Troubleshooting VPN?

Questions about networking.
In the Original Post please also include the output of inxi -FNzxx
tony
Posts: 42
Joined: 03 Mar 2015 09:50

Troubleshooting VPN?

Postby tony » 24 Jul 2016 15:25

Hi,

I created a VNP connection to my company network, and could not get it work. I used the same parameters to create a VPN on a macbook and it works, so probably I am missing something in my solydx. What i did was following:

- click icon Network Manager/VPN Connections/Configure VPN...
- add VNP Connection
- enter: name, gateway, username, pw
- click "Save"
- connect to the newly created VPN

after a while it's reported that the connection has failed.

Can someone please give me a hint how to process further?

I tried to do a 'tail -f /var/log/syslog' and here is the output:

Code: Select all

Jul 24 17:20:03 solydx NetworkManager[983]: <info> Starting VPN service 'pptp'...
Jul 24 17:20:03 solydx NetworkManager[983]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 16111
Jul 24 17:20:03 solydx NetworkManager[983]: <info> VPN service 'pptp' appeared; activating connections
Jul 24 17:20:03 solydx NetworkManager[983]: <info> VPN connection 'Libra2' (ConnectInteractive) reply received.
Jul 24 17:20:03 solydx NetworkManager[983]: <info> VPN plugin state changed: starting (3)
Jul 24 17:20:03 solydx NetworkManager[983]: ** Message: pppd started with pid 16114
Jul 24 17:20:03 solydx NetworkManager[983]: <info> VPN connection 'Libra2' (Connect) reply received.
Jul 24 17:20:03 solydx pppd[16114]: Plugin /usr/lib/pppd/2.4.6/nm-pptp-pppd-plugin.so loaded.
Jul 24 17:20:03 solydx NetworkManager[983]: Plugin /usr/lib/pppd/2.4.6/nm-pptp-pppd-plugin.so loaded.
Jul 24 17:20:03 solydx NetworkManager[983]: ** Message: nm-pptp-ppp-plugin: (plugin_init): initializing
Jul 24 17:20:03 solydx pppd[16114]: pppd 2.4.6 started by root, uid 0
Jul 24 17:20:03 solydx NetworkManager[983]: ** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 3 / phase 'serial connection'
Jul 24 17:20:03 solydx pppd[16114]: Using interface ppp0
Jul 24 17:20:03 solydx pptp[16118]: nm-pptp-service-16111 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Jul 24 17:20:03 solydx pppd[16114]: Connect: ppp0 <--> /dev/pts/5
Jul 24 17:20:03 solydx NetworkManager[983]: Using interface ppp0
Jul 24 17:20:03 solydx NetworkManager[983]: Connect: ppp0 <--> /dev/pts/5
Jul 24 17:20:03 solydx NetworkManager[983]: ** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 5 / phase 'establish'
Jul 24 17:20:03 solydx NetworkManager[983]: <info> devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jul 24 17:20:03 solydx NetworkManager[983]: <info> device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Jul 24 17:20:03 solydx NetworkManager[983]: <info> (ppp0): new Generic device (driver: 'unknown' ifindex: 12)
Jul 24 17:20:03 solydx NetworkManager[983]: <info> (ppp0): exported as /org/freedesktop/NetworkManager/Devices/11
Jul 24 17:20:34 solydx pppd[16114]: LCP: timeout sending Config-Requests
Jul 24 17:20:34 solydx pppd[16114]: Connection terminated.
Jul 24 17:20:34 solydx avahi-daemon[971]: Withdrawing workstation service for ppp0.
Jul 24 17:20:34 solydx NetworkManager[983]: LCP: timeout sending Config-Requests
Jul 24 17:20:34 solydx NetworkManager[983]: ** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 11 / phase 'disconnect'
Jul 24 17:20:34 solydx NetworkManager[983]: Connection terminated.
Jul 24 17:20:34 solydx NetworkManager[983]: <info> devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jul 24 17:20:34 solydx NetworkManager[983]: <warn> VPN plugin failed: connect-failed (1)
Jul 24 17:20:34 solydx NetworkManager[983]: ** Message: nm-pptp-ppp-plugin: (nm_phasechange): status 1 / phase 'dead'
Jul 24 17:20:34 solydx pppd[16114]: Modem hangup
Jul 24 17:20:34 solydx NetworkManager[983]: Modem hangup
Jul 24 17:20:34 solydx NetworkManager[983]: <warn> VPN plugin failed: connect-failed (1)
Jul 24 17:20:39 solydx NetworkManager[983]: ** Message: nm-pptp-ppp-plugin: (nm_exit_notify): cleaning up
Jul 24 17:20:39 solydx pppd[16114]: Exit.
Jul 24 17:20:39 solydx NetworkManager[983]: ** (nm-pptp-service:16111): WARNING **: pppd exited with error code 16
Jul 24 17:20:39 solydx NetworkManager[983]: <warn> VPN plugin failed: connect-failed (1)
Jul 24 17:20:39 solydx NetworkManager[983]: <info> VPN plugin state changed: stopped (6)
Jul 24 17:20:39 solydx NetworkManager[983]: <info> VPN plugin state change reason: unknown (0)
Jul 24 17:20:39 solydx NetworkManager[983]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.
Jul 24 17:20:59 solydx NetworkManager[983]: <info> VPN service 'pptp' disappeared
Jul 24 17:21:04 solydx pptp[16068]: nm-pptp-service-16060 warn[open_inetsock:pptp_callmgr.c:329]: connect: Connection timed out
Jul 24 17:21:04 solydx pptp[16068]: nm-pptp-service-16060 fatal[callmgr_main:pptp_callmgr.c:127]: Could not open control connection to 217.91.173.222
Jul 24 17:21:04 solydx NetworkManager[983]: nm-pptp-service-16060 warn[open_inetsock:pptp_callmgr.c:329]: connect: Connection timed out
Jul 24 17:21:04 solydx NetworkManager[983]: nm-pptp-service-16060 fatal[callmgr_main:pptp_callmgr.c:127]: Could not open control connection to 217.91.173.222
Jul 24 17:21:04 solydx NetworkManager[983]: nm-pptp-service-16060 fatal[open_callmgr:pptp.c:487]: Call manager exited with error 256
Jul 24 17:21:04 solydx pptp[16067]: nm-pptp-service-16060 fatal[open_callmgr:pptp.c:487]: Call manager exited with error 256
Jul 24 17:22:10 solydx NetworkManager[983]: nm-pptp-service-16111 warn[open_inetsock:pptp_callmgr.c:329]: connect: Connection timed out
Jul 24 17:22:10 solydx NetworkManager[983]: nm-pptp-service-16111 fatal[callmgr_main:pptp_callmgr.c:127]: Could not open control connection to 217.91.173.222
Jul 24 17:22:10 solydx pptp[16119]: nm-pptp-service-16111 warn[open_inetsock:pptp_callmgr.c:329]: connect: Connection timed out
Jul 24 17:22:10 solydx pptp[16119]: nm-pptp-service-16111 fatal[callmgr_main:pptp_callmgr.c:127]: Could not open control connection to 217.91.173.222
Jul 24 17:22:10 solydx pptp[16118]: nm-pptp-service-16111 fatal[open_callmgr:pptp.c:487]: Call manager exited with error 256
Jul 24 17:22:10 solydx NetworkManager[983]: nm-pptp-service-16111 fatal[open_callmgr:pptp.c:487]: Call manager exited with error 256


Tony

User avatar
xendistar
Posts: 361
Joined: 08 Jun 2014 08:17
Location: Bournemouth, UK

Re: Troubleshooting VPN?

Postby xendistar » 26 Jul 2016 20:59

Are you able to look at the connections logs on the VPN server to see if that offers any insight to your problem?

I have in the past used Shrew Soft VPN Client, mainly because it would import a Cisco config file, but it does look like Shrew Soft VPN Client is a dead as there have not been any updates for three years.

User avatar
Zill
Posts: 1850
Joined: 13 Aug 2013 14:28
Location: Lincolnshire, UK

Re: Troubleshooting VPN?

Postby Zill » 27 Jul 2016 10:07

tony: I don't use a VPN myself but I see that NetworkManager has various plugins for VPN and, specifically, for the pptp service that seems to have generated so many errors in your syslog.

Opening Synaptic, my SolydX jessie system shows the following network-manager packages:

NetworkManager.png

I suggest you could try installing some or all of the network-manager vpn and pptp packages to see if this helps.

p.s. It seems that there are security concerns about pptp but unless you can persuade your company to use a more secure system then you may not have many options!

User avatar
Schoelje
Site Admin
Posts: 8340
Joined: 26 Jan 2013 19:36
Location: Netherlands
Contact:

Re: Troubleshooting VPN?

Postby Schoelje » 29 Jul 2016 04:39

By default network-manager-openvpnc and network-manager-vpnc are installed.


SolydXK needs you!
Development | Testing | Translations

User avatar
Zill
Posts: 1850
Joined: 13 Aug 2013 14:28
Location: Lincolnshire, UK

Re: Troubleshooting VPN?

Postby Zill » 29 Jul 2016 09:35

Schoelje wrote:By default network-manager-openvpnc and network-manager-vpnc are installed.

I can't find the Debian package "network-manager-openvpnc". I guess this should be "network-manager-openvpn"?

p.s I am not sure this will help the OP as my (limited!) understanding is that pptp is a different protocol to openvpn.

User avatar
ilu
Posts: 1480
Joined: 09 Oct 2013 12:45

Re: Troubleshooting VPN?

Postby ilu » 29 Jul 2016 11:36

From the sshfs thread:
kurotsugi wrote:a little bit out of topic but somehow still related, do we have the complete set for vpn connection? what is the result of "dpkg -l |grep network-manager" in vanilla solydxk?

ilu wrote:This is from older SolydXK VMs (Jan 16?)

Code: Select all

dpkg -l |grep network-manager
ii  network-manager                       0.9.10.0-7
ii  network-manager-openvpn               0.9.10.0-1
ii  network-manager-pptp                  0.9.10.0-1
ii  network-manager-vpnc                  0.9.10.0-1

SolydX has also network-manager-gnome 0.9.10.0-2, and network-manager-pptp-gnome 0.9.10.0-1.


kurotsugi wrote:doesn't looks good for me. things were indeed missing. did pinentry and gnome keyring missing too?

Code: Select all

ii  gnome-keyring                         3.14.0-1+b1
ii  libgnome-keyring-common               3.12.0-1
ii  libgnome-keyring0:amd64               3.12.0-1+b1
ii  libpam-gnome-keyring                  3.14.0-1+b1
ii  pinentry-gtk2                         0.8.3-2

kurotsugi wrote:AFAIK we need network-manager-xxx-gnome package (xxx stands for network components) to make things work on solydx (I don't know about KDE because they're using plasma-nm). the complete set for vpn's are:
- openvpn (the common vpn)
- vpnc (cisco's vpn)
- pptp
- ssh (please don't confuse it with sshfs. it's different stuff. network-manager-ssh is needed if you want to connect to ssh server by using nm-applet :3)

I don't know about iodine and other network manager component stuffs but it won't hurt to include them. I'd suggest to include all network manager set (every package started with network-manager) to ensure everything works. they were relatively small so it won't increase the iso size much.

tony
Posts: 42
Joined: 03 Mar 2015 09:50

Re: Troubleshooting VPN?

Postby tony » 01 Aug 2016 07:09

Hi,

sorry for the late update; I am travelling and have very limited Internet access.

Re. VPN: I found the cause of the problem: I needed to install the following packages:

network-manager-vpnc
network-manager-vpnc-gnome

since the company vpn server is a Cisco device.

After that I managed to connect via vpn, however it't not usable. The connection keeps dropping after a few minutes. However it's more likely a problem with pppd and is not Solydxk-specific. I read that the MTU set by some routers is too small which causes the packets to be fragmented and it makes vpnc unhappy. Anyway, I keep debugging.

Thanks for your help,
Tony

kurotsugi
Posts: 1865
Joined: 09 Jan 2014 00:17

Re: Troubleshooting VPN?

Postby kurotsugi » 01 Aug 2016 09:40

cisco could be used with vpnc and openconnect. if vpnc didn't work perhaps that one will.

tony
Posts: 42
Joined: 03 Mar 2015 09:50

Re: Troubleshooting VPN?

Postby tony » 01 Aug 2016 16:00

kurotsugi wrote:cisco could be used with vpnc and openconnect. if vpnc didn't work perhaps that one will.


thanks for the suggestion, I will give it a try.

kurotsugi
Posts: 1865
Joined: 09 Jan 2014 00:17

Re: Troubleshooting VPN?

Postby kurotsugi » 01 Aug 2016 18:10

ah, yes. there's also a trick using sysctl.conf to change the packet size. though, you'll need to find how to do it by yourself since I can't guide you through this phone browser.

User avatar
ilu
Posts: 1480
Joined: 09 Oct 2013 12:45

Re: Troubleshooting VPN?

Postby ilu » 06 Sep 2016 14:24

Since I have to debug a vpn-connection atm I would suggest that all network-manager vpn packages get included in SolydX standard install:

network-manager-openvpn
network-manager-openvpn-gnome
network-manager-pptp
network-manager-pptp-gnome
network-manager-vpnc
network-manager-vpnc-gnome

Iodine seems to be something special, so those packages could probably be left out. And I can't find the network-manager-ssh package kurotsugi mentioned.

User avatar
grizzler
Posts: 1844
Joined: 04 Mar 2013 15:45
Location: The Hague, NL

Re: Troubleshooting VPN?

Postby grizzler » 06 Sep 2016 15:37

Frank

SolydX EE 64 - tracking Debian Testing

User avatar
Schoelje
Site Admin
Posts: 8340
Joined: 26 Jan 2013 19:36
Location: Netherlands
Contact:

Re: Troubleshooting VPN?

Postby Schoelje » 06 Sep 2016 16:09

I just finished uploading the nightly SolydX with the added gnome packages: http://downloads.solydxk.com/nightly/


SolydXK needs you!
Development | Testing | Translations

User avatar
Tuna130
Posts: 46
Joined: 10 Aug 2013 05:40
Location: Spain

Re: Troubleshooting VPN?

Postby Tuna130 » 09 Jun 2017 10:30

Just a late tip to add to this topic; how do you know if your VPN connection works?
On a machine with GUI one could use https://www.iplocation.net/
But how to check your VPN on a headless machine? I found below command handy:

Code: Select all

whois $(curl icanhazip.com) | grep country


Return to “Networking”

Who is online

Users browsing this forum: No registered users and 1 guest