How to allow SSH over PPP?
I have these two computers connected through ppp.
One has ip 10.10.0.1
and the other has ip 10.10.0.2
.
Both also have the interface ppp0
with netmask 255.255.255.255
:
# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
How can I make it possible to connect from 10.10.0.2
into 10.10.0.1
using SSH?
If I make:
# ssh -vv root@10.10.0.1
I can see that it gets frozen at:
.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network
Watching everything from tcpdump I see this:
# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
Edit:
@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1
back to 10.10.0.2
, same issue actually. I tried a smaller MTU, no success unfortunately.
@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.
ssh networking ppp pppd
New contributor
|
show 2 more comments
I have these two computers connected through ppp.
One has ip 10.10.0.1
and the other has ip 10.10.0.2
.
Both also have the interface ppp0
with netmask 255.255.255.255
:
# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
How can I make it possible to connect from 10.10.0.2
into 10.10.0.1
using SSH?
If I make:
# ssh -vv root@10.10.0.1
I can see that it gets frozen at:
.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network
Watching everything from tcpdump I see this:
# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
Edit:
@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1
back to 10.10.0.2
, same issue actually. I tried a smaller MTU, no success unfortunately.
@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.
ssh networking ppp pppd
New contributor
It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.
– derobert
2 hours ago
what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?
– pizdelect
2 hours ago
1
@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)
– pizdelect
2 hours ago
1
@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.
– derobert
1 hour ago
I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).
– pizdelect
1 hour ago
|
show 2 more comments
I have these two computers connected through ppp.
One has ip 10.10.0.1
and the other has ip 10.10.0.2
.
Both also have the interface ppp0
with netmask 255.255.255.255
:
# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
How can I make it possible to connect from 10.10.0.2
into 10.10.0.1
using SSH?
If I make:
# ssh -vv root@10.10.0.1
I can see that it gets frozen at:
.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network
Watching everything from tcpdump I see this:
# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
Edit:
@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1
back to 10.10.0.2
, same issue actually. I tried a smaller MTU, no success unfortunately.
@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.
ssh networking ppp pppd
New contributor
I have these two computers connected through ppp.
One has ip 10.10.0.1
and the other has ip 10.10.0.2
.
Both also have the interface ppp0
with netmask 255.255.255.255
:
# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
How can I make it possible to connect from 10.10.0.2
into 10.10.0.1
using SSH?
If I make:
# ssh -vv root@10.10.0.1
I can see that it gets frozen at:
.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network
Watching everything from tcpdump I see this:
# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
Edit:
@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1
back to 10.10.0.2
, same issue actually. I tried a smaller MTU, no success unfortunately.
@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.
ssh networking ppp pppd
ssh networking ppp pppd
New contributor
New contributor
edited 1 hour ago
Thiago Melo
New contributor
asked 2 hours ago
Thiago MeloThiago Melo
1013
1013
New contributor
New contributor
It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.
– derobert
2 hours ago
what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?
– pizdelect
2 hours ago
1
@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)
– pizdelect
2 hours ago
1
@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.
– derobert
1 hour ago
I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).
– pizdelect
1 hour ago
|
show 2 more comments
It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.
– derobert
2 hours ago
what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?
– pizdelect
2 hours ago
1
@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)
– pizdelect
2 hours ago
1
@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.
– derobert
1 hour ago
I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).
– pizdelect
1 hour ago
It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.
– derobert
2 hours ago
It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.
– derobert
2 hours ago
what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?
– pizdelect
2 hours ago
what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?
– pizdelect
2 hours ago
1
1
@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)
– pizdelect
2 hours ago
@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)
– pizdelect
2 hours ago
1
1
@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.
– derobert
1 hour ago
@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.
– derobert
1 hour ago
I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).
– pizdelect
1 hour ago
I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).
– pizdelect
1 hour ago
|
show 2 more comments
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f506169%2fhow-to-allow-ssh-over-ppp%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.
Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.
Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.
Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f506169%2fhow-to-allow-ssh-over-ppp%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.
– derobert
2 hours ago
what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?
– pizdelect
2 hours ago
1
@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)
– pizdelect
2 hours ago
1
@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.
– derobert
1 hour ago
I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).
– pizdelect
1 hour ago