FW: [pptp-server] Thorough PPTPD Setup

[George Vieira]

Thanks for your help Tom,

has anybody work out why this encryption negotiation is failing from the
logs below? This is definately produced on the server side as a reboot fixes
it.

thanks,
George Vieira
Network Engineer
Citadel Computer Systems P/L
PH +(61)2 9955 2644
FX +(61)2 9955 2659

-----Original Message-----
From: George Vieira 
Sent: Friday, August 03, 2001 11:05 AM
To: 'Tom Eastep'
Subject: RE: [pptp-server] Thorough PPTPD Setup


OK. sorry, this data is coming from my syslog monitoring software under NT
so it's format is coming from an Access database... Hope this is of some
info for you.....


Alert	When	Server	Code	Process	Message
unknown	03/08/2001 10:50:27 AM	10.10.0.254	<150>	pptpd[27428]
CTRL: Starting call (launching pppd, opening GRE)
unknown	03/08/2001 10:50:27 AM	10.10.0.254	<29>	pppd[27429]	pppd
2.4.0 started by root, uid 0
unknown	03/08/2001 10:50:27 AM	10.10.0.254	<31>	pppd[27429]
using channel 12
unknown	03/08/2001 10:50:27 AM	10.10.0.254	<30>	pppd[27429]
Using interface ppp0
unknown	03/08/2001 10:50:27 AM	10.10.0.254	<29>	pppd[27429]
Connect: ppp0 <--> /dev/pts/2
unknown	03/08/2001 10:50:28 AM	10.10.0.254	<31>	pppd[27429]	sent
[LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap 81> <magic
0xa73bae3b> <pcomp> <accomp>]
unknown	03/08/2001 10:50:29 AM	10.10.0.254	<31>	pppd[27429]	rcvd
[LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x842b6569> <pcomp>
<accomp>]
unknown	03/08/2001 10:50:29 AM	10.10.0.254	<31>	pppd[27429]	sent
[LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x842b6569> <pcomp>
<accomp>]
unknown	03/08/2001 10:50:30 AM	10.10.0.254	<31>	pppd[27429]	rcvd
[LCP ConfReq id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x842b6569> <pcomp>
<accomp>]
unknown	03/08/2001 10:50:30 AM	10.10.0.254	<31>	pppd[27429]	sent
[LCP ConfAck id=0x1 <mru 1000> <asyncmap 0x0> <magic 0x842b6569> <pcomp>
<accomp>]
unknown	03/08/2001 10:50:30 AM	10.10.0.254	<31>	pppd[27429]	sent
[LCP ConfReq id=0x1 <mru 1450> <asyncmap 0x0> <auth chap 81> <magic
0xa73bae3b> <pcomp> <accomp>]
unknown	03/08/2001 10:50:30 AM	10.10.0.254	<31>	pppd[27429]	rcvd
[LCP ConfAck id=0x1 <mru 1450> <asyncmap 0x0> <auth chap 81> <magic
0xa73bae3b> <pcomp> <accomp>]
ok	03/08/2001 10:50:30 AM	10.10.0.254	<31>	pppd[27429]	sent
[LCP EchoReq id=0x0 magic=0xa73bae3b]
unknown	03/08/2001 10:50:31 AM	10.10.0.254	<31>	pppd[27429]
"sent [CHAP Challenge id=0x1 <76d27e804268ee5f602d7be08a8f33fa>, name =
""firewall""]"
unknown	03/08/2001 10:50:32 AM	10.10.0.254	<31>	pppd[27429]
"sent [LCP TermReq id=0x2 ""encryption negotiation failed""]"
unknown	03/08/2001 10:50:32 AM	10.10.0.254	<31>	pppd[27429]	rcvd
[IPCP ConfReq id=0x2 <addr xx.xx.xx.xx> <compress VJ 0f 01>]
unknown	03/08/2001 10:50:32 AM	10.10.0.254	<31>	pppd[27429]	rcvd
[LCP TermAck id=0x2]
unknown	03/08/2001 10:50:32 AM	10.10.0.254	<29>	pppd[27429]
Connection terminated.
unknown	03/08/2001 10:50:33 AM	10.10.0.254	<30>	pppd[27429]
Connect time 0.1 minutes.
unknown	03/08/2001 10:50:33 AM	10.10.0.254	<30>	pppd[27429]	Sent
56 bytes, received 62 bytes.
unknown	03/08/2001 10:50:33 AM	10.10.0.254	<30>	pppd[27429]
Exit.

thanks,
George Vieira
Network Engineer
Citadel Computer Systems P/L
PH +(61)2 9955 2644
FX +(61)2 9955 2659

-----Original Message-----
From: Tom Eastep [mailto:teastep at seattlefirewall.dyndns.org]
Sent: Friday, August 03, 2001 10:27 AM
To: George Vieira
Subject: Re: [pptp-server] Thorough PPTPD Setup


On Thursday 02 August 2001 05:20 pm, George Vieira wrote:
> I have enabled debug in the options.pptp on both the linux pptp
> server and linux pptp client and the most I got was
>
> Aug  3 10:11:35 firewall pppd[16199]: MSCHAP-v2 peer authentication
> succeeded for georgevvpn
> Aug  3 10:11:35 firewall pppd[16199]: Deflate (15) compression
> enabled Aug  3 10:11:35 firewall pppd[16199]: Connection terminated.
> Aug  3 10:11:35 firewall pppd[16199]: Connect time 0.1 minutes. Aug 
> 3 10:11:35 firewall pppd[16199]: Sent 56 bytes, received 78 bytes.
> Aug  3 10:11:35 firewall pppd[16199]: Exit.
> Aug  3 10:11:35 firewall pptpd[16198]: Error reading from pppd:
> Input/output error
> Aug  3 10:11:35 firewall pptpd[16198]: CTRL: GRE read or PTY write
> failed (gre,pty)=(6,5)
> Aug  3 10:11:35 firewall pptpd[16198]: CTRL: Client 144.137.66.4
> control connection finished
>

You didn't modify syslog.conf correctly and/or didn't restart syslogd 
afterward....

-Tom
-- 
Tom Eastep          \  teastep at seattlefirewall.dyndns.org
ICQ #60745924        \ http://seattlefirewall.dyndns.org
Shoreline, Washington \__________________________________________