[pptp-server] LCP: timeout sending Config-Requests

[Patrick Reid]

I bet that the problem is that these firewalls don't allow protocol 47 (GRE)
through. The way PPTP works is that the connection is established and
controlled via communication on TCP port 1723, but the actual tunnel is
established using GRE (as opposed to TCP or UDP, say).

So if a firewall allowed TCP/IP traffic, the calling computer could
establish a connection, but would be unable to actually establish the
tunnel.

Patrick Reid


-----Original Message-----
From: pptp-server-admin at lists.schulte.org
[mailto:pptp-server-admin at lists.schulte.org]On Behalf Of Brian Aust
Sent: July 5, 2000 10:59 AM
To: 'root'; pptp-server at lists.schulte.org
Subject: RE: [pptp-server] LCP: timeout sending Config-Requests



> -----Original Message-----
> From: root [mailto:root at intcolor.eu
rocolor.com.pl]
> Sent: Wednesday, July 05, 2000 8:27 AM

> I want to have pptp server on 195.117.18.137 (Linux) and
> clients on Win98.
>
> My files:
>
> /etc/ppp/options:
> debug
> name my_server
> auth
> proxyarp
> +chap
> lock
>
> /etc/pptpd.conf:
> speed 115200
> debug
> localip 10.10.20.1
> remoteip 10.10.20.10-40
>
> /etc/ppp/chap-secrets:
> test	my_server	password	*
>
>
> In /var/log/messages:
> Jul  5 13:47:14 intcolor pptpd[20919]: CTRL: Client
> 212.106.2.229 control connection started
> Jul  5 13:47:14 intcolor pptpd[20919]: CTRL: Starting call
> (launching pppd, opening GRE)
> Jul  5 13:47:14 intcolor pppd[20920]: pppd 2.3.8 started by
> root, uid 0
> Jul  5 13:47:14 intcolor pppd[20920]: Using interface ppp0
> Jul  5 13:47:14 intcolor pppd[20920]: Connect: ppp0 <--> /dev/pts/0
> Jul  5 13:47:44 intcolor pppd[20920]: LCP: timeout sending
> Config-Requests
> Jul  5 13:47:44 intcolor pppd[20920]: Connection terminated.
> Jul  5 13:47:44 intcolor pppd[20920]: Exit.
> Jul  5 13:47:44 intcolor pptpd[20919]: Error reading from
> pppd: Input/Output error
> Jul  5 13:47:44 intcolor pptpd[20919]: CTRL: GRE read or PTY
> write failed (gre,pty)=(5,4)
> Jul  5 13:47:44 intcolor pptpd[20919]: CTRL: Client
> 212.106.2.229 control connection finished
>
> In /var/log/pptpd, there is also:
> Jul  5 13:47:14 intcolor pppd[20920]: sent [LCP ConfReq
> id=0x1 <asyncmap 0x0> <auth chap 81> <magic 0xc38551c4>
> <pcomp> <accomp>]
> Jul  5 13:47:41 intcolor last message repeated 9 times
>
> Any ideas?
> Michal Kuratczyk


The W98 client with which you're trying to connect to the poptop server...
where is it?  And mainly, is it in an office or someplace which might be
behind a firewall?  Also, is your poptop server behind a firewall?

I FINALLY got my poptop working in the clear as of last Friday, and it
turned out that the culprit was Checkpoint Firewall-1.  My poptop server had
been behind that firewall, and while FW-1 SUPPOSEDLY allows all PPTP traffic
through, I got wind of the fact that several other people found that they
"just couldn't get poptop to work behind FW-1"...   so i wound up slapping
the poptop server out alongside the firewall with an internal and external
NIC, and presto!! problem solved.

However, i still get that EXACT SAME error message you get whenever a W98
client behind certain firewalls tries to connect.  I have no problems
connecting from an AOL dialup or from RoadRunner cable modems, but a
colleague in the UK who sits in an office behind a firewall can't connect
and I get those LCP: timeout error messages whenever he tries.  Thus far,
i've simply concluded that some W98 clients behind certain firewalls just
can't do it.

HTH,
Brian


Brian R. Aust
Manager of Information Technology
Health Decisions, Inc.
1512 East Franklin St.  Suite 200
Chapel Hill, NC   27514
919.967.2399 x247
baust at healthdec.com
_______________________________________________
pptp-server maillist  -  pptp-server at lists.schulte.org
http://lists.schulte.org/mailman/listinfo/pptp-server
List services provided by www.schulteconsulting.com!