Hello,
These days I'm playing with npppd trying to setup a nice VPN gateway for
windows users. I managed to have a simple working configuration that
authenticates users in a local file (later on, I'll try with RADIUS).
With the configuration listed below, I can successfully connect a Win7
client to OpenBSD 5.8 and I can ping the tun IP from the Win7 host.
If I try that same configuration on the snapshot from 2015/12/19 the npppd
daemon enters on a strange case and I cannot kill it anymore with ^C when I
started it in foreground (npppd -d -f ...)
Note that the configuration works with pppx & pipex, but failed with tun.
Any advice is welcome :)
Here are the configurations:
l2tp58:/etc # ifconfig em0
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 08:00:27:c8:6d:77
priority: 0
groups: egress
media: Ethernet autoselect (1000baseT full-duplex)
status: active
inet 172.16.1.108 netmask 0xffffff00 broadcast 172.16.1.255
l2tp58:/etc # cat /etc/ipsec.conf
ip_pub="172.16.1.108"
PSK="test123123"
ike passive esp transport proto udp from $ip_pub to any port 1701 \
main auth hmac-md5 enc 3des group modp2048 \
quick auth hmac-md5 enc 3des \
psk $PSK
ike passive esp transport proto udp from $ip_pub to any port 1701 \
main auth hmac-sha enc aes group modp2048 \
quick auth hmac-sha enc aes \
psk $PSK
ike passive esp transport proto udp from $ip_pub to any port 1701 \
main auth hmac-md5 enc 3des group modp1024 \
quick auth hmac-md5 enc 3des \
psk $PSK
ike passive esp transport proto udp from $ip_pub to any port 1701 \
main auth hmac-md5 enc aes group modp1024 \
quick auth hmac-md5 enc 3des \
psk $PSK
l2tp58:/etc # cat npppd/npppd.conf
authentication LOCAL type local {
users-file "/etc/npppd/npppd-users"
}
tunnel L2TP_ipv4 protocol l2tp {
listen on 172.16.1.108
l2tp-accept-dialin yes
l2tp-vendor-name "OpenBSD"
authentication-method mschapv2
tcp-mss-adjust yes
pipex no
mppe no
}
ipcp IPCP {
pool-address 10.11.1.2-10.11.1.7
dns-servers 192.168.78.201 192.168.78.202
}
interface tun1 address 10.11.1.1 ipcp IPCP
bind tunnel from L2TP_ipv4 authenticated by LOCAL to tun1
l2tp58:/etc # cat sysctl.conf
net.inet.ip.forwarding=1
net.inet.ipcomp.enable=1
net.inet.gre.allow=1
# isakmpd -4K
# ipsecctl -f /etc/ipsec.conf
# npppd -f /etc/npppd/npppd.conf
#
Claer