Well I'm having a wonderful time playing with ideas to access the web server on my eeePc on the boat.
My home router is a Draytek Vigor 2820n which has VPN capability itself. So I decided to try it.
I can connect using pptp from the eeePc on the boat to the 2820n's VPN service:-
root@eeepc:~# pptpsetup --create home --server zbmc.eu --username chris --start Password: Using interface ppp0 Connect: ppp0 <--> /dev/pts/1 CHAP authentication succeeded Cannot determine ethernet address for proxy ARP local IP address 192.168.1.202 remote IP address 192.168.1.1 root@eeepc:~#
... and I can then ping the router from the eeePc OK. However I can't get anything else to work, i.e. I can't seem to get any data across the VPN connection at all.
I have tried adding a route at the eeePc end:-
root@eeepc:~# route add -net 192.168.1.0 netmask 255.255.255.0 dev ppp0 root@eeepc:~# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.1 * 255.255.255.255 UH 0 0 0 ppp0 84-45-228-40.st 192.168.13.1 255.255.255.255 UGH 0 0 0 eth0 192.168.1.0 * 255.255.255.0 U 0 0 0 ppp0 192.168.13.0 * 255.255.255.0 U 0 0 0 eth0 default 192.168.13.1 0.0.0.0 UG 100 0 0 eth0 root@eeepc:~#
but still no joy.
root@eeepc:~# ping 192.168.1.1 PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data. 64 bytes from 192.168.1.1: icmp_seq=1 ttl=255 time=82.0 ms 64 bytes from 192.168.1.1: icmp_seq=2 ttl=255 time=76.7 ms 64 bytes from 192.168.1.1: icmp_seq=3 ttl=255 time=79.6 ms 64 bytes from 192.168.1.1: icmp_seq=4 ttl=255 time=77.8 ms 64 bytes from 192.168.1.1: icmp_seq=5 ttl=255 time=76.6 ms 64 bytes from 192.168.1.1: icmp_seq=6 ttl=255 time=74.9 ms ^C --- 192.168.1.1 ping statistics --- 6 packets transmitted, 6 received, 0% packet loss, time 5007ms rtt min/avg/max/mdev = 74.905/77.992/82.087/2.345 ms root@eeepc:~# ping 192.168.1.4 PING 192.168.1.4 (192.168.1.4) 56(84) bytes of data. From 192.168.1.34 icmp_seq=1 Destination Host Unreachable From 192.168.1.34 icmp_seq=2 Destination Host Unreachable From 192.168.1.34 icmp_seq=3 Destination Host Unreachable From 192.168.1.34 icmp_seq=4 Destination Host Unreachable From 192.168.1.34 icmp_seq=5 Destination Host Unreachable From 192.168.1.34 icmp_seq=6 Destination Host Unreachable ^C --- 192.168.1.4 ping statistics --- 7 packets transmitted, 0 received, +6 errors, 100% packet loss, time 6031ms , pipe 3
(the eeePc is on a 192.168.13.0 LAN so the IP addresses shouldn't conflict)
Similarly at the other end (my desktop machine) I can see the VPN but I can't push any data through it:-
root@chris:~# arp-scan -l Interface: eth0, datalink type: EN10MB (Ethernet) Starting arp-scan 1.8.1 with 256 hosts (http://www.nta-monitor.com/tools/arp-scan/) 192.168.1.1 00:50:7f:8b:35:40 DrayTek Corp. 192.168.1.2 00:01:6c:6c:c7:9b FOXCONN 192.168.1.6 00:04:4b:07:13:30 NVIDIA 192.168.1.84 70:f1:a1:2d:da:86 Liteon Technology Corporation 192.168.1.90 00:90:a9:70:06:ff WESTERN DIGITAL 192.168.1.122 78:ac:c0:63:90:d4 Hewlett Packard 192.168.1.150 00:04:20:26:55:19 Slim Devices, Inc. 192.168.1.202 00:50:7f:8b:35:40 DrayTek Corp. 192.168.1.81 00:01:e3:9d:8b:b5 Siemens AG
9 packets received by filter, 0 packets dropped by kernel Ending arp-scan 1.8.1: 256 hosts scanned in 1.360 seconds (188.24 hosts/sec). 9 responded
That 192.168.1.202 is the VPN network IP address on the router, but I can't ping it or anything:-
root@chris:~# ping 192.168.1.202 PING 192.168.1.202 (192.168.1.202) 56(84) bytes of data.
^C --- 192.168.1.202 ping statistics --- 4 packets transmitted, 0 received, 100% packet loss, time 3023ms
Am I missing something obvious somewhere and/or any ideas how to diagnose what's wrong?
On Fri, 5 Oct 2012 16:48:32 +0100, cl@isbd.net said:
My home router is a Draytek Vigor 2820n which has VPN capability itself. So I decided to try it.
Why?
OpenVPN just works. If I recall correctly, the Draytek VPNs are IPsec, and they can be, well, challenging to set up. Put OpenVPN at each end: it isn't that hard to get working (and you're more likely to get help if you really need it).
On Fri, Oct 05, 2012 at 08:29:47PM +0100, Keith Edmunds wrote:
On Fri, 5 Oct 2012 16:48:32 +0100, cl@isbd.net said:
My home router is a Draytek Vigor 2820n which has VPN capability itself. So I decided to try it.
Why?
... "because it's there!", nothing to install etc. and (IMHO) less likely to make my desktop system vulnerable in the process.
OpenVPN just works. If I recall correctly, the Draytek VPNs are IPsec, and
No, the Draytek has PPTP capability as well as IPsec.
they can be, well, challenging to set up. Put OpenVPN at each end: it isn't that hard to get working (and you're more likely to get help if you really need it).
Well it's all on the back burner now as (see other posting) I've found that I can rather easily do what I want with two ssh tunnels.