Giancarlo, Thanks for the article though it did not solve the problem, Therefore it's not MTU issue, I'm not getting any answers from the dns server and I also cannot ping anywhere even with IP It's like there's a connection to the vpn but no where else.
----- Original Message ----- From: "Giancarlo Razzolini" <grazzol...@gmail.com> To: "Or Elimelech" <o...@xwise.com> Cc: "OpenBSD general usage list" <misc@openbsd.org> Sent: Monday, December 9, 2013 3:54:58 PM Subject: Re: NPPPD Em 09-12-2013 11:11, Or Elimelech escreveu: > npppd.conf > # Global > > ## Max sessions > set max-session 100 > > ## Max user-sessions > set user-max-session 1 > > > # Tunnel > > tunnel L2TP protocol l2tp { > listen on 192.168.38.15 > } > > > # IPCP > > ipcp IPCP { > pool-address 10.0.0.2-10.0.0.254 > dns-servers 192.168.10.242 > } > > > # Interface > > interface tun0 address 10.0.0.1 ipcp IPCP > > > # Authentication > > authentication RADIUS type radius { > authentication-server { > address 192.168.10.242 secret "secret" > } > } > > bind tunnel from L2TP authenticated by RADIUS to tun0 > > > ipsec.conf > > ike passive esp transport \ > proto udp from 1.2.3.4 to any port 1701 \ > main auth hmac-sha1 enc aes group modp1024 \ > quick auth hmac-sha1 enc aes group modp1024 \ > psk "secret" > > and again Everything is working on all client I can work on VPN > > Windows clients are connecting but after connection is made I cannot get > anywhere. > > my client config is l2tp/ipsec with secret > optional encryption > mschapv2 > And I made the connection to take VPN gateway > > > > ----- Original Message ----- > From: "Giancarlo Razzolini" <grazzol...@gmail.com> > To: "Or Elimelech" <o...@xwise.com>, "OpenBSD general usage list" > <misc@openbsd.org> > Sent: Monday, December 9, 2013 2:54:42 PM > Subject: Re: NPPPD > > Em 09-12-2013 05:38, Or Elimelech escreveu: >> Hi, >> >> I've configured nppd server and clients for Linux, Android, iOS, OSX and >> Windows. >> This works on all platforms when routing all traffic through VPN except for >> Windows clients. >> >> I can connect to the vpn and I get a route for 0.0.0.0 mask 0.0.0.0 vpn >> interface >> >> but ipconfig shows me 10.0.0.50 with 255.255.255.255 and 0.0.0.0 GW >> >> After that I cannot get any traffic out. >> >> Best regards >> >> Or, From what I could get, it could be problem with mtu. I've had these problems with windows and since it's on the client side, there is no easy fix. If you can ping both sides, but when more heavy traffic goes through the pipe, and it hangs, it's almost likely to be it. You can verify it using ping packets with big payloads, I believe that this article: http://www.sevenforums.com/tutorials/94721-mtu-limit-test-change-your-connection-s-mtu-limit.html can help. If it is indeed a mtu problem, the article show a solution that must be used for all your clients. Or you could try using a different vpn solution. Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC _______________________________________________________________________________________________________________ The sender of this email is not authorized to bind XWise Marketing or any of its affiliate companies (hereby: the "Companies") or to make any representations, contracts, or commitments on behalf of the Companies. The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by forwarding this email to le...@xwise.com and then delete it from your system. The Companies are neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.