I-LCP inqanyulwe uzakwabo ku-PPTP: qala ukunika amandla i-MPPE

Uxhumanisi luyaziphakamisa, iklayenti libika ukuthi lixhunyiwe, bese kuthi ngemva kwesekhondi ilog ivaleke nge-LCP enqanyulwe uzakwabo. Lowo mugqa uvela ezingxoxweni ze-PPP ngaphakathi komhubhe we-GRE, okusho ukuthi ukuthutha kwase kusebenza futhi iziphetho ezimbili azivumelananga ngezinketho zoxhumanisi. Amagama ayimfihlo namakheli eseva ngokuvamile awanacala lapha. Umkhuba wokubethela uyinto yokuqala okufanele iqhathaniswe, futhi ku-Linux ifayela likazakwabo le-pppd iyindawo yokuqala okufanele ibhekwe.

Ukwehluleka kwe-LCP kusho ukuthini ngesigaba se-PPP

I-PPTP isonga i-PPP ngaphakathi kwe-GRE: uxhumano lokulawula lwe-TCP 1723 lulungiselela ucingo, i-GRE ithwala umthwalo, bese i-LCP ixoxa ngezinketho ezifana neprotocol yokuqinisekisa, ukucindezela kanye ne-MPPE. Uzakwabo unqamula i-LCP lapho inketho edingekayo ingamukeleki ngakubo. Ilog lapho ukushintshana kwe-CHAP noma i-MSCHAPv2 kuqedwa khona futhi i-LCP iphele ngokushesha ngemva kwalokho ukwenqaba komgomo, hhayi ukwehluleka kokufinyeleleka. Uma umhubhe ungafiki nhlobo ezingxoxweni, hlola i-pppd kanye ne-plugin yayo ngaphambi kokufunda umugqa we-LCP.

Izibopho ezimbili zokuqala zilula ukuzishiya. Ibhinari ye-pppd kufanele ibe khona, futhi i-plugin ye-PPTP ebalulwe efayelini likazakwabo kufanele ifakwe; iphakethe elingekho liqeda ucingo ngaphambi kokuba kuxoxwe nganoma iyiphi inketho.

Nika amandla i-MPPE ohlangothini oluyifunayo

Isinqumo sangempela ukuthi uhlangothi luphi olungumnikazi womkhuba wokubethela. Iklayenti linganikela nge-MPPE, liyifune noma liyinqabe, futhi iseva yenza ukukhetha okufanayo. Uma kokubili kuyifuna uxhumanisi luyaphakama; uma olunye luyifuna kanti olunye luyanqaba, i-LCP iyaphela.

pty "pptp vpn.example.net --nolaunchpppd"
name alice
remotename PPTP
require-mppe-128

Layisha imojuli nge-modprobe ppp_mppe ngaphambi kokushaya ucingo, ngoba i-require-mppe-128 iyahluleka ngaphandle kwayo. Ku-Windows isilawuli esilinganayo ithebhu yezokuphepha yokufakwa kwe-VPN, lapho iklayenti kufanele litshelwe ukuthi lifune ukubethela esikhundleni sokwamukela noma yini enikezwa iseva. Uma iseva isanqamula i-LCP, buza umqhubi wayo ukuthi i-MPPE iyisibopho, iyazikhethela noma icishiwe, ngoba iklayenti alikwazi ukuxoxa ngokuvikelwa iseva ekwenqabayo. Ukucisha ukubethela ukuze umlayezo unyamalale kuyisiqondiso esingalungile: kususa ukuvikelwa okuwukuphela kwako okunakho le protocol.

Gcina ifayela likazakwabo elisebenzayo ngaphambi kokulihlela. Umugqa we-require-mppe obhalwe kabi uphinda kwakhiqize ukwehluleka okufanayo kwe-LCP futhi kukubuyisela ekuqaleni.

Funda ilog ye-pppd uqobo esikhundleni se-applet

Ama-applet edeskithophu akhombisa ukunqanyulwa futhi afihla isizathu, ngakho funda umbiko we-daemon ngomzamo owodwa. Kuzinhlelo ze-systemd umlayezo uya ku-journal; izilungiselelo ezindala zibhala kumafayela elog endabuko.

journalctl --since "10 min ago" | grep -i -E "pppd|lcp|mppe"
tail -n 50 /var/log/syslog

Sesha efasiteleni elizungeze ucingo olulodwa esikhundleni sosuku oluphelele lokuxhuma kabusha, ukuze inketho enqatshiwe ibonakale kalula. I-pppd ivamise ukusho inketho kanye nempendulo kazakwabo, okukutshela ukuthi ushintshe isiphakamiso sakho noma ucele uhlangothi lweseva ukuthi lulehlise isibopho salo. Gcina imizamo inezimpawu zesikhathi, ngoba ukuqhathanisa amalog amabili kusiza kuphela uma wazi ukuthi yimiphi imigqa eyeyaliphi ucingo. Uma kungekho ukushintshana kwe-LCP okubonakalayo nhlobo, iphutha lisekuqaleni kuketanga futhi i-MPPE ayisona isola.

Gcina ukulungisa kukho konke ukuxhuma kabusha: amagama ezingwegwe kanye ne-MTU

Uma uxhumanisi selumi nje, izici ezimbili zinquma ukuthi luzokwazi yini ukumelana nokuxhuma kabusha. Izingwegwe zihlala ku-/etc/ppp/ip-up.d naku-/etc/network/if-up.d, futhi zombili iziqondiso zicutshungulwa yi-run-parts, esihlungi sayo samagama efayela senqaba noma yini equkethe ichashazi. Ngakho iskripthi esibizwa nge-set-pptp.sh siyashiywa, kuyilapho i-set-pptp iqalisiwe. Hlola igama ngaphambi kokulungisa okuqukethwe kweskripthi, bese usetha i-MTU encane ngaphakathi kwalowo mgwegwe ukuze zonke izixhumi ezintsha ze-ppp ziyizuze ngaphandle komyalo wesandla.

run-parts --test /etc/ppp/ip-up.d
ip link set dev ppp0 mtu 1200

Ukuze uqede isikhathi ngamabomu, khomba i-pid erekhodwe yi-pppd esikhundleni sokufanisa amagama ezinqubo, ngoba ukubulala konke okuqukethe i-ppp kudwengula nezixhumanisi ezingahlobene. I-PPTP isiphelelwe yisikhathi futhi i-MS-CHAPv2 ibuthakathaka, ngakho thatha lokhu kuhlola njengokunakekela koxhumanisi okufanele luqhubeke lusebenza, hhayi njengesizathu sokuthumela i-PPTP kunoma iyiphi indawo entsha.