Hi, I've just added a new tutorial for configuring a PPTP VPN:
http://tomatousb.org/tut:configuring-a-pptp-vpn
Currently, it covers the server part, and then the client part for an iPhone. I plan to add more client configuration (Windows, Linux, Mac) later.
PS: Obviously this is NOT the same VPN as supported by the TomatoUSB VPN build: that's OpenVPN, this is PPTP, and works on any TomatoUSB build.
Hi. Great and easy to follow tutorial. Thanks a lot.
Two comments:
1) /opt/var/run/ did not exist on my Tomato so I had to manually created so that the server start/stop script would work.
2) firewall shell script contains an error and does not execute:
root@xxx:/tmp/home/root# /opt/etc/config/vpn.fire
/opt/etc/config/vpn.fire: line 11: seq: not found
Since I only have 1 device, I had to adjust the script as follows:
#!/bin/sh
MAX_VPN_CLIENTS=10
iptables -A INPUT -p gre -j ACCEPT
iptables -A INPUT -p tcp --dport 1723 -j ACCEPT
iptables -A INPUT -i ppp0 -j ACCEPT
iptables -A FORWARD -i ppp0 -j ACCEPT
I don't know shell scripting, so I couldn't correct the loop block. Perhaps you can update your tutorial with my 2 comments in mind.
iPhone 4 (4.3.2) and the latest Tomato on ASUS-RTN16. works like a charm!
I am using Iphone 4 (4.3.2) and RT-N16 and I follow all the procedure without any problem. but when I use 3G to connect to VPN, it will automatically disconnected. Here is what I found from the log:
May 21 08:55:45 unknown daemon.info pptpd[6455]: CTRL: Client 198.228.x.x control connection started
May 21 08:55:45 unknown daemon.info pptpd[6455]: CTRL: Starting call (launching pppd, opening GRE)
May 21 08:55:45 unknown daemon.err pppd[6456]: File not found
May 21 08:55:45 unknown daemon.err pppd[6456]: Couldn't load plugin /usr/lib/pptpd/pptpd-logwtmp.so
May 21 08:55:45 unknown daemon.err pptpd[6455]: GRE: read(fd=5,buffer=4205cc,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused
May 21 08:55:45 unknown daemon.err pptpd[6455]: CTRL: PTY read or GRE write failed (pty,gre)=(5,6)
May 21 08:55:45 unknown daemon.debug pptpd[6455]: CTRL: Reaping child PPP[6456]
May 21 08:55:45 unknown daemon.info pptpd[6455]: CTRL: Client 198.228.x.x control connection finished
Any one could give me some help here? Thanks!
@crimsontwo: thanks. I have updated the tutorial. seq is part of coreutils (which I had installed through ipkg), so I simply removed its usage.
@momentum: given the error message, it looks like you have accidentally uncommented the line "logwtmp" in /opt/etc/pptpd.conf: comment it.
@Rasky: Thanks for the help. I check /opt/etc/pptpd.conf and yes, "logwtmp" is uncommented. I comment it but find no difference. I still get the same error message. Do I need to do anything after I change the file? e.g. restart the service? I also notice that you mention a bug for IOS 4.3.1. I also change the file /opt/etc/ppp/options.pptpd with either 192.168.1.1 or my ISP DNS, but that make no difference.
Sorrry I am a NOOBS here and maybe I miss some basic settings. Thanks again for your help!
Yes you need to restart the service after changing pptpd.conf.
For the iOS bug, as explained, just put a public DNS in there. Your ISP's DNS will do.
I found my VPN connection was not lost after the screen was locked. I mean after I unlocked the screen the timer was still counting, including the time when it was locked. Not sure if this was reconnection or not. Just report this since it might be something different than what the tutorial describes. I am running iphone 4 with ios 4.3.2.
It might be that the behaviour is different depending on the phone model (just like wifi: 3GS disconnects from wifi after a few seconds, while 4 seems to keep the connection for a long time).
Rasky, thanks for excellent tutorial. PPTP server is the only thing I'm missing ever since I switched from DD-WRT (I need PPTP pretty much only for iPhone)
However, I have an issue connecting, could you please help? I'm using PPPoE WAN connection - my DSL modem is in bridge mode. It almost seems like pppd daemon drops WAN connection every time PPTP tunnel is established. Here is short excerpt from the logs:
Jun 16 16:44:04 tomato daemon.info pptpd[1818]: CTRL: Client xxx.xxx.xxx.xxx control connection started
Jun 16 16:44:04 tomato daemon.info pptpd[1818]: CTRL: Starting call (launching pppd, opening GRE)
Jun 16 16:44:04 tomato daemon.notice pppd[1819]: pppd 2.4.5 started by root, uid 0
Jun 16 16:44:04 tomato daemon.info pppd[1819]: Using interface ppp1
Jun 16 16:44:04 tomato daemon.notice pppd[1819]: Connect: ppp1 <—> /dev/pts/2
Jun 16 16:44:10 tomato daemon.notice pppd[1819]: MPPE 128-bit stateless compression enabled
Jun 16 16:44:13 tomato daemon.err pppd[1819]: Cannot determine ethernet address for proxy ARP
Jun 16 16:44:13 tomato daemon.notice pppd[1819]: local IP address 192.168.1.1
Jun 16 16:44:13 tomato daemon.notice pppd[1819]: remote IP address 192.168.1.20
Jun 16 16:44:13 tomato daemon.warn dnsmasq[1155]: no servers found in /etc/resolv.dnsmasq, will retry
Jun 16 16:44:13 tomato daemon.info dnsmasq[1155]: exiting on receipt of SIGTERM
Jun 16 16:44:15 tomato daemon.info dnsmasq[1836]: started, version 2.55 cachesize 1500
In fact, PPTP client on the iPhone continues to think it's connected to VPN server for some time, and then drops it. This is expected, since pppd on my router obtained new WAN IP. Any ideas what's going on?
