PPTP-VPN on Stock Kernel - Revision history

Nobody0472 at 08:48, 15 September 2010

Nobody0472 — Wed, 15 Sep 2010 08:48:12 GMT

← Older revision		Revision as of 08:48, 15 September 2010
Line 81:		Line 81:
	localip YOUR.IP.ADDRESS.HERE # This is the IP-Address of you linkstation		localip YOUR.IP.ADDRESS.HERE # This is the IP-Address of you linkstation
	remoteip YOUR.IP.ADDRESS.POLL-Start-POOL-End # The addresses that will be assigned to clients, e.g.: 192.168.0.200-230		remoteip YOUR.IP.ADDRESS.POLL-Start-POOL-End # The addresses that will be assigned to clients, e.g.: 192.168.0.200-230
		+
		+	Now we need to move the file /opt/etc/ppp/options.pptpd to /etec/ppp as the ppp-daemon looks there
		+	mv /opt/etc/ppp/options.pptpd /etc/ppp
		+
		+	You can also edit this file, but all the needed things are usually already in there.
		+
		+	=Adding allowed users=
		+	To add users to the PPTP-VPN-Server you need to edit the following file: /etc/ppp/chap-secrets
		+
		+	There you can add usernames, the PPTPD-Server as VPN-Server, passwords, and allowed Remote-IP-Adresses
		+
		+	=What is left to do for you?=
		+	Now you can start the PPTP-Server (or reboot the maching, as it gets started automatically with optware).
		+	Otherwise you can call: /opt/etc/init.d/S20poptop start
		+
		+	On the client-side you have to configure the PPTP-Client withthe UName/PW from /etc/ppp/chap-sectrets.
		+
		+	That should do the job.
		+
		+	=Changes=
		+	2010.09.15: Initial Version
		+
		+	[[Category:LS-XHL]][[Category:LS-CHLv2]][[Category:LS-WXL]][[Category:TS-WX1.0TL/R1]]

Nobody0472 at 08:42, 15 September 2010

Nobody0472 — Wed, 15 Sep 2010 08:42:18 GMT

← Older revision		Revision as of 08:42, 15 September 2010
Line 61:		Line 61:

	The aim is, to avoid loading something from nvram (as stated originally there), because nothing can be read from nvram.		The aim is, to avoid loading something from nvram (as stated originally there), because nothing can be read from nvram.
		+
		+	Now edit the pptp.conf file in /opt/etc; It should contain at least the following:
		+
		+	###############################################################################
		+	# $Id: pptpd.conf 2077 2005-06-10 07:18:16Z jeanfabrice $
		+	# Sample Poptop configuration file /etc/pptpd.conf
		+	# Changes are effective when pptpd is restarted.
		+	###############################################################################
		+	# TAG: ppp
		+	# Path to the pppd program, default '/usr/sbin/pppd' on Linux
		+	#
		+	ppp /usr/local/sbin/pppd
		+	# TAG: option
		+	# Specifies the location of the PPP options file.
		+	# By default PPP looks in '/etc/ppp/options'
		+	#
		+	option /etc/ppp/options.pptpd
		+	#
		+	localip YOUR.IP.ADDRESS.HERE # This is the IP-Address of you linkstation
		+	remoteip YOUR.IP.ADDRESS.POLL-Start-POOL-End # The addresses that will be assigned to clients, e.g.: 192.168.0.200-230

Nobody0472 at 08:38, 15 September 2010

Nobody0472 — Wed, 15 Sep 2010 08:38:25 GMT

← Older revision		Revision as of 08:38, 15 September 2010
Line 51:		Line 51:
	This is available in the optware feed, therefore install it with the following command:		This is available in the optware feed, therefore install it with the following command:
	ipkg install POPTOP		ipkg install POPTOP
		+
		+	We need to note, that POPTOP is now installed with the base-dir of /opt (like all the optware-packages)
		+
		+	Now we need to modify the start-script of POPTOP, as there is an issue with calling the daemon.
		+	So we need to edit the file: /opt/etc/init.d/S20poptop
		+
		+	Line 11 in the script (starting the daemon) should look like this:
		+	/opt/sbin/pptpd -c /opt/etc/pptpd.conf -o /etc/ppp/options.pptpd -p /var/run/pptpd.pid
		+
		+	The aim is, to avoid loading something from nvram (as stated originally there), because nothing can be read from nvram.

Nobody0472 at 08:33, 15 September 2010

Nobody0472 — Wed, 15 Sep 2010 08:33:20 GMT

← Older revision		Revision as of 08:33, 15 September 2010
Line 44:		Line 44:
	Now we need to update the module-library. Just execute the following command:		Now we need to update the module-library. Just execute the following command:
	depmod -a		depmod -a
		+
		+	OK, now the kernel-module is installed, and MPPE Encryption is available.
		+
		+	=How to install the PPTP-Server=
		+	We are using the OpenSource project POPTOP as PPTP-Server.
		+	This is available in the optware feed, therefore install it with the following command:
		+	ipkg install POPTOP

Nobody0472 at 08:31, 15 September 2010

Nobody0472 — Wed, 15 Sep 2010 08:31:53 GMT

← Older revision		Revision as of 08:31, 15 September 2010
Line 25:		Line 25:
	=How to install the MPPE Kernel Module=		=How to install the MPPE Kernel Module=
	Untar the package "nobody.tgz". You will find a new kernel-file and a module-archive "modules.tar".		Untar the package "nobody.tgz". You will find a new kernel-file and a module-archive "modules.tar".
-	Forget the kernel-file, as we don'tt need that. ~~untar~~ the module-archive "modules.tar".	+	Forget the kernel-file, as we don't need that. Untar the module-archive "modules.tar".

	In there you will find the following path: /drivers/net/		In there you will find the following path: /drivers/net/
Line 41:		Line 41:
	alias ppp-compress-26 ppp_deflate		alias ppp-compress-26 ppp_deflate
	alias net-pf-47 ip_gre		alias net-pf-47 ip_gre
		+
		+	Now we need to update the module-library. Just execute the following command:
		+	depmod -a

Nobody0472 at 08:30, 15 September 2010

Nobody0472 — Wed, 15 Sep 2010 08:30:54 GMT

← Older revision		Revision as of 08:30, 15 September 2010
Line 23:		Line 23:
	The bad news: we need to add a kernel-module, the PPTP-Server (POPTOP) and need to configure the things.		The bad news: we need to add a kernel-module, the PPTP-Server (POPTOP) and need to configure the things.

-	=How to ~~installe~~ the MPPE Kernel Module=	+	=How to install the MPPE Kernel Module=
		+	Untar the package "nobody.tgz". You will find a new kernel-file and a module-archive "modules.tar".
		+	Forget the kernel-file, as we don'tt need that. untar the module-archive "modules.tar".
		+
		+	In there you will find the following path: /drivers/net/
		+	In this path you will find the file: ppp_mppe.ko
		+
		+	You need to copy this file to the modules directory of your Linkstation
		+	/lib/modules/%kernel-version%/kernel/drivers/net
		+
		+	Now you need to edit the file /etc/modules.conf and ADD the following:
		+	alias tty-ldisc-3 ppp_async
		+	alias tty-ldisc-14 ppp_synctty
		+	alias ppp-compress-18 ppp_mppe
		+	alias ppp-compress-21 bsd_comp
		+	alias ppp-compress-24 ppp_deflate
		+	alias ppp-compress-26 ppp_deflate
		+	alias net-pf-47 ip_gre

Nobody0472 at 08:25, 15 September 2010

Nobody0472 — Wed, 15 Sep 2010 08:25:12 GMT

← Older revision		Revision as of 08:25, 15 September 2010
Line 7:		Line 7:
	You need to have the optware IPKG system installed on your device.		You need to have the optware IPKG system installed on your device.
	If not, you can find a guide here: [[Ipkg_on_the_Linkstation_(for_end-users)]]		If not, you can find a guide here: [[Ipkg_on_the_Linkstation_(for_end-users)]]
-

	For enabling the Microsoft MPPE-Encryption we need a kernel-Module that can be loaded by the stock kernel.		For enabling the Microsoft MPPE-Encryption we need a kernel-Module that can be loaded by the stock kernel.
Line 16:		Line 15:
	For Firmwares before 1.34 this also may work, but it's unknown if the needed Kernel-Modules are also available.		For Firmwares before 1.34 this also may work, but it's unknown if the needed Kernel-Modules are also available.

-	=What's the aim ?=	+	=What's the aim=
-	The aim is to realize a PPTP VPN-Server	+	The aim is to realize a PPTP VPN-Server, that allows users to dial in, establish a PPTP-Tunnel, and work remotely on the LS (or your network).
-		+
-	~~=What is needed ?=~~	+
-	~~The good news are: if you have downloaded the package above~~, and ~~if you are running Firmware 1~~.34	+

-	The ~~bad~~ news: ~~The packages~~ are ~~configured to be used for a service called PocketU (only in Japan)~~.	+	=What is needed=
-	~~As a matter of fact all boxes outside of Japan~~ are ~~not using those things at all~~.	+	The good news are: if you have downloaded the package above, and if you are running Firmware 1.34 with the optware IPKG Feed, the basics are there.

		+	The bad news: we need to add a kernel-module, the PPTP-Server (POPTOP) and need to configure the things.

-	~~As a general guidline for an IPSec-L2TP Server we need:~~	+	=How to installe the MPPE Kernel Module=
-	~~IPSec - Package (here OpenSwan with pluto), an IPSec-Configuration and a tunnel-configuration~~	+
-	~~L2TP - Package (here xl2tp), and xl2tp-Configuration and ppp.xl2tp options~~	+

Nobody0472: Created page with "Attention: What ever you do, you do it on your own risk =Prerequisite= You have to have firmware 1.34 already installed and opened for telnet acces…"

Nobody0472 — Wed, 15 Sep 2010 08:22:25 GMT

Created page with "<font color=red size=4>Attention: What ever you do, you do it on your own risk</font> =Prerequisite= You have to have firmware 1.34 already installed and opened for telnet acces…"

New page

<font color=red size=4>Attention: What ever you do, you do it on your own risk</font>

=Prerequisite=
You have to have firmware 1.34 already installed and opened for telnet access.
If not, you can find a guide here: [[Open Stock Firmware LS-XHL]]

You need to have the optware IPKG system installed on your device.
If not, you can find a guide here: [[Ipkg_on_the_Linkstation_(for_end-users)]]

For enabling the Microsoft MPPE-Encryption we need a kernel-Module that can be loaded by the stock kernel.
For this you need to download the following package:

http://downloads.buffalo.nas-central.org/Users/kenatonline/nobody/nobody.tgz

For Firmwares before 1.34 this also may work, but it's unknown if the needed Kernel-Modules are also available.

=What's the aim ?=
The aim is to realize a PPTP VPN-Server

=What is needed ?=
The good news are: if you have downloaded the package above, and if you are running Firmware 1.34

The bad news: The packages are configured to be used for a service called PocketU (only in Japan).
As a matter of fact all boxes outside of Japan are not using those things at all.

As a general guidline for an IPSec-L2TP Server we need:
IPSec - Package (here OpenSwan with pluto), an IPSec-Configuration and a tunnel-configuration
L2TP - Package (here xl2tp), and xl2tp-Configuration and ppp.xl2tp options