OpenWrt Forum Archive

Topic: can't connect to VPN through openwrt

The content of this topic has been archived on 17 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

I am trying to connect a VPN through my wrt54gl (KAMIKAZE (7.07))
I am NOT trying to use the router for the VPN.  A windows PC -> wrt54gl -> remote VPN router.

I have found in the forum    "ipkg install kmod-ipt-nat-pptp  (older version should use 'kmod-ipt-nat-extra' instead)",  but I can't find any package like that for kamikaze. 

root@OpenWrt:~# ipkg list | grep ipt-nat
kmod-ipt-nat - 2.4.34-brcm-1 - Modules for extra NAT targets
kmod-ipt-nathelper - 2.4.34-brcm-1 - Default Conntrack and NAT helpers
kmod-ipt-nathelper-extra - 2.4.34-brcm-1 - Extra Conntrack and NAT helpers

root@OpenWrt:~# ipkg list | grep pptp
pptp - 1.6.0-3 - PPTP client
pptpd - 1.3.0-1 - PopTop pptp server

some of a tcpdump is listed here...
--- WAN interface   #tcpdump -i eth0.1
21:22:04.904677 IP vpnSrvr.1723 > myWanIP.4652: P 213:229(16) ack 349 win 8452: pptp CTRL_MSGTYPE=ECHORQ ID(1)
21:22:04.906170 IP myWanIP.4652 > vpnSrvr.1723: P 349:369(20) ack 229 win 65307: pptp CTRL_MSGTYPE=ECHORP ID(1) RESULT_CODE(1) ERR_CODE(0)
21:22:05.474433 IP vpnSrvr.1723 > myWanIP.4652: . ack 369 win 8432
21:22:05.995021 IP vpnSrvr > myWanIP: GREv1, call 49152, seq 4, length 25: LCP, Conf-Request (0x01), id 4, length 11
21:22:05.995697 IP myWanIP > vpnSrvr: ICMP myWanIP protocol 47 unreachable, length 53
21:22:08.995231 IP vpnSrvr > myWanIP: GREv1, call 49152, seq 5, length 25: LCP, Conf-Request (0x01), id 5, length 11
21:22:08.995917 IP myWanIP > vpnSrvr: ICMP myWanIP protocol 47 unreachable, length 53
21:22:11.995208 IP vpnSrvr > myWanIP: GREv1, call 49152, seq 6, length 25: LCP, Conf-Request (0x01), id 6, length 11
21:22:11.995878 IP myWanIP > vpnSrvr: ICMP myWanIP protocol 47 unreachable, length 53
21:22:14.996110 IP vpnSrvr > myWanIP: GREv1, call 49152, seq 7, length 25: LCP, Conf-Request (0x01), id 7, length 11
21:22:14.996787 IP myWanIP > vpnSrvr: ICMP myWanIP protocol 47 unreachable, length 53

--- LAN interface   #tcpdump -i eth0.0
21:22:04.905141 IP vpnSrvr.1723 > 192.168.10.2.4652: P 213:229(16) ack 349 win 8452: pptp CTRL_MSGTYPE=ECHORQ ID(1)
21:22:04.905711 IP 192.168.10.2.4652 > vpnSrvr.1723: P 349:369(20) ack 229 win 65307: pptp CTRL_MSGTYPE=ECHORP ID(1) RESULT_CODE(1) ERR_CODE(0)
21:22:05.474856 IP vpnSrvr.1723 > 192.168.10.2.4652: . ack 369 win 8432
21:22:06.258683 IP 192.168.10.2 > vpnSrvr: GREv1, call 54349, seq 3, length 37: LCP, Conf-Request (0x01), id 3, length 23
21:22:10.258767 IP 192.168.10.2 > vpnSrvr: GREv1, call 54349, seq 4, length 37: LCP, Conf-Request (0x01), id 4, length 23
21:22:14.258852 IP 192.168.10.2 > vpnSrvr: GREv1, call 54349, seq 5, length 37: LCP, Conf-Request (0x01), id 5, length 23

I have tried various iptables rules, but nothing seems to work.

Is there some other package for kamikaze which does what "kmod-ipt-nat-pptp" did?

Thanks

Try installing the "kmod-gre" package, that should help.

OK - that seems to have helped.

now my problem is - I can only make 1 connection at a time
well, it seems to be more like I can make a connection if no other connection entry exists in /proc/net/ip_conntrack

any idea of what the kamikaze equivalent of ipkg install kmod-ipt-nat-extra is?

Thanks

From looking at my installed packages' names, I would guess kmod-ipt-nathelper-extra.

That works !!     (almost)

When I disconnect the VPN tunnel, the router reboots.

Any ideas?

Thanks

Yeah, known problem of the 2.4 kernel. Only solution is using a 2.6 kernel, but that most probably means unusable wifi (although there seem to be a few who successfully use the b43 driver).
So you have the choice between wireless and no crashes.

Thanks.

I guess I will live with the crashes for now.  Maybe I will go back to the single VPN tunnel.

The discussion might have continued from here.