From owner-freebsd-net Sun Jan 26 23:31:49 2003 Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2F31637B401 for ; Sun, 26 Jan 2003 23:31:47 -0800 (PST) Received: from mel-rto6.wanadoo.fr (smtp-out-6.wanadoo.fr [193.252.19.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id 23D7843ED8 for ; Sun, 26 Jan 2003 23:31:46 -0800 (PST) (envelope-from vjardin@wanadoo.fr) Received: from mel-rta8.wanadoo.fr (193.252.19.79) by mel-rto6.wanadoo.fr (6.7.015) id 3E0C343F01280070; Mon, 27 Jan 2003 08:31:39 +0100 Received: from there (217.128.206.151) by mel-rta8.wanadoo.fr (6.7.015) id 3E26DA70005E1EC3; Mon, 27 Jan 2003 08:31:39 +0100 Message-ID: <3E26DA70005E1EC3@mel-rta8.wanadoo.fr> (added by postmaster@wanadoo.fr) Content-Type: text/plain; charset="iso-8859-1" From: Vincent Jardin To: Anthony Volodkin , net@freebsd.org Subject: Re: MPD and Cisco PIX Date: Mon, 27 Jan 2003 08:51:44 +0100 X-Mailer: KMail [version 1.3.2] References: <3E34B2C7.2020200@brainlink.com> In-Reply-To: <3E34B2C7.2020200@brainlink.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > pptp0: connecting to CISCO_PUBLIC_IP:1723 > [vpn] device is now in state OPENING > pptp0: connected to CISCO_PUBLIC_IP:1723 > pptp0: attached to connection with CISCO_PUBLIC_IP:1723 > [vpn] exec: /sbin/ifconfig ng1 10.10.6.101 CISCO_PUBLIC_IP netmask > [vpn] error writing len 12 frame to bypass: Resource deadlock avoided > [vpn] LCP: no reply to 1 echo request(s) > [vpn] error writing len 12 frame to bypass: Resource deadlock avoided Here is the problem: a "deadlock avoided" error means that an internal loop has been created within your stack. Usually it is related to a bad routing configuration. In your case, the problem looks to be the IPCP of the Cisco PIX. If I understand your log messages, your have the following configuration: FreeBSD Remote ng1 10.10.6.101 <-> REMOTE_PUBLIC_IP ---------------------------------------------------- PPTP/GRE FREEBSD_PUBLIC_IP <-> REMOTE_PUBLIC_IP Then once ng1 is up, the best path to join REMOTE_PUBLIC_IP is via ng1. Moreover, the bast path to join ng1 is via ng1 too !!! A loop has been created. You should change the pool address of the Remote end in order to avoid getting the same IPv4 address. For example, your Remote Access Router could provide you the address 192.168.x.x FreeBSD Remote ng1 10.10.6.101 <-> 192.168.254.254 ---------------------------------------------------- PPTP/GRE FREEBSD_PUBLIC_IP <-> REMOTE_PUBLIC_IP Regards, Vincent > [vpn] LCP: no reply to 2 echo request(s) > [vpn] LCP: no reply to 3 echo request(s) > [vpn] LCP: no reply to 4 echo request(s) > [vpn] LCP: no reply to 5 echo request(s) > [vpn] LCP: no reply to 6 echo request(s) > [vpn] LCP: no reply to 7 echo request(s) > [vpn] LCP: peer not responding to echo requests > [vpn] LCP: LayerFinish > [vpn] LCP: LayerStart > [vpn] LCP: state change Opened --> Starting > [vpn] LCP: phase shift NETWORK --> DEAD > [vpn] up: 0 links, total bandwidth 9600 bps > [vpn] IPCP: Down event > [vpn] IPCP: state change Opened --> Starting > [vpn] IPCP: LayerDown > [vpn] IFACE: Down event > [vpn] exec: /sbin/ifconfig ng1 down delete -link0 > [vpn] LCP: LayerDown > [vpn] device: CLOSE event in state UP > pptp0-0: clearing call > [vpn] device is now in state CLOSING > [vpn] device: OPEN event in state CLOSING > [vpn] device is now in state CLOSING > [vpn] device: DOWN event in state CLOSING > [vpn] device is now in state DOWN > [vpn] link: DOWN event > [vpn] LCP: Down event > [vpn] device: OPEN event in state DOWN > [vpn] pausing 9 seconds before open > [vpn] device is now in state DOWN > [vpn] device: OPEN event in state DOWN > [vpn] device is now in state DOWN > pptp0-0: peer call disconnected res=lost carrier err=none > pptp0-0: killing channel > pptp0: closing connection with CISCO_PUBLIC_IP:1723 > pptp0: got StopCtrlConnRequest: reason=zero? > pptp0: killing connection with CISCO_PUBLIC_IP:1723 > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message