Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix "Peer refused to agree to our IP address" #1021

Merged

Conversation

DimitriPapadopoulos
Copy link
Collaborator

@DimitriPapadopoulos DimitriPapadopoulos commented Sep 29, 2022

I do not understand why ipcp-accept-local would be required or have any effect here:

With this option, pppd will accept the peer's idea of our local IP address, even if the local IP address was specified in an option.

Indeed, we do not specify the local IP address:

":169.254.2.1", // <local_IP_address>:<remote_IP_address>

Instead, we explicitly ask the peer to provide the local IP address, using option noipdefault:

With this option, the peer will have to supply the local IP address during IPCP negotiation (unless it specified explicitly on the command line or in an options file).

It seems to be working in practice. So let's test it.

Fixes #920.

I do not understand ipcp-accept-local would be required or have any
effect here:
	With this option, pppd will accept the peer's idea of our
	local IP address, even if the local IP address was specified
	in an option.

Indeed, we do not specify the local IP address:
	":169.254.2.1", // <local_IP_address>:<remote_IP_address>

Instead, we explicitly ask the peer to provide the local IP address,
using option noipdefault:
	With this option, the peer will have to supply the local
	IP address during IPCP negotiation (unless it specified
	explicitly on the command line or in an options file).

It seems to be working in practice. So let's test it.
@DimitriPapadopoulos
Copy link
Collaborator Author

I guess it might help when a local IP address is defined in /etc/ppp/options.

@nomeata
Copy link

nomeata commented Jun 4, 2023

I am observing this with openfortivpn 1.20.3 in NixOS and pppd 2.5.0. Is that a combination that should work?

@DimitriPapadopoulos
Copy link
Collaborator Author

Doesn't it work?

@nomeata
Copy link

nomeata commented Jun 5, 2023

No, unfortunately it doesn't

@DimitriPapadopoulos
Copy link
Collaborator Author

DimitriPapadopoulos commented Jun 6, 2023

Well, what's the problem, and does this new patch fix the problem?

@nomeata
Copy link

nomeata commented Jun 6, 2023

Oh, my bad, for some reason I assumed that 1.10.3 contained all patches already! Will try master later when near the devices. Sorry for the noise.

@nomeata
Copy link

nomeata commented Jun 6, 2023

Indeed, on master it works for me as well!
(Tested effortless using nix-shell -p 'openfortivpn.overrideAttrs(old: {src = builtins.fetchTarball https://github.com/adrienverge/openfortivpn/archive/master.tar.gz;})' – I ❤️ nixpkgs.)

@akha666
Copy link

akha666 commented Sep 20, 2023

I have fixed it #1076 (comment)

Repository owner deleted a comment from Neustradamus Dec 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Peer refused to agree to our IP address
3 participants