RRAS - VPN Randomly Disconnecting

[chicagotech]

This link will give you step by step details:

name resolution and connectivity issueson RRASCase Study - Name resolution and connectivity issues on a RRAS that also runs
DC, DNS or WINS. A computer that is running Windows Server may have name ...
www.howtonetworking.com/casestudy/rrasw ... swins1.htm

[tobias]

Good Morning.

I completed the 5 steps from http://www.howtonetworking.com/casestud ... swins1.htm yesterday and reboot server.

Today morning the Windows Client Stay connect, but booth remote and local DD-WRT disconnect after 9 hours (see print screen).

User tobias = local DD-WRT, vpnuser = remote DD-WRT, vpnuser2 = local Windows XP VPN Client.

Please, look the Log_files.zip on Sky Drive: https://skydrive.live.com/redir.aspx?ci ... lTyscEIQ-I

Thank You.

[chicagotech]

I don't have clear picture what's the problem, but I think we may have a DNS issue. As mentioned before, it is not recommanded to install VPN on a DC. If you do, you may have name resolution issue or you need to know how to configure DNS correctly.

[tobias]

There is other VPN Hardware support client for pptp?

Any cheap VPN Client Router so I can try?

May the problem is the router.

[tobias]

Router Options:

defaultroute
lock
noauth
nodetach
refuse-eap
lcp-echo-failure 3
lcp-echo-interval 2
persist
usepeerdns
idle 0
ip-up-script /tmp/pptpd_client/ip-up
ip-down-script /tmp/pptpd_client/ip-down
ipparam kelokepptpd
mppe required,no40,no56,stateless

IP-UP Script:
#!/bin/sh
REMOTESUB=$(/usr/sbin/nvram get pptpd_client_srvsub)
REMOTENET=$(/usr/sbin/nvram get pptpd_client_srvsubmsk)
case "$6" in
kelokepptpd)
/sbin/route add -net $REMOTESUB netmask $REMOTENET dev $1
/usr/sbin/iptables --insert OUTPUT --source 0.0.0.0/0.0.0.0 --destination $REMOTESUB/$REMOTENET --jump ACCEPT --out-interface $1
/usr/sbin/iptables --insert INPUT --source $REMOTESUB/$REMOTENET --destination 0.0.0.0/0.0.0.0 --jump ACCEPT --in-interface $1
/usr/sbin/iptables --insert FORWARD --source 0.0.0.0/0.0.0.0 --destination $REMOTESUB/$REMOTENET --jump ACCEPT --out-interface $1
/usr/sbin/iptables --insert FORWARD --source $REMOTESUB/$REMOTENET --destination 0.0.0.0/0.0.0.0 --jump ACCEPT --in-interface $1
/usr/sbin/iptables --insert FORWARD --protocol tcp --tcp-flags SYN,RST SYN --jump TCPMSS --clamp-mss-to-pmtu
if [ "$(/usr/sbin/nvram get pptpd_client_nat)" = "1" ]; then
/usr/sbin/iptables --table nat --append POSTROUTING --out-interface $1 --jump MASQUERADE
fi
;;
*)
esac
exit 0

VPN Script:
#!/bin/sh
#######################################################################
# VPN script Created by rcalvert #
# VPN Script and Related Scripts Modify by Cesar_G AKA Keloke #
# Module for DD-WRT created by Cesar_G AKA Keloke #
#######################################################################

RESP=0
PPTPSERVER=$(nvram get pptpd_client_srvip)

case $1 in
"start" )
echo "Launching VPN process"
$0 go &
echo "Process launched"
;;

"go" )
echo "Waiting......."
sleep 10
PIDFILE="/var/run/vpn.pid"
if [ -f "${PIDFILE}" ];
then
PID="`cat ${PIDFILE}`"
if egrep vpn "/proc/${PID}/cmdline" 2>&1 > /dev/null;
then
echo "Already active!"
exit 16
fi
echo "Removing PID file"
rm -f "${PIDFILE}"
fi
echo -n $$ > "${PIDFILE}"
echo "PID file created"
echo "Attempting initial connect"
pptp $PPTPSERVER file /tmp/pptpd_client/options.vpn
echo "Initial connection dropped"

while [ 1 ];
do
echo "Attempting connect... "
killall pptp 2>/dev/null
sleep 2
killall -9 pptp 2>/dev/null
sleep 1
pptp $PPTPSERVER file /tmp/pptpd_client/options.vpn
echo "Connection dropped... "
sleep 2
done;
;;

"debug" )
echo "Waiting......."
sleep 10
PIDFILE="/var/run/vpn.pid"
if [ -f "${PIDFILE}" ];
then
PID="`cat ${PIDFILE}`"
if egrep vpn "/proc/${PID}/cmdline" 2>&1 > /dev/null;
then
echo "Already active!"
exit 16
fi
echo "Removing PID file"
rm -f "${PIDFILE}"
fi
echo -n $$ > "${PIDFILE}"
echo "PID file created"
echo "Attempting initial connect"
pptp $PPTPSERVER file /tmp/pptpd_client/options.vpn debug nodetach
echo "Initial connection dropped"

while [ 1 ];
do
echo "Attempting connect... "
killall pptp 2>/dev/null
sleep 2
killall -9 pptp 2>/dev/null
sleep 1
pptp $PPTPSERVER file /tmp/pptpd_client/options.vpn debug nodetach
echo "Connection dropped... "
sleep 2
done;
;;

"stop" )

VPNPID=`cat /var/run/vpn.pid`
echo "Killing VPN PID $VPNPID"
kill $VPNPID
sleep 2
kill -9 $VPNPID 2>/dev/null

PPTPPID=`pidof -s pptp`
echo "Killing PPTP PID $PPTPPID"
kill $PPTPPID
sleep 2
kill -9 $PPTPPID
sleep 2
rm /var/run/vpn.pid
echo "VPN Stopped"
;;
* )
echo " "
echo " PTPP VPN CLIENT"
echo " --------"
echo " "
echo " start - Starts the Client"
echo " stop - Stops the Client"
echo " go - Run the Client interactively (for debugging)"
echo " debug - Run the Client interactively (in full debug mode)"
echo " "
;;
esac
return $RESP

[tobias]

Good Morning,

today at the same time (8 h AM) all connections are dropped.

Can be this a coincidence or a specific problem?

[chicagotech]

Posting the result of ipconfig /all and nslookup may help.

[tobias]

Server IPCONFIG /ALL

Microsoft Windows [versão 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\Administrador>ipconfig /all

Configuração de IP do Windows

Nome do host . . . . . . . . . . . : servidor
Sufixo DNS primário. . . . . . . . : TROMM.local
Tipo de nó . . . . . . . . . . . . : desconhecido
Roteamento de IP ativado . . . . . : sim
Proxy WINS ativado . . . . . . . . : sim
Lista de pesquisa de sufixo DNS. . : TROMM.local

Adaptador Ethernet REDE LOCAL:

Sufixo DNS específico de conexão . :
Descrição. . . . . . . . . . . . . : Realtek PCIe GBE Family Controller
Endereço físico. . . . . . . . . . : 00-E0-4C-68-16-42
DHCP ativado . . . . . . . . . . . : não
Endereço IP. . . . . . . . . . . . : 10.0.0.1
Máscara de sub-rede. . . . . . . . : 255.255.255.0
Gateway padrão . . . . . . . . . . :
Servidores DNS . . . . . . . . . . : 10.0.0.1

Adaptador Ethernet INTERNET:

Sufixo DNS específico de conexão . :
Descrição. . . . . . . . . . . . . : Intel(R) 82578DC Gigabit Network Connect
ion
Endereço físico. . . . . . . . . . : 44-87-FC-BD-D1-1D
DHCP ativado . . . . . . . . . . . : não
Endereço IP. . . . . . . . . . . . : 192.168.0.4
Máscara de sub-rede. . . . . . . . : 255.255.255.0
Gateway padrão . . . . . . . . . . : 192.168.0.1
Servidores DNS . . . . . . . . . . : 10.0.0.1
NetBIOS por Tcpip. . . . . . . . . : desativado

Adaptador PPP Interface (de discagem) de servidor RAS:

Sufixo DNS específico de conexão . :
Descrição. . . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Endereço físico. . . . . . . . . . : 00-53-45-00-00-00
DHCP ativado . . . . . . . . . . . : não
Endereço IP. . . . . . . . . . . . : 10.0.1.1
Máscara de sub-rede. . . . . . . . : 255.255.255.255
Gateway padrão . . . . . . . . . . :
NetBIOS por Tcpip. . . . . . . . . : desativado

C:\Documents and Settings\Administrador>

SERVER NSLOOKUP
C:\Documents and Settings\Administrador>nslookup
Servidor padrao: servidor.tromm.local
Address: 10.0.0.1

[tobias]

Good Morning.

I have configured a Windows XP with incoming connections enabled and VPN between XP and DD-WRT stay connected for 2 days and 10 hours without drop (still connected at this time).

With Windows XP i can´t assign static IP for VPN clients? Right? It´s possible?

[guest]

You can assign IP to VPN client from XP VPN. However,, XP VPN host is limited to one session and it is peer to peer network or you may have a routing issue.

[tobias]

I have setup another machine with Windows Server 2003, just for RRAS.

After a while, the same problem occur. Randomly disconnecting.

I'm collecting event log.

[tobias]

Event viewer and Ras logs:

File Name: Nova Pasta.zip

Link: https://skydrive.live.com/redir.aspx?ci ... 064ABB!135

It´s possible to authenticate on a Windows 2003 Server VPN with local account? (not domain account)

[tobias]

I have noted that ONE of the reason for crash was antivirus update.

I uninstalled AVG Anti Virus Network Edition from Server and now is more stable and the connection keep connected for more time.

I try to discover another reason for disconnect...

[tobias]

Today disconnect log:

File name: tracing23_05_2012.rar

Link: https://skydrive.live.com/redir?resid=B ... 064ABB!538

Disconnect time: 08:16 AM

[blin]

Thank you for the update.