[pptp-server] MPPE encryption - compiled just fine - but still problems

[Thomas Klettke]

My setup: PPTP server on Linux, kernel 2.2.16, ppp-2.3.11, mppe_patch-open-ssl-095-mppe, poptop 
                Client: Win NT 4.0 for this example (also Win98se with similar results)

Apparently the modules compiled fine, mschap encryption works, so far so good. The problem seems to be with data encryption and data compression.

Problem #1:    When I check the "Require data encryption" field on the NT client, the connection is refused, without it works fine. 
Problem #2:    The NT client shows always a compression ratio of 0% (and that matches the reported in/out data.)

Any ideas?

Sample log with "Require data encryption" turned OFF on NT4 client

Sep 5 15:12:12 vpn pptpd[899]: CTRL: Client *** control connection started
Sep 5 15:12:12 vpn pptpd[899]: CTRL: Starting call (launching pppd, opening GRE)
Sep 5 15:12:12 vpn modprobe: modprobe: Can't locate module ppp0
Sep 5 15:12:12 vpn kernel: registered device ppp0 
Sep 5 15:12:12 vpn pppd[900]: pppd 2.3.11 started by root, uid 0
Sep 5 15:12:12 vpn pppd[900]: Using interface ppp0
Sep 5 15:12:12 vpn pppd[900]: Connect: ppp0 <--> /dev/pts/1
Sep 5 15:12:12 vpn pptpd[899]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Sep 5 15:12:12 vpn kernel: PPP BSD Compression module registered 
Sep 5 15:12:12 vpn kernel: PPP MPPE compression module registered 
Sep 5 15:12:12 vpn kernel: PPP Deflate Compression module registered 
Sep 5 15:12:12 vpn pppd[900]: MSCHAP-v2 peer authentication succeeded for billy
Sep 5 15:12:12 vpn pppd[900]: found interface eth0 for proxy arp
Sep 5 15:12:12 vpn pppd[900]: local IP address 192.168.2.230
Sep 5 15:12:12 vpn pppd[900]: remote IP address 192.168.2.240
Sep 5 15:12:43 vpn pppd[900]: CCP: timeout sending Config-Requests 
Sep 5 15:15:59 vpn pptpd[899]: CTRL: Error with select(), quitting
Sep 5 15:15:59 vpn pptpd[899]: CTRL: Client *** control connection finished
Sep 5 15:15:59 vpn pppd[900]: Modem hangup
Sep 5 15:15:59 vpn pppd[900]: Connection terminated.
Sep 5 15:15:59 vpn pppd[900]: Connect time 3.8 minutes.
Sep 5 15:15:59 vpn pppd[900]: Sent 7049 bytes, received 20078 bytes.
Sep 5 15:15:59 vpn pppd[900]: Exit.

Sep 5 15:30:00 vpn kernel: PPP MPPE compression module unregistered ===> So the module was really loaded!
And now the same, but with "Require data encryption" turned ON on NT4 client
Sep 5 16:03:42 vpn pptpd[1103]: CTRL: Client *** control connection started
Sep 5 16:03:42 vpn pptpd[1103]: CTRL: Starting call (launching pppd, opening GRE)
Sep 5 16:03:42 vpn pppd[1104]: pppd 2.3.11 started by root, uid 0
Sep 5 16:03:42 vpn pppd[1104]: Using interface ppp0
Sep 5 16:03:42 vpn pppd[1104]: Connect: ppp0 <--> /dev/pts/1
Sep 5 16:03:42 vpn pptpd[1103]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Sep 5 16:03:42 vpn kernel: PPP BSD Compression module registered 
Sep 5 16:03:42 vpn kernel: PPP MPPE compression module registered 
Sep 5 16:03:42 vpn kernel: PPP Deflate Compression module registered 
Sep 5 16:03:42 vpn pppd[1104]: MSCHAP-v2 peer authentication succeeded for billy
Sep 5 16:03:42 vpn pppd[1104]: found interface eth0 for proxy arp
Sep 5 16:03:42 vpn pppd[1104]: local IP address 192.168.2.230
Sep 5 16:03:42 vpn pppd[1104]: remote IP address 192.168.2.241
Sep 5 16:03:42 vpn pptpd[1103]: CTRL: Error with select(), quitting
Sep 5 16:03:42 vpn pptpd[1103]: CTRL: Client *** control connection finished
Sep 5 16:03:42 vpn pppd[1104]: Modem hangup
Sep 5 16:03:42 vpn pppd[1104]: Connection terminated.
Sep 5 16:03:42 vpn pppd[1104]: Connect time 0.0 minutes.
Sep 5 16:03:42 vpn pppd[1104]: Sent 669 bytes, received 611 bytes.
Sep 5 16:03:42 vpn pppd[1104]: Exit.

 

Thomas Klettke 
Network Administrator 
Aesbus Knowledge Solutions 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schulte.org/mailman/private/pptp-server/attachments/20000905/35d2fe9f/attachment.html>