FreeBSD 6.2 release, UTM 5.2.1-006, MPD 5.1
При подключении к VPN cерверу иногда появляется "Ошибка 629. Подключение было закрыто удаленным компьютером". При повторном звонке подключение происходит успешно.
Вот что при этом пишется в mpd.log:
Код: Выделить всё
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: rec'd Configure Request #8 (Ack-Rcvd)
Aug 14 13:59:40 NAS mpd: [B-239] IPADDR 172.16.1.44
Aug 14 13:59:40 NAS mpd: [B-239] 172.16.1.44 is OK
Aug 14 13:59:40 NAS mpd: [B-239] PRIDNS 195.161.106.2
Aug 14 13:59:40 NAS mpd: [B-239] PRINBNS 172.16.0.1
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: SendConfigAck #8
Aug 14 13:59:40 NAS mpd: [B-239] IPADDR 172.16.1.44
Aug 14 13:59:40 NAS mpd: [B-239] PRIDNS 195.161.106.2
Aug 14 13:59:40 NAS mpd: [B-239] PRINBNS 172.16.0.1
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: state change Ack-Rcvd --> Opened
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: LayerUp
Aug 14 13:59:40 NAS mpd: [B-239] 172.16.0.2 -> 172.16.1.44
Aug 14 13:59:40 NAS mpd: [B-239] can't connect "[445ea]:.inet"->"out478" and "[1181a]:"->"out479": No such file or directory
Aug 14 13:59:40 NAS mpd: [B-239] IFACE: IfaceNgIpInit() error, closing IPCP
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: parameter negotiation failed
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: state change Opened --> Stopping
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: SendTerminateReq #3
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: LayerDown
Aug 14 13:59:40 NAS mpd: [B-239] IFACE: Removing IPv4 address from ng238 failed: Can't assign requested address
Aug 14 13:59:40 NAS mpd: [B-239] rec'd unexpected protocol IP
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: rec'd Terminate Ack #3 (Stopping)
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: state change Stopping --> Stopped
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: LayerFinish
Aug 14 13:59:40 NAS mpd: [B-239] Bundle: No NCPs left. Closing links...
Aug 14 13:59:40 NAS mpd: [B-239] Bundle: closing link "L-10"...
Aug 14 13:59:40 NAS mpd: [B-239] rec'd unexpected protocol IP
Aug 14 13:59:40 NAS mpd: [L-10] Link: CLOSE event
Aug 14 13:59:40 NAS mpd: [L-10] LCP: Close event
Aug 14 13:59:40 NAS mpd: [L-10] LCP: state change Opened --> Closing
Aug 14 13:59:40 NAS mpd: [L-10] Link: Leave bundle "B-239"
Aug 14 13:59:40 NAS mpd: [B-239] Bundle: Status update: up 0 links, total bandwidth 9600 bps
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: Close event
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: state change Stopped --> Closed
Aug 14 13:59:40 NAS mpd: [B-239] CCP: Close event
Aug 14 13:59:40 NAS mpd: [B-239] CCP: state change Opened --> Closing
Aug 14 13:59:40 NAS mpd: [B-239] CCP: SendTerminateReq #3
Aug 14 13:59:40 NAS mpd: [B-239] CCP: LayerDown
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: Down event
Aug 14 13:59:40 NAS mpd: [B-239] IPCP: state change Closed --> Initial
Aug 14 13:59:40 NAS mpd: [B-239] CCP: Down event
Aug 14 13:59:40 NAS mpd: [B-239] CCP: LayerFinish
Aug 14 13:59:40 NAS mpd: [B-239] CCP: state change Closing --> Initial
Aug 14 13:59:40 NAS mpd: [B-239] Bundle: Shutdown
Aug 14 13:59:40 NAS mpd: [B-239] can't connect "[445ea]:.inet"->"out478" and "[1181a]:"->"out479": No such file or directory
mpd.conf:
Код: Выделить всё
# Define dynamic IP address pool.
set ippool add POOL 172.16.0.2 172.16.254.254
# Create clonable bundle template named B
create bundle template B
set iface enable proxy-arp
set iface idle 1800
set iface enable tcpmssfix
set iface enable netflow-in
set iface enable netflow-out
set ipcp yes vjcomp
# Specify IP address pool for dynamic assigment.
set ipcp ranges 172.16.0.2/16 ippool POOL
set ipcp dns 195.161.106.2
set ipcp nbns 172.16.0.1
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
# Create clonable link template named L
create link template L pptp
# Set bundle template to use
set link action bundle B
# Multilink adds some overhead, but gives full 1500 MTU.
set link enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
# We can use use RADIUS authentication/accounting by including
# another config section with label 'radius'.
load radius
set link keep-alive 10 60
# We reducing link mtu to avoid GRE packet fragmentation.
set link mtu 1460
# Configure PPTP
set pptp self 10.10.1.2
# Allow to accept calls
set link enable incoming