PIIX4 ISA" rev 0x02
pciide0 at pci0 dev 2 function 1 "Intel 82371AB IDE" rev 0x01: DMA, channel
0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0:
wd0: 16-sector PIO, LBA, 6149MB, 12594960 sectors
atapiscsi0 at pciide0 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: SCSI0 5/cdrom
removable
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
cd0(pciide0:0:1): using PIO mode 4, DMA mode 2
pciide0: channel 1 ignored (disabled)
uhci0 at pci0 dev 2 function 2 "Intel 82371AB USB" rev 0x01: irq 11
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
"Intel 82371AB Power" rev 0x02 at pci0 dev 2 function 3 not configured
fxp0 at pci0 dev 3 function 0 "Intel 82557" rev 0x05, i82558: irq 11,
address 00:04:ac:d9:eb:b5
inphy0 at fxp0 phy 1: i82555 10/100 PHY, rev. 0
rl0 at pci0 dev 20 function 0 "Realtek 8139" rev 0x10: irq 10 address
00:40:f4:b4:0d:86
rlphy0 at rl0 phy 0: RTL internal phy
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0:
spkr0 at pcppi0
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
isapnp0 at isa0 port 0x279: read port 0x203
wss1 at isapnp0 "Crystal Audio, CSC0100, , WSS/SB" port
0x534/4,0x388/4,0x220/16 irq 5 drq 1,0: CS4236/CS4236B (vers 0)
audio0 at wss1
"Crystal Audio, CSC010F, , Disabled" at isapnp0 not configured
"Crystal Audio, CSC0110, , CTRL" at isapnp0 port 0x120/8 not configured
biomask eb45 netmask ef45 ttymask ffc7
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
WARNING: / was not properly unmounted
pppoe0: phase establish
pppoe0: phase authenticate
pppoe0: phase network
pppoe0: phase terminate
pppoe0: phase dead
pppoe0: phase establish
pppoe0: phase dead
pppoe0: phase establish
pppoe0: up
pppoe0: phase authenticate
pppoe0: phase terminate
pppoe0: phase authenticate
pppoe0: phase terminate
pppoe0: phase authenticate
pppoe0: phase network
pppoe0: LCP keepalive timeout<6>pppoe0: phase terminate
pppoe0: phase establish
pppoe0: phase dead
pppoe0: phase establish
pppoe0: up
pppoe0: phase authenticate
pppoe0: phase network
pppoe0: phase terminate
pppoe0: phase dead
pppoe0: phase establish
pppoe0: phase authenticate
pppoe0: phase network
pppoe0: LCP keepalive timeout<6>pppoe0: phase terminate
pppoe0: phase establish
pppoe0: phase dead
pppoe0: phase establish
pppoe0: up
pppoe0: phase authenticate
pppoe0: phase network
pppoe0: loopback
pppoe0: phase terminate
pppoe0: phase dead
pppoe0: phase establish
pppoe0: phase authenticate
pppoe0: phase network
pppoe repeated disconnects
Hoi,
I have recently switched from a Zyxel modem terminated pppoe
connection, to an OpenBSD based termination of the pppoe connection. I
think I have a reasonable configuration, and both kernel as well as
userland pppoe configs connect fine, but after a few minutes the
ingress traffic halts and the connection drops. I am running 5.2, with
the following /etc/ppp/ppp.conf ([1] for userland) and
/etc/hostname.pppoe0 ([2] for kernel). Both exhibit the same issue.
When the connection establishes, I have the following device:
$ ifconfig pppoe0
pppoe0: flags=8851 mtu 1492
priority: 0
dev: vlan5 state: session
sid: 0x1268 PADI retries: 8 PADR retries: 0 time: 00:04:02
sppp: phase network authproto chap authname "u280...@dsl.green.ch"
groups: pppoe
status: active
inet6 fe80::260:e0ff:fe53:7978%pppoe0 -> prefixlen 64 scopeid 0x1e
inet 81.6.62.85 --> 80.254.161.242 netmask 0x
The ISP routes me 81.6.62.84/30 and when the connection is up, this
works (I can ping all 4 IP addresses). There's a netscreen at
81.6.62.86 behind this machine and it is responding to ping's from the
internet just fine. A few minutes later, traffic stops flowing and
about one minute later, pppoe0 disconnects and then reconnects a few
minutes later, to rinse and repeat. So I tcpdump'ed the kernel pppoe,
and noticed the following snippet (see [3] for details). I am MAC
00:60:e0:53:79:79 , the ISP is MAC 00:90:1a:a4:8d:20.
At 00:27:30.706636 I see ingress to .86, which is replied at
00:27:30.708050 egress. Then, ingress halts. I send three echos at
00:27:52.564297, 00:28:02.563980 and 00:28:12.563665, and then give up
at 00:28:22.563420 and send a Terminate-Request. I then send three
Initiation requests, which are answered finally at 00:29:27.771647 by
the ISP. The connection re-establishes and the cycle repeats.
When I try the same thing using userland ppp (to benefit from
debugging), things look pretty good to me, but also after a few
minutes the physical link goes silent and I disconnect. The logs[4]
show that the connection establishes (and on the ppp command line,
'show ipcp' and 'show lcp' look fine to me), but the problem persists.
I've read up on ppp/pppd/pppoe for both userspace and kernel, but I'm
stumped and at this point I believe the problem is with the ISP (I say
this because traffic stops flowing while I'm sending LCP echos, and I
always reply the ISPs echos, but after a few failed echos pppoe on my
machine gives up). Can somebody please confirm this before I open a
problem ticket with my ISP, or help me find a way to gather more
information to diagnose this issue?
Kind regards,
Pim/ Zurich
[1] cat /etc/ppp/ppp.conf
default:
set log Phase Chat LCP IPCP CCP tun command
set speed sync
disable acfcomp protocomp shortseq vjcomp
deny acfcomp
green:
set device "!/usr/sbin/pppoe -i vlan5"
set mtu max 1492
set mru max 1492
set authname "x...@dsl.green.ch"
set authkey "Y"
set ifaddr 0.0.0.0 0.0.0.0
disable echo lqr
deny lqr
[2] cat /etc/hostname.pppoe0
inet 0.0.0.0 255.255.255.255 NONE pppoedev vlan5 authproto chap
authname 'x...@dsl.green.ch' authkey 'Y' up
dest 0.0.0.1
[3] http://pastebin.com/ph6xrNaW
[4] http://pastebin.com/grifHJ41
--
Pim van Pelt
PBVP1-RIPE - http://www.ipng.nl/
Re: pppoe server
On 08.03-11:13, Lo?=?VAI DC!niel wrote: [ ... ] > I wish to experiment setting up a PPPoE server (AC) on OpenBSD 4.4. > Although I've read the pppoe(8) man page and googled around, it is not > clear for me how to set up such configuration. man sppp
PPPoE "ip unnumbered"
Hi, Is it possible to create an IP unnumbered setup with PPPoE on OpenBSD? Kind regards, Martijn Rijkeboer
Re: PPPoE problem
On Tue, Jan 14, 2014 at 08:01:39PM +0100, Martijn Rijkeboer wrote: > Hi, > > I'm trying to setup a PPPoE connection to my ISP (solcon.nl). I've read > pppoe(4) and pppoe(8) and got the following configuration: > > cat /etc/hostname.pppoe0 > inet 0.0.0.0 255.255.255.255 NONE \ > pppoedev em2 authproto pap \ > authname '@solcon.net' authkey '' up > dest 0.0.0.1 > !/sbin/route add default -ifp pppoe0 0.0.0.1 > > > cat /etc/hostname.em2 > up > > > According to my ISP I should specify my IP-address and netmask which makes > the following: > > cat /etc/hostname.pppoe0 > inet 123.123.123.1 255.255.255.128 NONE \ > pppoedev em2 authproto pap \ > authname '@solcon.net' authkey '' up > dest 0.0.0.1 > !/sbin/route add default -ifp pppoe0 0.0.0.1 > > > In both cases I'm getting "pppoe0: pap failure". This seems to indicate > that the authentications is wrong, but according to my ISP they don't see > any traffic from me to their radius server and we double checked the > username and password. Does it work with a configuration such as this? inet 123.123.123.1 255.255.255.128 NONE \ pppoedev em2 authproto pap \ authname '@solcon.net' authkey '' up dest 0.0.0.1 ! /sbin/route add default 123.123.123.1 I'm using a configuration like that with static IP over pppoe from a german ISP and it works fine. You might see some hints logged to /var/log/messages if you run 'ifconfig pppoe0 debug'.
Re: PPPoE problem
> Does it work with a configuration such as this? > > inet 123.123.123.1 255.255.255.128 NONE \ > pppoedev em2 authproto pap \ > authname '@solcon.net' authkey '' up > dest 0.0.0.1 > ! /sbin/route add default 123.123.123.1 > > I'm using a configuration like that with static IP over pppoe > from a german ISP and it works fine. > > You might see some hints logged to /var/log/messages if you > run 'ifconfig pppoe0 debug'. Unfortunately I can't try this setup anymore, since my ISP has changed the setup to a static route without PPPoE which is currently operational. Kind regards, Martijn Rijkeboer
Problem with PPPoE
Hi there, I've been using OepnBSD for a while (10yr now, basically as router/server at home and small office). Right now, I have 2 OpenBSD servers: 1) OpenBSD 4.9 running on amd64 (Sun Fire v20z - old and noisy) 2) OpenBSD 5.4 running on i386 (Dell Optiplex DualCore) I want to disable the old one, staying only with the "newer". I have 2 internet connections (one DHCP and other PPPoE). The DHCP connection migration were fine. But I'm having problem with the PPPoE connection. On the old server it runs fine, but in the new one, when I enable debug on ifconfig (ifconfig pppoe0 debug) I get this: Jul 22 16:47:16 BSD /bsd: pppoe0 (8863) state=1, session=0x0 output -> ff:ff:ff:ff:ff:ff, len=18 Jul 22 16:48:16 BSD /bsd: pppoe0: timeout And: # ifconfig pppoe0 pppoe0: flags=28855 mtu 1492 priority: 0 dev: bge0 state: PADI sent sid: 0x0 PADI retries: 7 PADR retries: 0 sppp: phase establish authproto pap authname "x...@xxx.com.br" groups: pppoe status: no carrier inet 0.0.0.0 --> 0.0.0.1 netmask 0x I've seen some messages discussing this, like this one: http://comments.gmane.org/gmane.os.openbsd.misc/212649 But couldn't find a definitive solution (if this is actually a general problem). When I send UP and DOWN commands to the interface, this happen: # ifconfig pppoe0 down Jul 22 17:24:17 BSD /bsd: pppoe0 (8863) state=1, session=0x0 output -> ff:ff:ff:ff:ff:ff, len=18 Jul 22 17:24:18 BSD /bsd: pppoe0: lcp close(starting) Jul 22 17:24:18 BSD /bsd: pppoe0: lcp starting->initial Jul 22 17:24:18 BSD /bsd: pppoe0: phase dead # ifconfig pppoe0 up Jul 22 17:25:28 BSD /bsd: pppoe0: lcp close(initial) Jul 22 17:25:28 BSD /bsd: pppoe0: lcp open(initial) Jul 22 17:25:28 BSD /bsd: pppoe0: lcp initial->starting Jul 22 17:25:28 BSD /bsd: pppoe0: phase establish Jul 22 17:25:28 BSD /bsd: pppoe0 (8863) state=1, session=0x0 output -> ff:ff:ff:ff:ff:ff, len=18 Jul 22 17:25:33 BSD /bsd: pppoe0: timeout And keeps repeating the last two lines... Anyone has dealed with something like this on version upgrade? Any solution? Thanks, Felipe Sp/Brazil
PPPoE / isakmpd race
Hi,
I recently set up a site-to-site IPsec VPN on an OpenBSD firewall/router
that connects to the public Internet via PPPoE. I've noticed that the VPN
does not come up properly upon system boot because of what appears to be a
race condition between the PPPoE connection and isakmpd start. I say
"race" but it's really a race that isakmpd always wins.
When isakmpd starts up, I see this in the logs:
Feb 14 23:42:24 sainthelena isakmpd[27969]: udp_create: no matching
listener found
Feb 14 23:42:24 sainthelena isakmpd[27969]: exchange_establish: transport
"udp" for peer "peer-XX.XXX.XX.X" could not be created
If I kill isakmpd and start it again manually, then run 'ipsecctl -f
/etc/ipsec.conf', the VPN comes up and functions correctly.
I am still very new to IPSec and PPPoE under OpenBSD but I suspect that the
failure is happening because the external interface (pppoe0) does not yet
have a PPP session established and has no IP to bind to.
I've tried removing isakmpd_flags from rc.conf.local and starting isakmpd
via a ! command in /etc/hostname.pppoe0 but that didn't seem to work--same
results. I suspect this is because ifconfig does not block when the PPP
connection is first set up and the isakmpd is executing prematurely.
I'm curious if anybody has any work-arounds or if this is something that
should be formally reported to bugs@.
--
My /etc/ipsec.conf, sanitized:
ike dynamic esp from { 10.50.0.0/24 } to { 10.20.0.0/22 10.40.0.0/24
10.240.0.0/22 10.176.0.0/12 \
10.239.0.0/22 10.208.0.0/12
10.21.0.0/22 172.24.96.0/22 \
10.30.0.0/20 10.70.0.0/24
10.80.0.0/22 172.20.0.0/22 } \
peer XXX..com \
main auth hmac-sha1 enc aes-256 group modp1024 lifetime 8h \
quick auth hmac-sha1 enc aes-256 group none lifetime 1h \
srcid AA.AAA.AAA dstid XX.XXX.XX.X psk "SECRET_HERE"
--
My /etc/hostname.pppoe0, sanitized:
inet 0.0.0.0 255.255.255.255 NONE \
pppoedev vlan0 authproto pap \
authname 'XXX@' authkey 'SECRET_HERE' up
dest 0.0.0.1
!/sbin/route add default -ifp pppoe0 0.0.0.1
--
My /etc/rc.conf.local:
dhcpd_flags=em1 em2
pf=YES
isakmpd_flags="-K"
ipsec=YES
--
My /etc/isakmpd/isakmpd.conf:
NOTE: I've tried using the interface name here (pppoe0) in lieu of my IP
address. I've also removed this file entirely. All variants produce the
same results
[General]
Listen-on=63.226.194.238
--
dmesg:
OpenBSD 5.9 (GENERIC.MP) #1870: Mon Feb 8 17:34:23 MST 2016
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 2130640896 (2031MB)
avail mem = 2061930496 (1966MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0010 (364 entries)
bios0: vendor Phoenix Technologies LTD version "6.00" date 07/30/2013
bios0: VMware, Inc. VMware Virtual Platform
acpi0 at bios0: rev 2
acpi0: sleep states S0 S1 S4 S5
acpi0: tables DSDT FACP BOOT APIC MCFG SRAT HPET WAET
acpi0: wakeup devices PCI0(S3) USB_(S1) P2P0(S3) S1F0(S3) S2F0(S3) S3F0(S3)
S4F0(S3) S5F0(S3) S6F0(S3) S7F0(S3) S8F0(S3) S9F0(S3) S10F(S3) S11F(S3)
S12F(S3) S13F(S3) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E5-2620 0 @ 2.00GHz, 1999.98 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,MMX,FXSR,SSE,SSE2,SS,HTT,SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,HV,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
cpu0: apic clock running at 65MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Xeon(R) CPU E5-2620 0 @ 2.00GHz, 2000.00 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,MMX,FXSR,SSE,SSE2,SS,HTT,SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,HV,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Xeon(R) CPU E5-2620 0 @ 2.00GHz, 1999.98 MHz
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,MMX,FXSR,SSE,SSE2,SS,HTT,SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,HV,NXE,LONG,LAHF,PERF,ITSC,SENSOR,ARAT
cpu2: 256KB 64b/line 8-way
Re: PPPoE issues
On 2016-05-29, Maurice Janssen wrote: > I'm trying to replace a PC Engines Alix board with an APU 2c4 board, but > I'm having some issues to get it up and running. Just copy the configuration. (Or the whole system for that matter.) You only need to change the interface names. > I have a fiber connection and my ISP requires a PPPoE connection over > VLAN 6. [...] Does anyone have a similar setup working? I do. I transplanted it from a net6501 to an APU2c4 a few weeks ago and it just works. (PPPoE over VLAN 7 for T-Online's Internet service.) -- Christian "naddy" Weisgerber na...@mips.inka.de
