Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Mar 2011 15:38:53 +0100
From:      =?ISO-8859-1?Q?Ermal_Lu=E7i?= <eri@freebsd.org>
To:        Da Rock <freebsd-net@herveybayaustralia.com.au>
Cc:        freebsd-net@freebsd.org
Subject:   Re: mpd- no ng_l2tp coming up
Message-ID:  <AANLkTimvqhhx45SEkxqPoehAars%2BkXCbWTaBDRYCCEjf@mail.gmail.com>
In-Reply-To: <4D836B6B.8040106@herveybayaustralia.com.au>
References:  <4D8164CA.80501@herveybayaustralia.com.au> <4D81871B.1030506@sentex.net> <4D81AE1E.5070103@herveybayaustralia.com.au> <4D833787.3020706@herveybayaustralia.com.au> <4D836637.6080601@sentex.net> <4D836B6B.8040106@herveybayaustralia.com.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Mar 18, 2011 at 3:25 PM, Da Rock
<freebsd-net@herveybayaustralia.com.au> wrote:
> On 03/19/11 00:03, Mike Tancsa wrote:
>>
>> On 3/18/2011 6:44 AM, Da Rock wrote:
>>
>>>
>>> First, the connection from Android (apparently uses mtpd- I just found
>>> out) fails at SCCRP- apparently it doesn't respond to the challenge
>>> response (logs posted previously). Using xl2tpd (apparently- linux only=
)
>>> you have a l2tp-secrets file with the local hostname, remote hostname,
>>> and the secret in that order.
>>>
>>
>>
>>>
>>> How do I do this in mpd? I tried the
>>> hostname directive, but its still no good. Or is this never going to
>>> work with mpd? Just use it without secrets?
>>>
>>
>> There are username/passwd credentials and LAC-LNS credentials which are
>> different and it sounds like you are confusing the two. =A0You just need
>> to put the userid and passwd in the mpd.secrets file.
>>
>
> I don't think I'm confusing the 2. I understand the ppp user login, and I
> understand the peer credentials- the error I see in the log is in relatio=
n
> to the peer credentials. If I run mpd on the FBSD system as a client with=
 a
> secret then it connects. Android fails here- it will connect if I remove =
the
> secret from the server config (btw I'm still using my original server
> config- it was roughly the same as yours anyway, so I seem to have been o=
n
> the right track). So whats different?
>
> Android logs in as peer "anonymous". I haven't found anything specific in
> the manual (or maybe I missed it) that tells me how to do this. On linux
> apparently there's a l2tp-secrets file (xl2tpd uses it at least) which ha=
s
> "<local server> <remote peer> <secret> <(optional) IP>" per line. Seeing =
as
> android is linux, and uses mtpd (a linux l2tp client) then shouldn't I fi=
nd
> a way for this? Or am I being paranoid?
>
> This is to secure the control connection, but I will be using this with
> IPSEC. How much does/would this matter?
>>
>>
>>>
>>> Second, why does mpd die (as in terminated- no process running) when
>>> this fails?
>>>
>>
>> Are you running it in the foreground ? =A0Just run it with mpd -b
>>
>
> No, rc service. But I have to actually start it again after this failure-
> beats me why it would throw it in with a very basic error like that. The
> logs I posted earlier showed it up- the CS-DYING is thrown (assertion
> failure), and mpd4 or 5 dies. For that matter I think l2tpd dies for the
> same reason- whatever that is...
>
> I'll try with -b and get back to you.
>>
>> =A0 =A0 =A0 =A0---Mike
>>
>
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>

Well check this out http://doc.pfsense.org/index.php/Android_VPN_Connectivi=
ty.
Behind teh scenes pfSense uses mpd so this might be useful.

--=20
Ermal



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTimvqhhx45SEkxqPoehAars%2BkXCbWTaBDRYCCEjf>