OpenWrt Forum Archive

Topic: Can't connect through openwrt to specific vpn server

The content of this topic has been archived on 6 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

I have never run into this before.  I work remotely and connect to different client VPNs all the time through my openwrt router.  However I'm now finding that I cannot connect to the VPN of a new client.  If I bypass the router and connect straight to my cable modem I can connect.  The client is unable to tell me anything about the VPN server setup.

Here is my tcpdump:

listening on br0, link-type EN10MB (Ethernet), capture size 96 bytes
21:19:43.399111 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: S 4274664800:4274664800(0) win 65535 <mss 1460,nop,nop,sackOK>
21:19:43.457333 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: S 2302456370:2302456370(0) ack 4274664801 win 8192 <mss 1460>
21:19:43.457638 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: P 1:157(156) ack 1 win 65535: pptp CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0) FIRM_REV(2600) [|pptp]
21:19:43.516908 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: . ack 157 win 65535
21:19:43.518316 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: P 1:157(156) ack 157 win 65535: pptp CTRL_MSGTYPE=SCCRP PROTO_VER(1.0) RESULT_CODE(1) ERR_CODE(0) FRAME_CAP(S) BEARER_CAP(DA) MAX_CHAN(0) FIRM_REV(1031) [|pptp]
21:19:43.518663 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: P 157:325(168) ack 157 win 65379: pptp CTRL_MSGTYPE=OCRQ CALL_ID(49152) CALL_SER_NUM(36463) MIN_BPS(300) MAX_BPS(100000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0) PHONE_NO_LEN(0) [|pptp]
21:19:43.583808 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: P 157:189(32) ack 325 win 65367: pptp CTRL_MSGTYPE=OCRP CALL_ID(24743) PEER_CALL_ID(49152) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0) CONN_SPEED(10000000) RECV_WIN(16) PROC_DELAY(1) PHY_CHAN_ID(0)
21:19:43.588308 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: P 325:349(24) ack 189 win 65347: pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(24743) SEND_ACCM(0xffffffff) RECV_ACCM(0xffffffff)
21:19:43.595934 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 0, length 37: LCP, Conf-Request (0x01), id 0, length 23
21:19:43.798901 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: . ack 349 win 65343
21:19:45.597881 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 1, length 37: LCP, Conf-Request (0x01), id 1, length 23
21:19:48.602865 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 2, length 37: LCP, Conf-Request (0x01), id 2, length 23
21:19:52.610901 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 3, length 37: LCP, Conf-Request (0x01), id 3, length 23
21:19:56.615808 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 4, length 37: LCP, Conf-Request (0x01), id 4, length 23
21:20:00.620111 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 5, length 37: LCP, Conf-Request (0x01), id 5, length 23
21:20:04.624829 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 6, length 37: LCP, Conf-Request (0x01), id 6, length 23
21:20:08.628999 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 7, length 37: LCP, Conf-Request (0x01), id 7, length 23
21:20:12.633123 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 8, length 37: LCP, Conf-Request (0x01), id 8, length 23
21:20:16.638344 IP 192.168.1.101 > ip207-101-230-35.z230-101-207.customer.algx.net: GREv1, call 24743, seq 9, length 37: LCP, Conf-Request (0x01), id 9, length 23
21:20:19.581389 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: P 189:205(16) ack 349 win 65343: pptp CTRL_MSGTYPE=CCRQ CALL_ID(24743)
21:20:19.581770 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: P 349:497(148) ack 205 win 65331: pptp CTRL_MSGTYPE=CDN CALL_ID(49152) RESULT_CODE(0) ERR_CODE(0) CAUSE_CODE(0) [|pptp]
21:20:19.801175 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: . ack 497 win 65195
21:20:19.801473 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: P 497:513(16) ack 205 win 65331: pptp CTRL_MSGTYPE=StopCCRQ REASON(1)
21:20:19.858971 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: P 205:221(16) ack 513 win 65179: pptp CTRL_MSGTYPE=StopCCRP RESULT_CODE(1) ERR_CODE(0)
21:20:19.859377 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: F 221:221(0) ack 513 win 65179
21:20:19.859592 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: F 513:513(0) ack 221 win 65315
21:20:19.860126 IP 192.168.1.101.2269 > ip207-101-230-35.z230-101-207.customer.algx.net.1723: . ack 222 win 65315
21:20:19.916920 IP ip207-101-230-35.z230-101-207.customer.algx.net.1723 > 192.168.1.101.2269: . ack 514 win 65178

I have the following packages installed:

base-files    9
base-files-brcm    2
bridge    1.0.6-1
busybox    1.2.1-6
dnsmasq    2.35-1
dropbear    0.48.1-1
ether-wake    1.09-1
haserl    0.8.0-1
ip    2.6.11-050330-1
ipkg    0.99.149-2
ipkg-upgrade-fix    0.2-1
iptables    1.3.3-2
iptables-mod-conntrack    1.3.3-2
iptables-mod-extra    1.3.3-2
iptables-mod-filter    1.3.3-2
iptables-mod-imq    1.3.3-2
iptables-mod-ipopt    1.3.3-2
iwlib    29.pre10-1
kernel    2.4.30-brcm-5
kmod-brcm-wl    2.4.30-brcm-5
kmod-crypto    2.4.30-brcm-5
kmod-diag    2.4.30-brcm-5
kmod-gre    2.4.30-brcm-5
kmod-imq    2.4.30-brcm-5
kmod-ipt-conntrack    2.4.30-brcm-5
kmod-ipt-extra    2.4.30-brcm-5
kmod-ipt-filter    2.4.30-brcm-5
kmod-ipt-ipopt    2.4.30-brcm-5
kmod-ipt-nat-default    2.4.30-brcm-5
kmod-ipt-nat-pptp    2.4.30-brcm-5
kmod-mppe    2.4.30-brcm-5
kmod-ppp    2.4.30-brcm-5
kmod-pppoe    2.4.30-brcm-5
kmod-sched    2.4.30-brcm-5
kmod-switch    2.4.30-brcm-1
kmod-tun    2.4.30-brcm-5
kmod-wlcompat    2.4.30-brcm-4
liblzo    2.02-1
libncurses    5.2-8
libopenssl    0.9.8d-1
libpcap    0.9.4-1
libpthread    0.9.27-1
miniupnpd    1.0-RC1-1
mtd    4
nas    3.90.37-17
ntpclient    2003_194-2
nvram    1
ppp    2.4.3-7
ppp-mod-pppoe    2.4.3-7
pptpd    1.3.0-2
qos-scripts    0.9.3-1
tc    2.6.11-050330-1
tcpdump    3.9.4-1
uclibc    0.9.27-9
webif    0.3-7
webif    0.3-6
wificonf    6
wireless-tools    29.pre10-1
wol    0.7.1-1

against this version of OpenWRT:

Firmware       OpenWrt White Russian - With X-Wrt Extensions 0.9 
Kernel   Linux 2.4.30 #1 Fri Nov 24 23:16:54 EST 2006 
Device   Linksys WRT54G/GS/GL 
Board   Broadcom BCM947XX 
Web mgt. console   Webif2 
Version  r3040

I resolved my own issue. 

I had installed the kmod-ipt-nat-pptp package which I had read about from other similar posts, but it didn't seem to make a difference, so I posted here.  However, I realized after posting that I hadn't rebooted the router after installing the package.  Once I rebooted the router, everything now appears to be working and I can successfully connect to the VPN that I couldn't previously.

The discussion might have continued from here.