TomatoUSB

Hi.

I know there is a tutorial for this: "tut:configuring-a-pptp-vpn"

But I tried the GUI support for VPN tunneling (Tomato 1.28) and I can't make it work. Anyone else that have tried this?

I enable the PPTP Server with MPPE-128 encryption and create a username and password.

In my Android phone I create a VPN-network for PPTP and tries to connect to my router over the internet (3G), but it tries to connect and fails. I don't get any more feedback from my phone, but when I check the following file on the router (/var/log/pptpd-pppd.log) I can see that there was an incoming connection:

using channel 9
Using interface ppp4
Connect: ppp4 <—> /dev/pts/1
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
sent [LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap MS-v2> <magic 0x969823e3> <pcomp> <accomp>]
LCP: timeout sending Config-Requests
Connection terminated.
Modem hangup

It seems that the router is sending some kind of configuration request to my Phone, but don't get any response and then times out. Maybe the problem is related to the authenticating procedure (mschap-v2)?

NOTE: I haven't done any port forward (1723) or any installation of optware or modified the tomato firewall settings. The reason is that I thought it was not needed or? I think the GUI will take care of this in the later versions of Tomato. Or?

Btw, this is what the /tmp/pptpd/options.pptpd looks like:

logfile /var/log/pptpd-pppd.log
debug
lock
name *
proxyarp
minunit 4
nobsdcomp
lcp-echo-failure 10
lcp-echo-interval 5
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
require-mppe-128
nomppe-stateful
ms-ignore-domain
chap-secrets /tmp/pptpd/chap-secrets
ip-up-script /tmp/pptpd/ip-up
ip-down-script /tmp/pptpd/ip-down
mtu 1450
mru 1450

Please help.

BR Joakim

##paste below to scripts - firewall##

#!/bin/sh
iptables -A INPUT -p tcp —dport 1723 -j ACCEPT
iptables -A INPUT -p gre -j ACCEPT
iptables -A INPUT -i ppp+ -j ACCEPT
iptables -A FORWARD -i ppp+ -j ACCEPT
iptables -A FORWARD -o ppp+ -j ACCEPT

iptables -t nat -I PREROUTING -p tcp —dport 1723 -j ACCEPT
iptables -I INPUT -p tcp —dport 1723 -j ACCEPT
iptables -I INPUT -i ppp+ -j ACCEPT
iptables -I FORWARD -i ppp+ -j ACCEPT

Thanks for your reply. I will look into this.

However, this seems to be things mentioned in the tutorial "Configuring a PPTP VPN" . As I wrote before, I didn't folllow that. The reason is that there now is a GUI support for this, so as far as I understand things, the GUI support should handle this and there is no need to install optware and do manual configurations as mentioned in the tutorial. Or is it?

If the manual configuration of the firewall is still required after the PPTP server has been enabled in the GUI, then it seems strange to me. In that case, why is that not also handled by the GUI support and why isn't it mentioned somwhere in the GUI that the firewall needs to be modified?

//Joakim