[pptp-server] Where'd my encryption go?!?

jdonahue at agiletech.com jdonahue at agiletech.com
Sun Mar 4 22:14:07 CST 2001


Yes, other clients (W2K) connect fine with 40-bit encryption. Seems that
128-bit is where things get hung up...



                                                                                                                            
                    George Vieira                                                                                           
                    <GeorgeV at citadelcomput        To:     jdonahue at agiletech.com                                            
                    er.com.au>                    cc:                                                                       
                                                  Subject:     RE: [pptp-server] Where'd my encryption go?!?                
                    03/04/2001 05:40 PM                                                                                     
                                                                                                                            
                                                                                                                            




Sorry for being late and I haven't checked for any other posts from other
people bout this one..

Mar  2 08:30:18 SSTVPN1 pppd[1266]: LCP terminated by peer
(WM-mle^@<M-Mt^@^@^BM-f)

This line worries me.. looks like junk from the client.. can any other
client connect OK?


thanks,
George Vieira


-----Original Message-----
From: jdonahue at agiletech.com [mailto:jdonahue at agiletech.com]
Sent: Saturday, March 03, 2001 1:38 AM
To: George Vieira
Cc: pptp-server
Subject: RE: [pptp-server] Where'd my encryption go?!?



here is the failed connection now:

Mar  2 08:30:09 SSTVPN1 pptpd[1265]: CTRL: Client 192.168.1.47 control
connection started
Mar  2 08:30:09 SSTVPN1 pptpd[1265]: CTRL: Starting call (launching pppd,
opening GRE)
Mar  2 08:30:09 SSTVPN1 pppd[1266]: pppd 2.3.11 started by root, uid 0
Mar  2 08:30:09 SSTVPN1 pppd[1266]: Using interface ppp0
Mar  2 08:30:09 SSTVPN1 pppd[1266]: Connect: ppp0 <--> /dev/pts/0
Mar  2 08:30:09 SSTVPN1 pptpd[1265]: GRE: Discarding duplicate packet
Mar  2 08:30:11 SSTVPN1 pptpd[1265]: CTRL: Ignored a SET LINK INFO packet
with real ACCMs!
Mar  2 08:30:12 SSTVPN1 pppd[1266]: MSCHAP-v2 peer authentication succeeded
for donahuej
Mar  2 08:30:12 SSTVPN1 pppd[1266]: found interface eth1 for proxy arp
Mar  2 08:30:12 SSTVPN1 pppd[1266]: local  IP address 192.168.1.202
Mar  2 08:30:12 SSTVPN1 pppd[1266]: remote IP address 192.168.1.207
Mar  2 08:30:18 SSTVPN1 pptpd[1265]: CTRL: Ignored a SET LINK INFO packet
with real ACCMs!
Mar  2 08:30:18 SSTVPN1 pppd[1266]: LCP terminated by peer
(WM-mle^@<M-Mt^@^@^BM-f)
Mar  2 08:30:21 SSTVPN1 pppd[1266]: Connection terminated.
Mar  2 08:30:21 SSTVPN1 pppd[1266]: Connect time 0.2 minutes.
Mar  2 08:30:21 SSTVPN1 pppd[1266]: Sent 718 bytes, received 2550 bytes.
Mar  2 08:30:21 SSTVPN1 pppd[1266]: Exit.
Mar  2 08:30:21 SSTVPN1 pptpd[1265]: GRE:
read(fd=5,buffer=804d8c0,len=8196) from PTY failed: status = -1 error =
Input/output error
Mar  2 08:30:21 SSTVPN1 pptpd[1265]: CTRL: PTY read or GRE write failed
(pty,gre)=(5,6)
Mar  2 08:30:21 SSTVPN1 pptpd[1265]: CTRL: Client 192.168.1.47 control
connection finished





                    George Vieira

                    <GeorgeV at citadelcomput        To:
jdonahue at agiletech.com
                    er.com.au>                    cc:

                                                  Subject:     RE:
[pptp-server] Where'd my encryption go?!?
                    03/01/2001 05:30 PM









Check your /var/log/messages file again.. I've seen so many 619 errors that
you'd think it would burn in the back of your brain by now...



thanks,
George Vieira


-----Original Message-----
From: jdonahue at agiletech.com [mailto:jdonahue at agiletech.com]
Sent: Friday, March 02, 2001 9:25 AM
To: George Vieira
Cc: pptp-server at lists.schulte.org
Subject: RE: [pptp-server] Where'd my encryption go?!?



Figured it out. In the 10 mins between pptp connections, I installed MS IE
128bit encryption upgrade....that's what broke.

Windows is requireing 128 bit encryption.
This WAS my options file:
lock
debug
auth
require-chap
proxyarp
+chap
+chapms
+chapms-v2
mppe-40
mppe-128
mppe-stateless
ms-wins 192.168.1.9

I took out the mppe-40, and tried again...got further....verified
username/password, then when it got to "Registering your computer on the
network", it disconnected with error code 619: The specified port is not
connected...how do I get the server working with 128 bit???





                    George Vieira

                    <GeorgeV at citadelcomput        To:
jdonahue at agiletech.com
                    er.com.au>                    cc:

                                                  Subject:     RE:
[pptp-server] Where'd my encryption go?!?
                    03/01/2001 04:58 PM









Do what I do... Delete the DUN icon which connects and start a new one..
test it.

If that fails, start reducing things until it works... if your sure it's
MPPE failing then when you turn off encryption then it'll work.. but test
anyway..


thanks,
George Vieira


-----Original Message-----
From: jdonahue at agiletech.com [mailto:jdonahue at agiletech.com]
Sent: Friday, March 02, 2001 9:03 AM
To: George Vieira
Cc: pptp-server
Subject: RE: [pptp-server] Where'd my encryption go?!?



Looks like this is a client side issue, just found out others are able to
connect, no problem...what should I check? (I am using W2K)






                    George Vieira

                    <GeorgeV at citadelcomput        To:
jdonahue at agiletech.com
                    er.com.au>                    cc:

                                                  Subject:     RE:
[pptp-server] Where'd my encryption go?!?
                    03/01/2001 04:41 PM









MPPE seems to be registering OK but these lines I'm worried about..

Mar  1 15:36:57 SSTVPN1 pppd[1479]: LCP terminated by peer
(JM-iYM-^K^@<M-Mt^@^@^BM-f)
Mar  1 15:36:57 SSTVPN1 pptpd[1478]: CTRL: Error with select(), quitting

What's your options look like?
This is mine.

name firewall
mru 1450
mtu 1450
auth
refuse-pap
require-chap
proxyarp
+chap
+chapms
+chapms-v2
mppe-40
mppe-128
mppe-stateless
10.10.0.10:
ms-wins 10.10.0.50
lcp-echo-failure 60
lcp-echo-interval 5



thanks,
George Vieira


-----Original Message-----
From: jdonahue at agiletech.com [mailto:jdonahue at agiletech.com]
Sent: Friday, March 02, 2001 8:44 AM
To: George Vieira
Subject: RE: [pptp-server] Where'd my encryption go?!?



Mar  1 15:36:55 SSTVPN1 pptpd[1478]: CTRL: Client 192.168.1.47 control
connection started
Mar  1 15:36:55 SSTVPN1 pptpd[1478]: CTRL: Starting call (launching pppd,
opening GRE)
Mar  1 15:36:55 SSTVPN1 pppd[1479]: pppd 2.3.11 started by root, uid 0
Mar  1 15:36:55 SSTVPN1 pppd[1479]: Using interface ppp0
Mar  1 15:36:55 SSTVPN1 pppd[1479]: Connect: ppp0 <--> /dev/pts/1
Mar  1 15:36:55 SSTVPN1 pptpd[1478]: GRE: Discarding duplicate packet
Mar  1 15:36:57 SSTVPN1 pptpd[1478]: CTRL: Ignored a SET LINK INFO packet
with real ACCMs!
Mar  1 15:36:57 SSTVPN1 kernel: PPP BSD Compression module registered
Mar  1 15:36:57 SSTVPN1 kernel: PPP MPPE compression module registered
Mar  1 15:36:57 SSTVPN1 kernel: PPP Deflate Compression module registered
Mar  1 15:36:57 SSTVPN1 pppd[1479]: MSCHAP-v2 peer authentication succeeded
for donahuej
Mar  1 15:36:57 SSTVPN1 pptpd[1478]: CTRL: Ignored a SET LINK INFO packet
with real ACCMs!
Mar  1 15:36:57 SSTVPN1 pppd[1479]: LCP terminated by peer
(JM-iYM-^K^@<M-Mt^@^@^BM-f)
Mar  1 15:36:57 SSTVPN1 pptpd[1478]: CTRL: Error with select(), quitting
Mar  1 15:36:57 SSTVPN1 pptpd[1478]: CTRL: Client 192.168.1.47 control
connection finished
Mar  1 15:36:57 SSTVPN1 pppd[1479]: Modem hangup
Mar  1 15:36:57 SSTVPN1 pppd[1479]: Connection terminated.
Mar  1 15:36:57 SSTVPN1 pppd[1479]: Connect time 0.1 minutes.
Mar  1 15:36:57 SSTVPN1 pppd[1479]: Sent 600 bytes, received 620 bytes.
Mar  1 15:36:57 SSTVPN1 pppd[1479]: Exit.





                    George Vieira

                    <GeorgeV at citadelcomput        To:
jdonahue at agiletech.com
                    er.com.au>                    cc:

                                                  Subject:     RE:
[pptp-server] Where'd my encryption go?!?
                    03/01/2001 04:14 PM






What does the /var/log/messages file say? Any MPPE errors?


thanks,
George Vieira


-----Original Message-----
From: jdonahue at agiletech.com [mailto:jdonahue at agiletech.com]
Sent: Friday, March 02, 2001 1:50 AM
To: pptp-server at lists.schulte.org
Subject: [pptp-server] Where'd my encryption go?!?


I have RH7, and have configured pptp with encryption succesfully (took long
enough). Everything was working fine, all boot scripts in place...reboot
server everything still works.

Then all of a sudden yesterday I lost encryption!....Like it was never
there! I connect - requiring encryption, ok....disconnect, 10 mins later
reconnect.....ERROR - server does not support encryption level required?!??
So....for giggles I try rebooting, I know the scripts worked ok before- but
that doesn't work....WHAT HAPPENED?

Can Anyone help me?!?

_______________________________________________
pptp-server maillist  -  pptp-server at lists.schulte.org
http://lists.schulte.org/mailman/listinfo/pptp-server
List services provided by www.schulteconsulting.com!



















More information about the pptp-server mailing list