Просмотр сообщений
|
Страниц: [1] 2
|
7
|
Главная категория / Общий раздел / Re: Ошибка 734 при подключении через pppoe
|
: 23 Августа 2010, 18:22:25
|
Тема не закрыта!
Уважаемые гуру, помогите разобраться с проблемой. IP присвоенный в но дени, руками прописывается на сетевухе пользователя.
При авторизации по рррое радиус присваевает соединению тот-же IP что прописан на сетевухе, происходит ошибка и сервер закрывает соединенте а в винде выдается ошибка 734
если при подключении указать логин и пароль другого пользователя, то соединение устанавливается без ошибок и ему радиус выдаёт IP пользователя чьи логин и пароль былы использованы.
|
|
|
9
|
Главная категория / Общий раздел / Re: Ошибка 734 при подключении через pppoe
|
: 22 Августа 2010, 19:50:31
|
ipfw add 10 allow gre from any to any #!/bin/sh - f='/sbin/ipfw'
ifOut='vr0'
${f} -f flush
${f} add 10 allow gre from any to any ${f} add 50 allow tcp from any to me 22 ${f} add 51 allow tcp from me 22 to any manuhino# ipfw show 00010 0 0 allow gre from any to any 00050 231 18320 allow tcp from any to me dst-port 22 00051 176 24096 allow tcp from me 22 to any
не помогло та же ошибка
|
|
|
10
|
Главная категория / Общий раздел / Re: Ошибка 734 при подключении через pppoe
|
: 22 Августа 2010, 19:27:07
|
покаж ipfw show ifconfig
ifconfig manuhino# ifconfig xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=9<RXCSUM,VLAN_MTU> ether 00:04:76:25:b9:93 inet 10.0.0.250 netmask 0xffffff00 broadcast 10.0.0.255 media: Ethernet autoselect (100baseTX <full-duplex>) status: active vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500 options=2808<VLAN_MTU,WOL_UCAST,WOL_MAGIC> ether 00:11:09:80:2a:8b inet 91.199.196.188 netmask 0xffffffc0 broadcast 91.199.196.191 media: Ethernet autoselect (100baseTX <full-duplex>) status: active plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 mtu 1500 lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4 inet6 ::1 prefixlen 128 inet 127.0.0.1 netmask 0xff000000
manuhino# ipfw show 00050 24192 1069508 allow tcp from any to me dst-port 22 00051 42223 6735684 allow tcp from me 22 to any 00060 320 14716 allow tcp from any to any dst-port 4899 00061 276 12416 allow tcp from any 4899 to any 00070 0 0 allow tcp from any to any dst-port 28960,28961 00071 0 0 allow tcp from any 28960,28961 to any 00110 156038 23340826 allow ip from any to any via lo0 00120 38360 7968449 skipto 1000 ip from me to any 00130 0 0 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17 00160 48885 51942322 skipto 2000 ip from any to me 00200 200101 23572159 skipto 500 ip from any to any via vr0 00300 209169 25169779 skipto 4500 ip from any to any in 00400 49880 3129642 skipto 450 ip from any to any recv vr0 00420 0 0 divert 1 ip from any to any 00450 49880 3129642 divert 2 ip from any to any 00490 49880 3129642 allow ip from any to any 00500 79899 6021898 skipto 32500 ip from any to any in 00510 120202 17550261 divert 1 ip from any to any 00540 120202 17550261 allow ip from any to any 01000 1378 194939 allow udp from any 53,7723 to any 01010 67041 57898514 allow tcp from any to any setup keep-state 01020 6701 986307 allow udp from any to any keep-state 01100 3781 344491 allow ip from any to any 02000 0 0 check-state 02010 3396 205546 allow icmp from any to any 02020 366 44842 allow tcp from any to any dst-port 80,443 02050 2783 136217 deny ip from any to any via vr0 02060 1408 83849 allow udp from any to any dst-port 53,7723 02100 391 16066 deny ip from any to any 05000 87175 7480173 deny ip from not table(0) to any 05001 0 0 skipto 5010 ip from table(127) to table(126) 05002 121987 17688904 skipto 5030 ip from any to not table(2) 05003 0 0 deny ip from any to not table(1) 05004 0 0 pipe tablearg ip from table(21) to any 05005 0 0 deny ip from any to any 05010 0 0 pipe tablearg ip from table(127) to any 05030 0 0 deny tcp from table(15) to any dst-port 25 05400 121987 17688904 pipe tablearg ip from table(11) to any 32000 0 0 deny ip from any to any 32490 4 468 deny ip from any to any 33000 0 0 pipe tablearg ip from table(126) to table(127) 33001 79882 6020685 skipto 33010 ip from not table(2) to any 33002 0 0 pipe tablearg ip from any to table(20) 33003 0 0 deny ip from any to any 33400 49877 3129516 pipe tablearg ip from any to table(10) 65535 30020 2892298 deny ip from any to any
если надо rc.firewall #!/bin/sh - f='/sbin/ipfw'
ifOut='vr0'
${f} -f flush
${f} add 50 allow tcp from any to me 22 ${f} add 51 allow tcp from me 22 to any
${f} add 60 allow tcp from any to any 4899 ${f} add 61 allow tcp from any 4899 to any ${f} add 70 allow tcp from any to any 28960,28961 ${f} add 71 allow tcp from any 28960,28961 to any
${f} add 110 allow ip from any to any via lo0 ${f} add 120 skipto 1000 ip from me to any ${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17 ${f} add 160 skipto 2000 ip from any to me
${f} add 200 skipto 500 ip from any to any via ${ifOut}
${f} add 300 skipto 4500 ip from any to any in
${f} add 400 skipto 450 ip from any to any recv ${ifOut} ${f} add 420 divert 1 ip from any to any ${f} add 450 divert 2 ip from any to any ${f} add 490 allow ip from any to any
${f} add 500 skipto 32500 ip from any to any in ${f} add 510 divert 1 ip from any to any ${f} add 540 allow ip from any to any
${f} add 1000 allow udp from any 53,7723 to any ${f} add 1010 allow tcp from any to any setup keep-state ${f} add 1020 allow udp from any to any keep-state ${f} add 1100 allow ip from any to any
${f} add 2000 check-state ${f} add 2010 allow icmp from any to any ${f} add 2020 allow tcp from any to any 80,443 ${f} add 2050 deny ip from any to any via ${ifOut} ${f} add 2060 allow udp from any to any 53,7723
${f} add 2100 deny ip from any to any
${f} add 32490 deny ip from any to any
|
|
|
11
|
Главная категория / Общий раздел / Re: Ошибка 734 при подключении через pppoe
|
: 22 Августа 2010, 18:47:09
|
из мануала pppoe_server:
create bundle template B set ipcp ranges 1.2.3.4/32 127.0.0.2/32 set ipcp dns 10.1.1.1
1.2.3.4 - один из ip вашего сервера. Рекомендуем использовать реально существующий, например на внешнем интерфейсе. Этот ip будет использован в туннеле: ip сервера <-> клиентский ip.
10.1.1.1 - dns-сервер. Через пробел можно указать несколько.
соответственно: set ipcp ranges 10.0.0.250/32 127.0.0.2/32 set ipcp dns 10.0.0.250 194.1.161.149 во всех вопросах, по схожим темам на форуме, 127.0.0.2/32 присутствует адреса ДНС определяются Aug 22 19:51:39 manuhino mpd: [B-1] PRIDNS 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] SECDNS 194.1.161.149
|
|
|
13
|
Главная категория / Общий раздел / Re: Ошибка 743 при подключении через pppoe
|
: 22 Августа 2010, 17:49:54
|
АААААААААААААААААААААААААААААААААААЙЙЙЙЙЙЙЙЙЙЙЙЙЙЙЙ АЙ АЙ !!!!!!!!!!!! Глубоко перед всеми извиняюсь!!! Когда создавал тему (ночью) то ошибся.ошибка не 743 а 734она как была 734 так и до сих пор осталась. вот лог авторизации: Aug 22 19:51:39 manuhino mpd: Incoming PPPoE connection request via xl0: for service "" from 00:c0:f0:17:b2:0f Aug 22 19:51:39 manuhino mpd: [xl0-2] Accepting PPPoE connection Aug 22 19:51:39 manuhino mpd: [xl0-2] Link: OPEN event Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: Open event Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: state change Initial --> Starting Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: LayerStart Aug 22 19:51:39 manuhino mpd: [xl0-2] PPPoE: connection successful Aug 22 19:51:39 manuhino mpd: [xl0-2] Link: UP event Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: Up event Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: state change Starting --> Req-Sent Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: SendConfigReq #1 Aug 22 19:51:39 manuhino mpd: [xl0-2] PROTOCOMP Aug 22 19:51:39 manuhino mpd: [xl0-2] MRU 1492 Aug 22 19:51:39 manuhino mpd: [xl0-2] MAGICNUM 5edfdf94 Aug 22 19:51:39 manuhino mpd: [xl0-2] AUTHPROTO PAP Aug 22 19:51:39 manuhino mpd: [xl0-2] MP MRRU 2048 Aug 22 19:51:39 manuhino mpd: [xl0-2] MP SHORTSEQ Aug 22 19:51:39 manuhino mpd: [xl0-2] ENDPOINTDISC [802.1] 00 04 76 25 b9 93 Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: rec'd Configure Request #0 (Req-Sent) Aug 22 19:51:39 manuhino mpd: [xl0-2] MRU 1480 Aug 22 19:51:39 manuhino mpd: [xl0-2] MAGICNUM 7213549d Aug 22 19:51:39 manuhino mpd: [xl0-2] CALLBACK 6 Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: SendConfigRej #0 Aug 22 19:51:39 manuhino mpd: [xl0-2] CALLBACK 6 Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: rec'd Configure Reject #1 (Req-Sent) Aug 22 19:51:39 manuhino mpd: [xl0-2] PROTOCOMP Aug 22 19:51:39 manuhino mpd: [xl0-2] MP MRRU 2048 Aug 22 19:51:39 manuhino mpd: [xl0-2] MP SHORTSEQ Aug 22 19:51:39 manuhino mpd: [xl0-2] ENDPOINTDISC [802.1] 00 04 76 25 b9 93 Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: SendConfigReq #2 Aug 22 19:51:39 manuhino mpd: [xl0-2] MRU 1492 Aug 22 19:51:39 manuhino mpd: [xl0-2] MAGICNUM 5edfdf94 Aug 22 19:51:39 manuhino mpd: [xl0-2] AUTHPROTO PAP Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: rec'd Configure Request #1 (Req-Sent) Aug 22 19:51:39 manuhino mpd: [xl0-2] MRU 1480 Aug 22 19:51:39 manuhino mpd: [xl0-2] MAGICNUM 7213549d Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: SendConfigAck #1 Aug 22 19:51:39 manuhino mpd: [xl0-2] MRU 1480 Aug 22 19:51:39 manuhino mpd: [xl0-2] MAGICNUM 7213549d Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: state change Req-Sent --> Ack-Sent Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: rec'd Configure Ack #2 (Ack-Sent) Aug 22 19:51:39 manuhino mpd: [xl0-2] MRU 1492 Aug 22 19:51:39 manuhino mpd: [xl0-2] MAGICNUM 5edfdf94 Aug 22 19:51:39 manuhino mpd: [xl0-2] AUTHPROTO PAP Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: state change Ack-Sent --> Opened Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: auth: peer wants nothing, I want PAP Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: LayerUp Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: rec'd Ident #2 (Opened) Aug 22 19:51:39 manuhino mpd: [xl0-2] MESG: MSRASV5.10 Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: rec'd Ident #3 (Opened) Aug 22 19:51:39 manuhino mpd: [xl0-2] MESG: MSRAS-0-SPIRT Aug 22 19:51:39 manuhino mpd: [xl0-2] PAP: rec'd REQUEST #2 len: 16 Aug 22 19:51:39 manuhino mpd: [xl0-2] AUTH: Trying RADIUS Aug 22 19:51:39 manuhino mpd: [xl0-2] RADIUS: Authenticating user 'spirt' Aug 22 19:51:39 manuhino mpd: [xl0-2] RADIUS: Rec'd RAD_ACCESS_ACCEPT for user 'spirt' Aug 22 19:51:39 manuhino mpd: [xl0-2] AUTH: RADIUS returned: authenticated Aug 22 19:51:39 manuhino mpd: [xl0-2] PAP: Auth return status: authenticated Aug 22 19:51:39 manuhino mpd: [xl0-2] PAP: Response is valid Aug 22 19:51:39 manuhino mpd: [xl0-2] PAP: Reply message: Welcome Aug 22 19:51:39 manuhino mpd: [xl0-2] PAP: sending ACK #2 len: 12 Aug 22 19:51:39 manuhino mpd: [xl0-2] LCP: authorization successful Aug 22 19:51:39 manuhino mpd: [xl0-2] Link: Matched action 'bundle "B" ""' Aug 22 19:51:39 manuhino mpd: [xl0-2] Creating new bundle using template "B". Aug 22 19:51:39 manuhino mpd: [B-1] Bundle: Interface ng0 created Aug 22 19:51:39 manuhino mpd: [xl0-2] Link: Join bundle "B-1" Aug 22 19:51:39 manuhino mpd: [B-1] Bundle: Status update: up 1 link, total bandwidth 64000 bps Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: Open event Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: state change Initial --> Starting Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: LayerStart Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: Up event Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: state change Starting --> Req-Sent Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: SendConfigReq #1 Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Aug 22 19:51:39 manuhino mpd: [xl0-2] RADIUS: Accounting user 'spirt' (Type: 1) Aug 22 19:51:39 manuhino mpd: [xl0-2] rec'd unexpected protocol CCP, rejecting Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: rec'd Configure Request #5 (Req-Sent) Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] NAKing with 10.0.0.10 Aug 22 19:51:39 manuhino mpd: [B-1] PRIDNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] NAKing with 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] PRINBNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] SECDNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] NAKing with 194.1.161.149 Aug 22 19:51:39 manuhino mpd: [B-1] SECNBNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: SendConfigRej #5 Aug 22 19:51:39 manuhino mpd: [B-1] PRINBNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] SECNBNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: rec'd Configure Reject #1 (Req-Sent) Aug 22 19:51:39 manuhino mpd: [B-1] COMPPROTO VJCOMP, 16 comp. channels, no comp-cid Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: SendConfigReq #2 Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [xl0-2] RADIUS: Rec'd RAD_ACCOUNTING_RESPONSE for user 'spirt' Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: rec'd Configure Request #6 (Req-Sent) Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] NAKing with 10.0.0.10 Aug 22 19:51:39 manuhino mpd: [B-1] PRIDNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] NAKing with 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] SECDNS 0.0.0.0 Aug 22 19:51:39 manuhino mpd: [B-1] NAKing with 194.1.161.149 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: SendConfigNak #6 Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 10.0.0.10 Aug 22 19:51:39 manuhino mpd: [B-1] PRIDNS 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] SECDNS 194.1.161.149 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: rec'd Configure Ack #2 (Req-Sent) Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: state change Req-Sent --> Ack-Rcvd Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: rec'd Configure Request #7 (Ack-Rcvd) Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 10.0.0.10 Aug 22 19:51:39 manuhino mpd: [B-1] 10.0.0.10 is OK Aug 22 19:51:39 manuhino mpd: [B-1] PRIDNS 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] SECDNS 194.1.161.149 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: SendConfigAck #7 Aug 22 19:51:39 manuhino mpd: [B-1] IPADDR 10.0.0.10 Aug 22 19:51:39 manuhino mpd: [B-1] PRIDNS 10.0.0.250 Aug 22 19:51:39 manuhino mpd: [B-1] SECDNS 194.1.161.149 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: state change Ack-Rcvd --> Opened Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: LayerUp Aug 22 19:51:39 manuhino mpd: [B-1] 10.0.0.250 -> 10.0.0.10 Aug 22 19:51:39 manuhino mpd: [B-1] IFACE: Up event Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: rec'd Terminate Request #8 (Opened) Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: state change Opened --> Stopping Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: SendTerminateAck #3 Aug 22 19:51:39 manuhino mpd: [B-1] IPCP: LayerDown Aug 22 19:51:39 manuhino mpd: [B-1] IFACE: Down event Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: rec'd Terminate Request #9 (Stopping) Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: SendTerminateAck #4 Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: state change Stopping --> Stopped Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: LayerFinish Aug 22 19:51:41 manuhino mpd: [B-1] Bundle: No NCPs left. Closing links... Aug 22 19:51:41 manuhino mpd: [B-1] Bundle: closing link "xl0-2"... Aug 22 19:51:41 manuhino mpd: [xl0-2] Link: CLOSE event Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: Close event Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: state change Opened --> Closing Aug 22 19:51:41 manuhino mpd: [xl0-2] Link: Leave bundle "B-1" Aug 22 19:51:41 manuhino mpd: [B-1] Bundle: Status update: up 0 links, total bandwidth 9600 bps Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: Close event Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: state change Stopped --> Closed Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: Down event Aug 22 19:51:41 manuhino mpd: [B-1] IPCP: state change Closed --> Initial Aug 22 19:51:41 manuhino mpd: [B-1] Bundle: Shutdown Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: SendTerminateReq #3 Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: LayerDown Aug 22 19:51:41 manuhino mpd: [xl0-2] RADIUS: Accounting user 'spirt' (Type: 2) Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: rec'd Terminate Ack #3 (Closing) Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: state change Closing --> Closed Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: LayerFinish Aug 22 19:51:41 manuhino mpd: [xl0-2] PPPoE: connection closed Aug 22 19:51:41 manuhino mpd: [xl0-2] Link: DOWN event Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: Down event Aug 22 19:51:41 manuhino mpd: [xl0-2] LCP: state change Closed --> Initial Aug 22 19:51:41 manuhino mpd: [xl0-2] RADIUS: Rec'd RAD_ACCOUNTING_RESPONSE for user 'spirt' Aug 22 19:51:41 manuhino mpd: [xl0-2] Link: SHUTDOWN event Aug 22 19:51:41 manuhino mpd: [xl0-2] Link: Shutdown
эй! не орать!! и красный цвет запрещен к использованию, кстати!!
|
|
|
15
|
Главная категория / Общий раздел / Re: Ошибка 743 при подключении через pppoe
|
: 22 Августа 2010, 16:19:58
|
Попробуйте вместо выставить (пап не нужен уже несколько лет) sql.conf надеюсь не такой, каким Вы его сюда скопировали. прпробовал выставить ничего не изменилось пробовал выставить set link enable chap pap eap также выдаёт ощибку может в sql.conf чтото не так? соединение вроде устанавливается но через 6 секунд вылетает с ошибкой.
|
|
|
|