[pptp-server] Windows XP, and it's inability to Browse HTML pages when on VPN.

[Jerry Vonau]

Try setting the mtu option in the /options.pptpd file. I dug this out of my 
email You'll have to read the thread from the bottom up:

Jerry,

mtu 1452 in pptp options file FIXED the URL problem!!
I'll try OutLook tomorrow.

THANKS!


Joe Polcari wrote:

> Jerry,
>
> Does this mean that since I am masqing anything coming in on my eth0 
interface
> and going out any interface except eth0, that I should set eth0 MTU
> to 1452 or the PPP interface MTU to 1452?
>
> Joe
>
> Jerry Vonau wrote:
>
> > Joe:
> >
> > Well I'll try to explain..
> >
> > The web server on the lan see the pptp server's lan card has
> > a mtu of 1500,
> > but if it sends the max of 1500 then it will not fit into
> > the ppp frame.
> > There is overhead involved with the encapsulation, as a
> > result it has to
> > fragment the frame. If it has the "don't fragment bit" set
> > then it can't
> > go any farther down the pipe....
> >
> > Found this at :
> > http://feenix.burgiss.net/ldp/adsl/configure.html
> >
> > ----quote------
> >
> > Note: PPPoE adds 8 bytes of extra overhead to the ethernet
> > frames
> > and the correct maximum setting for the ppp0 interface MTU
> > is
> > 1492. If the MTU is set too high, it may cause failure of
> > some web
> > pages to load properly, and possibly other annoying problems
> > related
> > to Path MTU Discovery. You may need to also set the MTU for
> > interfaces
> > on any masqueraded LAN connections MTU to 1452. This does
> > not apply to
> > PPPoA, or bridged configurations, just PPPoE!
> > ----------------
> >
> > Since both PPPoE and PPTP run on PPPD this may be the same
> > type of problem.
> >
> > Just a shot in the dark, but it fits what your are
> > describing
> >
> > Jerry
> >
> > Joe Polcari wrote:
> > >
> > > No, I haven't. Can you explain why that might make a difference
> > > based on the address of the web page???
> > >
> > > Jerry Vonau wrote:
> > >
> > > > Joe:
> > > >
> > > > Have you tried playing with the mtu settings on either the ppp link or 
the
> > > > ethernet interface for the lan? Sounds like a fragmentation problem to 
me, similar
> > > > to some PPPoE problems loading web pages.
> > > >
> > > > Jerry Vonau
> > > >
> > > > Joe Polcari wrote:
> > > >
> > > > > Nope. That's not it.
> > > > > I can go to http://www.vibrationresearch.com or
> > > > > http://www.vibrationresearch.com/
> > > > > but not to
> > > > > http://www.vibrationresearch.com/pptpd or
> > > > > http://www.vibrationresearch.com/pptpd/
> > > > >
>
> To see more info, follow the thread - Joe



http://lists.schulte.org/pipermail/pptp-server/
Dec 2001 to view the whole thread





-----Original Message-----
From:	Matthew Gavin [SMTP:matt at tempo.com.au]
Sent:	Thursday, August 01, 2002 09:21 PM
To:	PPTPD User Group
Subject:	[pptp-server] Windows XP, and it's inability to Browse HTML pages when 
on VPN.

Hi all, I recently upgraded my VPN to pptpd-1.1.3-1 and ppp-mppe-2.4.1-6.

Everything has been working perfectly, however... I just found that Windows XP 
cannot view
Web Pages, in particular my Intranet.

Windows 2000/NT4/9x have no problems whatsoever. My config is very simple 
(follows), I'm
at a loss here... I know it is VPN related because when the user dials in 
directly via
ppp, the Intranet page is accessible. As soon as I get him to connect through 
the VPN, it
fails. I don't get any errors, the page just does not load.

All clients are using Internet Explorer 6.0x... Has anyone encounter this 
before?

/etc/ppp/options.pptpd:
#
lock
debug
name poptop
proxyarp
#chapms-strip-domain
+chap
#-chap
-chapms
+chapms-v2
mppe-128
mppe-stateless
#ms-wins your.server.here
ms-dns 10.1.1.2
--------------------------------------------
/etc/pptpd.conf:
#
option /etc/ppp/options.pptpd
debug
localip 203.41.208.130
remoteip 203.41.208.192-253

Thanks in advance.
Matt Gavin


_______________________________________________
pptp-server maillist  -  pptp-server at lists.schulte.org
http://lists.schulte.org/mailman/listinfo/pptp-server
--- To unsubscribe, go to the url just above this line. --