URL: https://www.opennet.me/cgi-bin/openforum/vsluhboard.cgi
Форум: vsluhforumID1
Нить номер: 64729
[ Назад ]

Исходное сообщение
"Проблема с VPN линком до  провайдера."

Отправлено Артур , 12-Мрт-06 01:10 
система freebsd 5.4

Есть 2 канала  в инет:1) через VPN соеденение для зарубежки(VPN сервак не  в нашей сетке)  2)канал  для UA трафика  

Проблема в том  что  первый  канал  время от  времени  падает иогда каждый час а иногда раз  в  сутки.

Впн клиент pptp - не устраивает, то что не  переподключается при обрыве связи.

При использовании mpd, который умеет  реконнектится при обрыве связи, обнаружил такой глюк: при запущенном mpd система вешается намертво время от  времени. Эксперименты  показали что такая ситуация получается, если  мы удаляем из таблицы роутинга путь до впн сервака.
Я  прописал статический  путь до  впн сервака и  всё равно  время от времени сервак  просто  намертво вешается. Где грабли и  почему зависает сервак при запущенном мпд как клиент до сервака.


/usr/local/etc/mpd/mpd.conf

default:
        load proxy

proxy:
        new -i ng0 proxy proxy
        set bundle authname "****"
        set bundle password "*****"
        #set bundle yes compression
        set iface idle 0
        set iface enable tcpmssfix
        set iface up-script /usr/local/etc/mpd/default_add
        set iface down-script /usr/local/etc/mpd/default_del
        set ipcp ranges 0.0.0.0/0 0.0.0.0/0
        set link mtu 1450
        set link mru 1450
        set link keep-alive 5 30
        set link chap-msv2
        set ccp yes mpp-e128
        open

/usr/local/etc/mpd/mpd.links


proxy:
        set link type pptp
        set pptp peer ***.***.***.***
        set pptp enable originate
        set pptp disable incoming
        set pptp disable windowing

/usr/local/etc/mpd/default_add

default_route_old=`route -n get default 2>&1 | grep gateway | awk '{print $2}'`
if [ $default_route_old ]; then
  echo $default_route_old > /var/tmp/default_route_old
  route -nq change default $4
else
  rm -f /var/tmp/default_route_old
  route -nq add default $4
fi


/usr/local/etc/mpd/default_del


if [ -r /var/tmp/default_route_old ]; then
  default_route_old=`cat /var/tmp/default_route_old`
  rm -f /var/tmp/default_route_old
  #route -nq change default $default_route_old
  route -nq delete default
else
  route -nq delete default
fi


Содержание

Сообщения в этом обсуждении
"Проблема с VPN линком до  провайдера."
Отправлено A Clockwork Orange , 12-Мрт-06 12:28 
"вешается" именно ос?

"Проблема с VPN линком до  провайдера."
Отправлено universite , 13-Мрт-06 02:44 
>Впн клиент pptp - не устраивает, то что не  переподключается при
>обрыве связи.

Бред. Все прекрасно реконнектится.

>>cat rc.local
/etc/ppp/ppplogin.vpn.1 > /dev/null 2>&1 &              # Start connect script to Matrix                      

>>/etc/ppp/ppplogin.vpn.1

#!/bin/sh                                                                                                    
                                                                                                                                                                                                                                                                                                        
while : ; do          

        if ! /sbin/route -n add default 10.0.7.1                                                              
        then /sbin/route -n change default 10.0.7.1                                                          
        fi                                                                                                    
       /usr/sbin/ppp -foreground -nat pptp_matrix                                                            

       if ! /sbin/route -n add default 10.0.7.1                                                              
        then /sbin/route -n change default 10.0.7.1                                                          
        fi                                                                                                    
                                                                                                              
        sleep 10                                                                                              
        done                                                                                                  

#### 10.0.7.1  - гейт провайдера. и нужно всегда иметь путь к нему

>>/etc/ppp/ppp.conf

pptp_matrix:                                                                                                  
  set log Phase Warning Alert Error command                                                                                                                                                
  set device "!/usr/local/sbin/pptp 10.128.4.1 --nolaunchpppd"                                                                                                                                                    
  disable ipv6cp                                                                                              
  disable acfcomp                                                                                            
  disable protocomp                                                                                                                                                                      
  set mtu max 1492                                                                                            
  disable lqr                                                                                                
  disable pred1 deflate deflate24 protocomp acfcomp shortseq vj                                              
  deny pred1 deflate deflate24 protocomp acfcomp shortseq vj                                                  
  disable mppe                                                                                                
  enable dns                                                                                                                                                                                
  set timeout 0                                                                                              
  set openmode passive                                                                                        
  delete all                                                                                                  
  add default HISADDR                                                                                        
  set timeout 0                                                                                              
  alias enable yes                                                                                            
  set redial 30                                                                                              
  set timeout 0                                                                                              
  set cd 0                                                                                                    
  nat enable yes                                                                                              
  set authname otrada                                                                                        
  set authkey SecretPassword                                                                                    

### 10.128.4.1 - ВПН-сервер провайдера.