Date: Mon, 27 Jan 2003 08:51:44 +0100 From: Vincent Jardin <vjardin@wanadoo.fr> To: Anthony Volodkin <anthonyv@brainlink.com>, net@freebsd.org Subject: Re: MPD and Cisco PIX Message-ID: <3E26DA70005E1EC3@mel-rta8.wanadoo.fr> (added by postmaster@wanadoo.fr) In-Reply-To: <3E34B2C7.2020200@brainlink.com> References: <3E34B2C7.2020200@brainlink.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> pptp0: connecting to CISCO_PUBLIC_IP:1723
> [vpn] device is now in state OPENING
> pptp0: connected to CISCO_PUBLIC_IP:1723
> pptp0: attached to connection with CISCO_PUBLIC_IP:1723
> [vpn] exec: /sbin/ifconfig ng1 10.10.6.101 CISCO_PUBLIC_IP netmask
> [vpn] error writing len 12 frame to bypass: Resource deadlock avoided
> [vpn] LCP: no reply to 1 echo request(s)
> [vpn] error writing len 12 frame to bypass: Resource deadlock avoided
Here is the problem: a "deadlock avoided" error means that an internal loop
has been created within your stack. Usually it is related to a bad routing
configuration. In your case, the problem looks to be the IPCP of the Cisco
PIX.
If I understand your log messages, your have the following configuration:
FreeBSD Remote
ng1 10.10.6.101 <-> REMOTE_PUBLIC_IP
----------------------------------------------------
PPTP/GRE
FREEBSD_PUBLIC_IP <-> REMOTE_PUBLIC_IP
Then once ng1 is up, the best path to join REMOTE_PUBLIC_IP is via ng1.
Moreover, the bast path to join ng1 is via ng1 too !!! A loop has been
created.
You should change the pool address of the Remote end in order to avoid
getting the same IPv4 address. For example, your Remote Access Router could
provide you the address 192.168.x.x
FreeBSD Remote
ng1 10.10.6.101 <-> 192.168.254.254
----------------------------------------------------
PPTP/GRE
FREEBSD_PUBLIC_IP <-> REMOTE_PUBLIC_IP
Regards,
Vincent
> [vpn] LCP: no reply to 2 echo request(s)
> [vpn] LCP: no reply to 3 echo request(s)
> [vpn] LCP: no reply to 4 echo request(s)
> [vpn] LCP: no reply to 5 echo request(s)
> [vpn] LCP: no reply to 6 echo request(s)
> [vpn] LCP: no reply to 7 echo request(s)
> [vpn] LCP: peer not responding to echo requests
> [vpn] LCP: LayerFinish
> [vpn] LCP: LayerStart
> [vpn] LCP: state change Opened --> Starting
> [vpn] LCP: phase shift NETWORK --> DEAD
> [vpn] up: 0 links, total bandwidth 9600 bps
> [vpn] IPCP: Down event
> [vpn] IPCP: state change Opened --> Starting
> [vpn] IPCP: LayerDown
> [vpn] IFACE: Down event
> [vpn] exec: /sbin/ifconfig ng1 down delete -link0
> [vpn] LCP: LayerDown
> [vpn] device: CLOSE event in state UP
> pptp0-0: clearing call
> [vpn] device is now in state CLOSING
> [vpn] device: OPEN event in state CLOSING
> [vpn] device is now in state CLOSING
> [vpn] device: DOWN event in state CLOSING
> [vpn] device is now in state DOWN
> [vpn] link: DOWN event
> [vpn] LCP: Down event
> [vpn] device: OPEN event in state DOWN
> [vpn] pausing 9 seconds before open
> [vpn] device is now in state DOWN
> [vpn] device: OPEN event in state DOWN
> [vpn] device is now in state DOWN
> pptp0-0: peer call disconnected res=lost carrier err=none
> pptp0-0: killing channel
> pptp0: closing connection with CISCO_PUBLIC_IP:1723
> pptp0: got StopCtrlConnRequest: reason=zero?
> pptp0: killing connection with CISCO_PUBLIC_IP:1723
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E26DA70005E1EC3>