OpenWrt Forum Archive

Topic: an excellent site with a HOWTO to set up a PPTPD server on backfire.

The content of this topic has been archived on 4 May 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

just wanted to post this message because I had a hell of time setting up PPTPD on backfire.

I followed the wiki @ http://wiki.openwrt.org/doc/howto/vpn.server.pptpd but that really is no good.
After a lot of meddling and trying, it worked more or less, but only if I connected thru my LAN.
When I connected over the WAN, nothing worked.


Then I found this wiki : http://wiki.netcompartner.com/wiki/OpenWrt_PPTP_Server

This one works with a pseudo network interface. I had the whole thing up and running in 15 mins.

So kudos to them !

What I'd like to do is to build a VPN between two OpenWRT boxes.
At the moment I'm running Attitude Adjustment 12.09-rc1 on both sides as one of the two boxes is not supported yet by  Backfire 10.03.1.
I have followed the tutorial mentioned in the main post, with the needed changes as per 12.09-rc1.
My setup is "Two networks - routed". On the pptpd server box I have installed all the needed packages.
Then I've manually changed the needed configuration files.

/etc/pptpd.conf

#debug
option /etc/ppp/options.pptpd
speed 115200
stimeout 10
#localip & remoteip are not needed, ip management is done by pppd
localip 192.168.253.254

with  192.168.253.254 being my box LAN ip address.

/etc/ppp/options.pptpd

debug
logfile /tmp/pptp-server.log
auth
name "pptp-server"
lcp-echo-failure 3
lcp-echo-interval 60
default-asyncmap
mtu 1482
mru 1482
nobsdcomp
nodeflate
mppe required,no40,no56,stateless
require-mschap-v2
refuse-chap
refuse-mschap
refuse-eap
refuse-pap

/etc/ppp/chap-secrets

avpn * avpn 192.168.253.253

All comments have been expunged for the sake of brevity.
Then I've followed the instructions in order to allow the traffic for TCP:1723 and IP:47 in and to create the virtual interface VPN and the VPN firewall zone.
First of all, the command

 /sbin/ifup vpn

doesn't work as the system says "Interface vpn not found". Then I have rebooted the server box. Behind the PPTPd box I've put a machine answering to SSH and PING on 192.168.253.1.
I can connect my PC to the PPTPd server. I can ping the server local IP (192.168.253.254). But nothing else.
Because the remote end of the VPN will get an IP on the same subnet as the LAN, I've manually added also proxyarp to /etc/ppp/options.pptpd. With no luck.


Is there any hint on how to troubleshoot this setup?
Is there anyone who successfully did it already?
TIA.

P.S.
Is it possible it's a bug in the version I'm running?
The same PC can connect to a DD-WRT box through PPtP.

(Last edited by uqbar on 26 Dec 2012, 23:58)

None knows? Weird!

I finally got mine work but it took a lot of work and a bunch of IPtables and rules that i had to Gather from many sites. I will see if i can find it but i will tell you that you are better off using a PC based machine as the connection using the router is extreamly slow as they do not seem to have enough CPU power to handle the PPTPD load.

wesleyhey wrote:

I finally got mine work but it took a lot of work and a bunch of IPtables and rules that i had to Gather from many sites. I will see if i can find it but i will tell you that you are better off using a PC based machine as the connection using the router is extremely slow as they do not seem to have enough CPU power to handle the PPTPD load.

In my specific case I cannot add other hardware to the setup.
Anyway, the boxes I'm currently using are WR-1043, which work fairly well with DD-WRT and PPTP. I would say I should not get it worsen with OpenWRT, provided that I'll make it working.
Would you please show me how you made it work with the iptables rules?
The PPTP connection is working like a charm. It's the IP traffic that's not flowing at all.

(Last edited by uqbar on 3 Jan 2013, 07:42)

The discussion might have continued from here.