How to allow SSH over PPP?












0















I have these two computers connected through ppp.



One has ip 10.10.0.1 and the other has ip 10.10.0.2.



Both also have the interface ppp0 with netmask 255.255.255.255:



# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0


How can I make it possible to connect from 10.10.0.2 into 10.10.0.1 using SSH?



If I make:



# ssh -vv root@10.10.0.1


I can see that it gets frozen at:



.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network


Watching everything from tcpdump I see this:



# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44




Edit:



@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1 back to 10.10.0.2, same issue actually. I tried a smaller MTU, no success unfortunately.



@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.










share|improve this question









New contributor




Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





















  • It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.

    – derobert
    2 hours ago











  • what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?

    – pizdelect
    2 hours ago






  • 1





    @derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)

    – pizdelect
    2 hours ago






  • 1





    @pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.

    – derobert
    1 hour ago











  • I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).

    – pizdelect
    1 hour ago
















0















I have these two computers connected through ppp.



One has ip 10.10.0.1 and the other has ip 10.10.0.2.



Both also have the interface ppp0 with netmask 255.255.255.255:



# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0


How can I make it possible to connect from 10.10.0.2 into 10.10.0.1 using SSH?



If I make:



# ssh -vv root@10.10.0.1


I can see that it gets frozen at:



.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network


Watching everything from tcpdump I see this:



# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44




Edit:



@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1 back to 10.10.0.2, same issue actually. I tried a smaller MTU, no success unfortunately.



@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.










share|improve this question









New contributor




Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





















  • It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.

    – derobert
    2 hours ago











  • what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?

    – pizdelect
    2 hours ago






  • 1





    @derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)

    – pizdelect
    2 hours ago






  • 1





    @pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.

    – derobert
    1 hour ago











  • I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).

    – pizdelect
    1 hour ago














0












0








0








I have these two computers connected through ppp.



One has ip 10.10.0.1 and the other has ip 10.10.0.2.



Both also have the interface ppp0 with netmask 255.255.255.255:



# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0


How can I make it possible to connect from 10.10.0.2 into 10.10.0.1 using SSH?



If I make:



# ssh -vv root@10.10.0.1


I can see that it gets frozen at:



.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network


Watching everything from tcpdump I see this:



# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44




Edit:



@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1 back to 10.10.0.2, same issue actually. I tried a smaller MTU, no success unfortunately.



@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.










share|improve this question









New contributor




Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












I have these two computers connected through ppp.



One has ip 10.10.0.1 and the other has ip 10.10.0.2.



Both also have the interface ppp0 with netmask 255.255.255.255:



# ifconfig
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500
inet 10.10.0.2 netmask 255.255.255.255 destination 10.10.0.1
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 105 (105.0 B)
RX errors 3 dropped 0 overruns 0 frame 0
TX packets 20 bytes 1522 (1.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0


How can I make it possible to connect from 10.10.0.2 into 10.10.0.1 using SSH?



If I make:



# ssh -vv root@10.10.0.1


I can see that it gets frozen at:



.
.
.
password:
debug2: input_userauth_info_req
debug2: input_userauth_info_req: num_prompts 0
debug1: Authentication succeeded (keyboard-interactive).
Authenticated to 10.10.0.1 ([10.10.0.1]:22).
debug1: channel 0: new [client-session]
debug2: channel 0: send open
debug1: Requesting no-more-sessions@openssh.com
debug1: Entering interactive session.
debug1: pledge: network


Watching everything from tcpdump I see this:



# tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
22:15:48.592651 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 1, length 64
22:15:48.942907 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 1, length 64
22:15:49.593728 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 2, length 64
22:15:49.821594 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 2, length 64
22:15:50.595483 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 3, length 64
22:15:50.840112 IP 10.100.0.1 > tlcmelo: ICMP echo reply, id 17288, seq 3, length 64
22:15:51.597014 IP tlcmelo > 10.100.0.1: ICMP echo request, id 17288, seq 4, length 64
22:16:00.105020 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:16:38.104153 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:04.490191 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:05.490773 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:06.491775 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:07.492280 IP tlcmelo.37489 > 239.255.255.250.1900: UDP, length 171
22:17:16.104112 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:17:54.103994 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44
22:18:32.105034 IP tlcmelo.57621 > 10.100.0.1.57621: UDP, length 44




Edit:



@derobert, thanks for your message: It is not possible also to ssh from 10.10.0.1 back to 10.10.0.2, same issue actually. I tried a smaller MTU, no success unfortunately.



@pizdelect, thanks for your message: I am running debian in both computers. I tried setting MTU to 1000 and 500, no success yet.







ssh networking ppp pppd






share|improve this question









New contributor




Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited 1 hour ago







Thiago Melo













New contributor




Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 2 hours ago









Thiago MeloThiago Melo

1013




1013




New contributor




Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






Thiago Melo is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.













  • It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.

    – derobert
    2 hours ago











  • what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?

    – pizdelect
    2 hours ago






  • 1





    @derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)

    – pizdelect
    2 hours ago






  • 1





    @pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.

    – derobert
    1 hour ago











  • I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).

    – pizdelect
    1 hour ago



















  • It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.

    – derobert
    2 hours ago











  • what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?

    – pizdelect
    2 hours ago






  • 1





    @derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)

    – pizdelect
    2 hours ago






  • 1





    @pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.

    – derobert
    1 hour ago











  • I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).

    – pizdelect
    1 hour ago

















It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.

– derobert
2 hours ago





It should just work. Does ssh to localhost (from 10.10.0.1) work? That'd at least demonstrate the ssh server is working.

– derobert
2 hours ago













what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?

– pizdelect
2 hours ago





what are you running ppp over? try setting the mtu and mru to a lower value. also, what system is that? openbsd?

– pizdelect
2 hours ago




1




1





@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)

– pizdelect
2 hours ago





@derobert a mtu = 1500 will certainly not "just work" with pppoe. icmp echos and small packets will get through though ;-)

– pizdelect
2 hours ago




1




1





@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.

– derobert
1 hour ago





@pizdelect Well, OP's tcpdump doesn't even show any ssh traffic, but the debug output shows session established and authenticated. So something is weird. Besides, PPP should figure out the right MTU for PPPoE.

– derobert
1 hour ago













I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).

– pizdelect
1 hour ago





I don't know whether ppp "should" figure out the right mtu for pppoe, but it usually doesn't -- take for instance the (vanilla) openwrt on my router, where 1492 it is passed as a parameter to pppd (and it also does mss clamping via iptables).

– pizdelect
1 hour ago










0






active

oldest

votes











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});






Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f506169%2fhow-to-allow-ssh-over-ppp%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes








Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.













Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.












Thiago Melo is a new contributor. Be nice, and check out our Code of Conduct.
















Thanks for contributing an answer to Unix & Linux Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f506169%2fhow-to-allow-ssh-over-ppp%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Loup dans la culture

How to solve the problem of ntp “Unable to contact time server” from KDE?

Connection limited (no internet access)