VPN Traffic issues

wlanmac wlan at mac.com
Mon Mar 9 08:02:12 UTC 2009


Thanks for the suggestion! 

David


On Mon, 2009-03-09 at 08:52 +0100, Oliver Hinckel wrote:
> Daniel Garcia wrote on 03/09/2009 01:10 AM:
> [...]
> >> You might want to do a wireshark dump (or tcpdump) of the subscriber's
> >> traffic. Or, run chilli in debug mode to help see what it is doing. The
> >> first question is: can the subscriber surf the walled garden or does
> >> *nothing* work?
> > surf the walled garden? Sorry you lost me. Browsing the internet is fine
> > when subscribers log in correctly. Once logged in and successfully
> > browsing, if they VPN, then browsing stops working. I notice that DNS
> > is working because I see the browser resolving the name URL...it appears
>  > to be something in the iptables is preventing it
> 
> We had same problems with surfen when VPN was activated. The problem 
> was, that the VPN software (doesn't remember which VPN software and type 
> of VPN was used) tries to contact IP address 1.1.1.1 which is the 
> default value for the "uamlogoutip" settings:
> 
>    http://coova.org/wiki/index.php/CoovaChilli/chilli.conf(5)
> 
> So if the customer starts his VPN the software contacted the IP address 
> 1.1.1.1 (or tries at least to contact) and chilli logged them out. The 
> customer wasn't able to surf the web anymore.
> 
> To solve this problem, we changed the "uamlogoutip" value to 127.0.0.1 
> since we don't need this configuration with logging out by contacting a 
> specific IP address.
> 
> HTH
> 
> - Olli
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: chilli-unsubscribe at coova.org
> For additional commands, e-mail: chilli-help at coova.org
> Wiki: http://coova.org/wiki/index.php/CoovaChilli
> Forum: http://coova.org/phpBB3/viewforum.php?f=4
> 




More information about the Chilli mailing list