Menu

YfiTechOpenPPTP

Anonymous

PPTP Client on Ubuntu

This section will step through a manual set-up for a pptp client connection on Ubuntu.
It is assumed that you have a standard pptpd server set-up as configured per YFi Hotspot Manager set-up.

On the server

  • When you add a VPN Connected NAS using the Realms & Providers -> NAS Devices menu on YFi Hotspot Manager to create a NAS device, this NAS device's PPTP detail gets added to a file /etc/ppp/chap-secrets
  • The following shows a file with one device in it

    # Secrets for authentication using CHAP
    # client    server  secret          IP addresses
    yfi_nas_0001 pptpd 700Secret 10.20.30.2
    

On the Client

  • We use this detail specified on the pptpd server to set up the connection on the client.
  • Create a file with a name to identify the connection we are about to set up. We will call it yfi_server under the /etc/ppp/peers/ directory.
  • Edit this file to contain the following. (We assume our pptpd server has an IP of 196.7.36.10. The /etc/ppp/options.pptp file is the default that comes with a standard install )

    pty "pptp 196.7.36.10 --nolaunchpppd"
    name yfi_nas_0001
    remotename pptpd
    require-mppe-128
    file /etc/ppp/options.pptp
    
  • We still need to configure the password for this connection. Edit the /etc/ppp/chap-secrets file on the client to contain the following:

    # Secrets for authentication using CHAP
    # client        server  secret                  IP addresses
    yfi_nas_0001 pptpd 700Secret "*"
    

Test it out

  • To make a connection you need to issue the following command on the client

    sudo pppd call yfi_server
    
  • Confirm that the connection gets established. Here's the output of sudo tail -f /var/log/messages on the client:

    May 31 20:37:45 dvdwalt pppd[6834]: pppd 2.4.4 started by root, uid 0
    May 31 20:37:45 dvdwalt pppd[6834]: Using interface ppp0
    May 31 20:37:45 dvdwalt pppd[6834]: Connect: ppp0 <--> /dev/pts/4
    May 31 20:37:46 dvdwalt pppd[6834]: Warning - secret file /etc/ppp/chap-secrets has world and/or group access
    May 31 20:37:46 dvdwalt pppd[6834]: CHAP authentication succeeded
    May 31 20:37:46 dvdwalt pppd[6834]: MPPE 128-bit stateless compression enabled
    May 31 20:37:46 dvdwalt pppd[6834]: local  IP address 10.20.30.2
    May 31 20:37:46 dvdwalt pppd[6834]: remote IP address 10.20.30.1
    
  • Here's the output of sudo tail -f /var/log/messages on the server:

    May 31 20:37:46 linux pppd[28508]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
    May 31 20:37:46 linux pppd[28508]: pppd 2.4.4 started by root, uid 0
    May 31 20:37:46 linux pppd[28508]: Using interface ppp0
    May 31 20:37:46 linux pppd[28508]: Connect: ppp0 <--> /dev/pts/1
    May 31 20:37:46 linux pppd[28508]: Warning - secret file /etc/ppp/chap-secrets has world and/or group access
    May 31 20:37:46 linux pppd[28508]: MPPE 128-bit stateless compression enabled
    May 31 20:37:46 linux pppd[28508]: local  IP address 10.20.30.1
    May 31 20:37:46 linux pppd[28508]: remote IP address 10.20.30.2
    
  • Here's the output of ifconfig on the client:

    ppp0      Link encap:Point-to-Point Protocol  
              inet addr:10.20.30.2  P-t-P:10.20.30.1  Mask:255.255.255.255
              UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1496  Metric:1
              RX packets:6 errors:0 dropped:0 overruns:0 frame:0
              TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:3 
              RX bytes:146 (146.0 B)  TX bytes:152 (152.0 B)
    
  • Here's the output of ifconfig on the server:

    ppp0      Link encap:Point-to-Point Protocol  
              inet addr:10.20.30.1  P-t-P:10.20.30.2  Mask:255.255.255.255
              UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1496  Metric:1
              RX packets:6 errors:0 dropped:0 overruns:0 frame:0
              TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:3 
              RX bytes:152 (152.0 B)  TX bytes:146 (146.0 B)
    
  • You should now be able to ping between the client and the server.


Related

Wiki: Home