adrienverge / openfortivpn

Client for PPP+TLS VPN tunnel services
GNU General Public License v3.0
2.73k stars 321 forks source link

pppd-ipparam fails to add routes #1242

Open smktpd opened 2 months ago

smktpd commented 2 months ago

Paragraph about pppd-ipparam setting in man page is vague, not clear.

Wiki page about using pppd-ipparam has a weirdly chosen example:

set-routes=0
pppd-ipparam=192.168.77.88 192.168.77.233 192.168.77.205

First of all, why does this example list 3 addresses instead of subnets? (I know that an IPv4 address may be represented as a subnet with 32 bit mask, but the example uses just addresses, without masks; it would be less weird if masks were specified).

How would this setting look like in case of flag --pppd-ipparam being used instead of a config file? Would I have to wrap the list of values into quotes (single or double) and use space as a separator between items in the list like this? --pppd-ipparam='192.168.77.88 192.168.77.233 192.168.77.205' Why wouldn't the example for config file wrap the list in quotes?

Anyways, this setting doesn't seem to work, as I check with ip r after connecting to a VPN and the routes listed in that option are not there. The interactive log looks like this:

INFO:   Connected to gateway.
INFO:   Authenticated.
INFO:   Remote gateway has allocated a VPN.
$DATE : publish_entry SCDSet() failed: Success!
$DATE : publish_entry SCDSet() failed: Success!
$DATE : Using interface ppp0
$DATE : Connect: ppp0 <--> /dev/ttys022
INFO:   Got addresses: [10.65.0.107], ns [10.64.228.1, 10.64.228.2]
INFO:   Negotiation complete.
$DATE : local  IP address 10.65.0.107
$DATE : remote IP address 169.254.2.1
$DATE : Committed PPP store
$DATE : Committed PPP store
INFO:   Interface ppp0 is UP.
INFO:   Tunnel is up and running.

Increasing verbosity doesn't add anything interesting. If I use pppd-log - there's not much interesting there as well except for those 2 publish_entry SCDSet() failed: Success! successful failures (what an oxymoron). ip r doesn't list anything related to 192.168.77.88 192.168.77.233 192.168.77.205 addresses. I'm on ARM-based device with macos Sonoma 14.6 (23G80) running openfortivpn installed from brew, tried versions 1.20.5 and 1.22.1 (latest available).