PPTP VPNs in Jaguar

		Print
		Email weblog link
		Discuss
		Blog this

Nat Torkington
Aug. 26, 2002 01:40 PM
Permalink

Sometimes I think my parents must have dropped me on my head as a kid. It took me longer to find the obviously-named application that configures your Jaguar-running Mac to connect to a VPN network than it did for me to actually connect!

The program is Internet Connect in the Applications folder. The File menu has "New VPN Connection Window" which is where you enter all the info. The only trick is that if your network is run by Windows (boo hiss) you might have to enter a username that includes your domain: DOMAIN\USERNAME (e.g., MYDOMAIN\GNAT).

When your machine is set up to do PPTP VPNs, you have a new configuration pane. Go to System Preferences, and then Network. From the drop down list "Show" select PPTP. You may need to add DNS servers and domains to search if you can't find any of the machines on your VPN.

Then you can mount shared volumes, printers, and all that good stuff. From my limited experiments with O'Reilly's VPN, though, I can't browse servers, I have to specify the machine names when I connect.

Dead simple! Many thanks to Chris Stone, our Mac networking guru here at ORA, who gave me the step by step instructions I needed to make it work.

--Nat

Nat Torkington is conference planner for the Open Source Convention, OSCON Europe, and other O'Reilly conferences. He was project manager for Perl 6, is on the board of The Perl Foundation, and is a frequent speaker on open source topics. He cowrote the bestselling Perl Cookbook.

Discovered any cool new networking tricks in Jaguar? Tell me all about them ...
You must be logged in to the O'Reilly Network to post a comment.

Showing messages 1 through 29 of 29.

VPN PPTP on FreeBSD
2002-10-31 09:16:01 anonymous2 [Reply | View]

Sorry, I'm french!
I want to use my home OSX 10.2 to link machine running FreeBSD in my Office with VPN PPTP in total security.
It seems very simple on OSX but, some people says that PPTP on FreeBSD is not able to use encrytion under virtual network.(like Poptop, because PPP on FreeBSD doesn't support encryption)
Does anyone know of, open source VPN PPTP server for FreeBSD?
thanks in advance for any help.
PF

VPN PPTP on FreeBSD
2003-06-05 17:18:17 Dustin Puryear | [Reply | View]

/usr/ports/net/poptop

VPN PPTP on FreeBSD
2003-05-27 07:50:16 anonymous2 [Reply | View]

You may try MPD on FreeBSD as PPTP Server. It works fine but sometime with unexpected link down.

VPN on VPC?
2002-09-26 13:47:21 dicklacara [Reply | View]

Can you setup a VPN on, say WinNT running under VirtualPC Emulation.

I want to use OS X to connect to an emulated VPN machine running MS-Access.

The purpose is so that I can manipulate MS-Access databases from a program running under native OS X?

TIA

Dick

If only i could choose default routes
2002-09-14 12:34:03 anonymous2 [Reply | View]

Under network prefs go to 'Network Port Configuration'

It says right there that the order the interfaces are listed in the box will be the search order, simply put your local interface above the PPTP interface.

I think that would make the local interface the default route but I do not have a vpn to test with.

If only i could choose default routes
2002-10-17 11:35:15 afrenier [Reply | View]

This fix does not work. That only comes into play when the machine has no network connection at all - it decides which one to try first based on the order in that dialog. There are some apps out there that allow you to start a PPTP connection (PiePants and DigiTunnel, among others) but none of them appears to work with Jaguar (10.2)... so I am stuck. There is a built-in pptp client in Jaguar, which connects fine but doesn't have an option to disable default route. I have tried the following (in a terminal window)

sudo route delete default
[enter password]
sudo route add default [ip of real gateway here]

And that appears to work, but after a few minutes it stops working and I have to disconnect the pptp connection in order to get internet again. Any clues?

If only i could choose default routes
2003-03-31 23:26:45 anonymous2 [Reply | View]

After setting up the VPN connection, try running the following script. You will of course need to change the IP addresses to fit your needs. In the example below, 192.168.100.0/24 is the local network, and 192.168.1.0/24 is the remote network we are vpn'd to. This is self-healing; when the vpn is disconnected the routes will fix themselves.

#!/bin/sh
# delete the broken default route
sudo route delete default

# add the route to the vpn network
# via the pptp interface
sudo route add -net 192.168.1.0 \
-netmask 255.255.255.0 -interface ppp0

# set the new default route
sudo route add default 192.168.100.254

If only i could choose default routes
2004-11-18 23:36:56 avidan [Reply | View]

THANK YOU "ANONYMOUS"!
Now, does anyone know a way to get this script to run automatically everytime i connect via pptp vpn?
-avidan

Error connecting
2002-09-04 14:06:57 slowslow [Reply | View]

I have a connect timeout error when I try to connect to a Windows VPN server. The log says:

PPTP connection established.
Using interface ppp0
Connect: ppp0 <--> socket[34:17]
LCP: timeout sending Config-Requests
Connection terminated.
PPTP disconnecting...
PPTP disconnected

The timeout occurs after 30 seconds. Any idea what would cause the Connect line to timeout. What is ppp0 <--> socket[34:17]?

Thanks for any help.

Error connecting
2004-10-20 10:48:36 alderete [Reply | View]
I get slightly different messages in my Internet Connect log:
```
Wed Oct 20 10:44:50 2004 : PPTP connection established.

Wed Oct 20 10:44:50 2004 : Using interface ppp0

Wed Oct 20 10:44:50 2004 : Connect: ppp0 <--> socket[34:17]

Wed Oct 20 10:44:53 2004 : Fatal signal 10
```
That's it, then I get the Unexpectedly Terminated dialog in Internet Connect. Anyone know what "Fatal signal 10" is?

Error connecting
2004-01-21 07:58:55 spftech [Reply | View]

I am having exactly the same problem. Where you ever able to resolve the issue? If so, how?

Error connecting
2003-10-25 07:37:18 anonymous2 [Reply | View]

This appears to be a firewall issue. If you have your firewall enabled, disable it and try to connect. I'm having the same problem, but I can't figure out what firewall setting is giving the error message

Error connecting
2003-05-12 14:02:07 anonymous2 [Reply | View]

a friend at work just set up linux to talk to our windows pptp server, and the magic thing was apparently the option "refuse-eap". however, the mac ppp plugin does not apparently accept this as an option.

when i tcpdump the config-req packets coming from our server i see EAP in there. and i guess the osX pppd does not know what to do with that option, so it just times out.

so we may be stuck. i didnt see pppd in fink, but that does not mean that the linux pppd could not be ported to osX.

Error connecting
2003-04-10 23:54:07 anonymous2 [Reply | View]

Same problem here, I have been trying to connect for a month and I've been looking for info on it all over the place and have found no answers. Are my settings wrong or are the server's setting wrong? please help us quickly!!!!!!!

Error connecting
2002-11-07 08:51:43 anonymous2 [Reply | View]

I am having this exact same problem. Does anyone have a clue about this? It's quite strange...

Error connecting
2002-09-12 01:37:53 anonymous2 [Reply | View]

Thu Sep 12 10:34:05 2002 : PPTP connection established.
Thu Sep 12 10:34:05 2002 : Using interface ppp1
Thu Sep 12 10:34:05 2002 : Connect: ppp1 <--> socket[34:17]
Thu Sep 12 10:34:05 2002 : Remote message: S=78AED45C4DFA2E046709.................................
Thu Sep 12 10:34:06 2002 : local IP address 192.168.0.10
Thu Sep 12 10:34:06 2002 : remote IP address 192.168.0.7
Thu Sep 12 10:34:06 2002 : MPPE 40 bit, non-stateless compression enabled
Thu Sep 12 10:34:06 2002 : PPTP hangup
Thu Sep 12 10:34:06 2002 : Connection terminated.
Thu Sep 12 10:34:06 2002 : Connect time 0.1 minutes.
Thu Sep 12 10:34:06 2002 : Sent 308 bytes, received 240 bytes.
Thu Sep 12 10:34:07 2002 : PPTP disconnecting...
Thu Sep 12 10:34:07 2002 : PPTP disconnected

Why is the connection terminated???
Any Idea??

VPN server for 10.2
2002-08-28 13:01:32 jasontm [Reply | View]

Does anyone know of a good, open source VPN server for OSX.2? Does it come with one?

I want to be able to set up a VPN link to my home computer, but i don't want to use windows to do it!

thanks in advance for any help. :)

JtM

VPN server for 10.2
2005-07-09 20:51:24 zn [Reply | View]

You could use poptop (http://www.poptop.org)
Another solution would be to use pptpproxy
and forward the VPN connection to a box
that has a native pptp server.
pptp proxy is at http://www.mgix.com/pptpproxy

VPN server for 10.2
2002-08-29 17:02:29 dieringer [Reply | View]

I have the same question. In digging around I found the following:

http://www.onlamp.com/pub/a/bsd/2001/12/10/ipsec.html

And it appears Jaguar includes the necessary files.

SKD

VPN server for 10.2
2002-11-14 17:16:30 anonymous2 [Reply | View]

I found the following link for enabling the PPTP VPN server on 10.2 (appears to be included as part of the install).

http://www.afp548.com/Articles/Jaguar/vpnd.html

I have not tried this out yet but plan to later tonight.

If only i could choose default routes
2002-08-27 23:54:15 seiz [Reply | View]

Jaguars VPN implementation would let me chose if i want the DEFAULT Route to go to the VPN or elsewhere. As it is currently the default route is set to the VPN so all internet surfing goes through the VPN as well. Quite inpractical when you're on a DSL connection at home and want to surf the Net using the DSL-Provider and just need to access some fileservers through the VPN...
Gracion's implementation of a VPN Client for OSX took this all into account. Concerning the routing their client was better.

not working with shiva
2002-08-27 09:08:37 gteague [Reply | View]

enterprise (shiva radius) server would not accept connection. works fine with w2k under vpc on the same machine. oh well, i still have to run visio to access network drawings and have no converter for visio files on the mac.

also, there is some claim of exchange support in mail.app, but even though i got messages saying i was synchronizing, i haven't gotten it to work so far.

/guy

Rael got caught by this as well
2002-08-26 17:24:47 James Duncan Davidson | [Reply | View]

Funny that you wrote this blog. Rael and I just went through the process of figuring this out a few hours ago.

Rael got caught by this as well
2002-08-27 08:25:49 Nat Torkington | [Reply | View]

Yes, I wonder who inspired his venture into VPNs :-)

--Nat

IPSec
2002-08-26 16:17:47 jim@ipmi.com [Reply | View]

Apple has made a big stink about 10.2 supporting IPSec, but I can not see anything that supports using IPSec.

Apple's claim that Jaguar contains IPSec support is still on their site.

"Surf next-gen Internet with IPv6 and IPSec support" at

http://www.apple.com/macosx/jaguar/morefeatures.html

What gives?

IPSec
2003-07-02 16:27:20 anonymous2 [Reply | View]

There are various graphical front-ends for IPsec already, made by third parties.

You can also configure it manually. It's not *really* hard, but the docs kinda suck. I've just sucessfully setup an IPsec tunnel over ther internet between two gateways (both Jaguar) to connect together two private networks, both behind NAT.

Maybe I should write a doc about it or so..

- xmath

IPSec is supported at the Bottom
2002-08-26 17:24:11 James Duncan Davidson | [Reply | View]

IPSec support is in there, at the bottom. It's not exposed through to the user, but its there for applications to take advantage of.

IPSec is supported at the Bottom
2002-08-27 13:49:31 jim@ipmi.com [Reply | View]

That's great but I think it is very deceptive advertising on Apple's part. This can be something they discuss at the ADC level.... but not on the website.... not unless there was an application shipping with the product that would accommodate an IPSec VPN.

I'm a huge Apple fan and Mac User, but I must say much of 10.2 has been kind of a let down. The only things that are REALLY there are the things I would have expected to be there in 10.0 or 10.1. I'm patient and still happy, but my expectations were set very high for 10.2.

IPSec is supported at the Bottom
2002-09-04 05:03:33 pelorus [Reply | View]

man racoon

Showing messages 1 through 29 of 29.

Return to weblogs.oreilly.com.

Weblog authors are solely responsible for the content and accuracy of their weblogs, including opinions they express, and O'Reilly Media, Inc., disclaims any and all liabililty for that content, its accuracy, and opinions it may contain.

This work is licensed under a Creative Commons License.