-
Notifications
You must be signed in to change notification settings - Fork 0
/
FAQ
184 lines (150 loc) · 7.14 KB
/
FAQ
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
VTun - Frequently Asked Questions
1. General Questions
1.1 What is VTun ?
VTun is the easiest way to create Virtual Tunnels over TCP/IP networks
with traffic shaping, compression, and encryption.
It supports IP, PPP, SLIP, Ethernet and other tunnel types.
VTun is easily and highly configurable, it can be used for various
network tasks.
1.2 What does VTun stand for ?
Virtual TUNnel.
1.3 Whom do I contact for support ?
Please send your suggestions, questions and problem descriptions to
VTun mailing list [email protected]
1.4 Is VTun Y2K compliant?
YES.
1.5 Where can I download VTun package ?
You can download complete VTun package from the following web sites:
Primary:
http://vtun.sourceforge.net
Mirrors:
http://vtun.saol.com
http://vtun.speedway.net
http://vtun.euronet.be
1.6 Can I establish VTun tunnel with Windows machine ?
Unfortunately there is no VTun client for Windows yet.
We a looking for a guru who will port VTun to Windows.
1.7 Can I establish VTun tunnel with Cisco ?
No. VTun doesn't support tunneling with Cisco.
1.8 Does VTun support PPTP, L2TP, IPsec ?
VTun uses it's own simple and efficient protocol with TCP or UDP.
It doesn't support PPTP, L2TP, IPsec.
1.9 What platforms are supported by VTun ?
VTun was developed on Linux and then ported to several other OS:
Linux (any glibc based distribution)
Solaris
FreeBSD, OpenBSD, NetBSD and other BSD clones.
1.10 Does VTun server support multiple clients ?
Sure. Number of the clients is limited only by the capabilities of
your machine.
1.11 How many tunnels can VTun handle ?
Number of the tunnels is limited only by the capabilities of your
machine.
1.12 What do I need to run VTun ?
You should install and configure VTun package and read documentation.
Usually you'll need:
Universal TUN/TAP device driver (http://vtun.sourceforge.net/tun)
PPP driver and pppd.
1.13 What hardware do I need to run VTun ?
Hardware requirements depends on your configuration:
486DX2/66/16Mb will handle simple tunnels without compression
and encryption.
P200/64Mb will handle several medium speed tunnels with compression
and encryption without any problem.
Celeron 400/64Mb, perfectly encrypts and compresses high speed
channels like 2Mbits.
Real life examples:
PII466/128Mb was compressing several 3-4Mbits tunnels.
AlphaXL 266/64Mb was compressing and shaping about 10-50 tunnels
from 64Kbit to 512Kbit.
P200MMX/64Mb with about 100 tunnels over loopback.
1.14 VTun supports many tunnel types, which type should I use ?
Well, it is not very easy to answer this question in the FAQ.
Please read documentation which comes with VTun package and visit
VTun web site http://vtun.sourceforge.net
1.15 Where can I find configuration recommendations and examples ?
VTun package contains several config file samples.
Please read README.Setup
1.16 Why ZLIB compression does not work with UDP protocol ?
UDP doesn't not provide reliable transport, and some frames could be
lost on unreliable links. VTun does not have any retransmition or
recovery algorithm for the lost UDP frames, because retransmition will
be handled by Upper layers.
You should use LZO compression with UDP protocol.
1.17 Why PPP tunnel is unstable over UDP ?
Explanation is the same as with above case. Use TCP for PPP tunnels or
use TUN instead of PPP, since tun device is completely the same with
ppp device for the kernel.
1.18 Why do routes specified after 'ppp' command in config file produce errors and don't install correctly ?
Actually there is no straight way to determine when pppd has established
connection with the other end. VTun execute those route commands right
after the launch of pppd and if PPP link is not established, route
commands will fail. Since version 2.0b3, VTun delays 10 seconds before
issuing the route commands, which should fix almost all cases.
I'll think about more elegant way to fix this problem.
1.19 How secure is VTun ?
Well. VTun doesn't try to be the MOST secure tunneling software in the
world, it tries to be fast, stable, rich of features, easy to use
and secure enough instead.
VTun uses Challenge Based Authentication and doesn't transfer passwords
in clear text. Encryption module uses MD5 for 128 bits key generation
and BlowFish algorithm for actual data encryption.
There could be some weaknesses in key generation method, we will try
to address them in future releases.
1.20 Who has developed so nice and cool software ?
Thanks :). You can find list of VTun team members on the web site or
in the 'Credits' file in VTun package.
1.21 I don't like VTun where can I send complains ?
You can send them to /dev/null.
1.22 Where can I get more information about VTun ?
VTun package contains:
Manual page for vtund.
Manual page for configuration file.
Fully documented config file.
Several README files.
1.23 Can I use vtun over SSH ?
Yes, via the port forwarding feature of ssh. Don't enable vtun's
encryption as ssh does its own encryption. Also, make sure to select
the tcp protocol as SSH can forward tcp but not udp. An example
session might look something like this:
home$ ssh -L 5000:localhost:5000 work.megacorp.com
(authenticate if necessary)
work$ vtund -s home_tunnel_config
...
home$ vtund home_tunnel_config localhost
1.24 Is it possible to establish a vtun link from a client behind NAT or a firewall?
Yes it is, but you need to use TCP protocol.
2. Error Messages
2.1 Why do I see no vtund log and error messages ?
On several Unices, FreeBSD for example, syslog doesn't log message
with INFO priority, by default.
You should add "*.info;" to the line with /var/log/messages in
/etc/syslog.conf.
2.2 Why do I get "Input/output error" pppd error message ?
This usually means that vtund on other side has dropped connection,
check logs on other side.
2.3 Why do I get "couldn't find any suitable secret (password)" pppd error message ?
New versions of pppd use authentication by default.
Just add "noauth" option to ppp command.
2.4 Why do I get "XXXX returned error Y" error message ?
Usually this means that you use incorrect syntax for that command.
Also please read question 1.19 about routes and pppd.
2.5 Why do I get "Serial line is looped back" pppd error message ?
Sometimes pppd incorrectly decides that pseudo terminal is looped back.
Just add "nomagic" option to ppp command.
2.6 Why do I get "Can't allocate tun device" or "Can't allocate tap device" error messages ?
This error means that Universal TUN/TAP driver module is not loaded
or you do not have correct /dev/tunXX or /dev/tapXX device nodes.
Make sure you have installed and configured Universal TUN/TAP device
driver (http://vtun.sourceforge.net/tun)
2.7 Why do I get "LZO compression is not supported" error message ?
This error means that LZO compression is not compiled in.
You will have to download binary VTun package or recompile vtund with
LZO support.
2.8 Why do I get "expecting WORD at line xxx" error message ?
This usually means that you are using a password that contain only
numerical characters.
VTun passwords must be alpha characters or a mixture of alpha and
numerical characters.
If you have any unanswered question please send it to the mailing list