Re:

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: J.C. Roberts
Subject: Re:
Date: Sunday, May 23, 2010 - 5:39 pm

On Mon, 24 May 2010 00:00:07 +0200 patrick kristensen
<kristensenpatrickv@gmail.com> wrote:

It seems your routing is hosed. As the ppp(8) manual states, if you
use "add" it will not overwrite your default route (typically stored
in /etc/mygate). When you want to overwrite the default route, you need
to use "add!" such as:

    add! default HISADDR

Typically, you want to overwrite the default route, but note, you'll
probably see some harmless warnings for routes that ppp cannot
overwrite (such as IPv6 when it's not supported by your provider).

As for setting up the interface addresses, you should define all four
parts, rather than defining only three as you have done above.

    set ifaddr 10.0.0.1/0 10.0.0.2/0 0.0.0.0 0.0.0.0
               part#1     part#2     part#3  part#4

In your script above, your part#1 of "0" is *DEMANDING* that your
address be 0.0.0.0/32 and nothing else, or in other words, you are
*DEMANDING* that you become the default route for the remote system.
Needless to say the remote system will just laugh at you and refuse
to change it's default route (i.e. address your end as 0.0.0.0).

Setting the netmask (part#3) to 0.0.0.0 forces ppp to assign an
appropriate netmask. Since it is a point-to-point link and some
operating systems/kernels do not understand a POINTTOPOINT netmask,
you'll typically end up with 255.255.255.255 or 255.255.255.0 for the
netmask of your tun0 interface *even* if the remote gateway address is
outside of the netmask.

Using part#4 is important. This the address you *SUGGEST* that your
side should be, but you *DEMAND* your side gets and address defined by
part#1 (the /0 netmask on part#1 says any IP address).

Additionally, part#4 is also the "trigger" address when using '-auto'
mode to connect or reconnect.

Lastly, there's no point in defining 'device' 'speed' and 'dial' in the
"default:" section of your config file since you are redefining them in
the "esp:" section.

Once you have the above corrected, look at your CHAP settings. Though
you were able to negotiate IP addresses (according to the log), it
seems your provider wanted to use CHAP authentication. If you made the
previous corrections and you still cannot connect, then you may need
to use CHAP:

	set authname myusername
	set authkey mypassword
	set login

Not all providers require PAP/CHAP authentication through 'authname'
'authkey' and 'login' because the real authentication is being done by
device identifiers (MEID and/or IMEI). 

	jcr

-- 
The OpenBSD Journal - http://www.undeadly.org
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
[No subject], patrick kristensen, (Fri May 14, 8:11 am)
Re: , J.C. Roberts, (Sun May 16, 5:53 pm)
Re: , patrick kristensen, (Thu May 20, 2:17 pm)
Re: , J.C. Roberts, (Thu May 20, 3:23 pm)
Re: , patrick kristensen, (Sat May 22, 1:08 pm)
Re: , J.C. Roberts, (Sat May 22, 5:52 pm)
Re: , patrick kristensen, (Sun May 23, 3:00 pm)
Re: , J.C. Roberts, (Sun May 23, 5:39 pm)
Re: , patrick kristensen, (Mon May 24, 5:54 am)
Re: , J.C. Roberts, (Mon May 24, 2:51 pm)
Re: , patrick kristensen, (Mon May 24, 3:54 pm)
Re: , J.C. Roberts, (Mon May 24, 9:56 pm)
Re: , Jussi Peltola, (Tue May 25, 1:32 am)
Re: , Pete Vickers, (Tue May 25, 7:00 am)