[LUNI] PPTP Vpn Connections

[Trev Peterson]

It seems you are failing authentication.  I have a working config for
this that you may be able to compare it to.

aegir ppp # cat /etc/ppp/peers/testvpn
pty "pptp testvpn.advanced-reality.com --nolaunchpppd"
name TEST\\testuser
remotename PPTP
require-mppe-128
file /etc/ppp/options.pptp
ipparam testvpn


aegir ppp # cat /etc/ppp/options.pptp
# Lock the port
lock

# Authentication
# We don't need the tunnel server to authenticate itself
noauth

# We won't do EAP, CHAP, or MSCHAP, but we will accept MSCHAP-V2
refuse-eap
refuse-chap
refuse-mschap

# Compression
# Turn off compression protocols we know won't be used
nobsdcomp
nodeflate

aegir ppp # cat /etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client        server  secret                  IP addresses
#
TEST\\testuser PPTP "testpassword" *


Hope this helps

	Trev

On Sun, 2007-04-22 at 23:39 -0500, Craig Van Tassle wrote:
> Hello,
> 
> I'm trying to get my PPTP vpn working for a project I'm in. But I cant get it to
>  connect. It works under the windows PPTP client but not under linux.
> 
> This is the log I get and I'm now sure where I should go from here.
> 
> dragon% sudo pon $VPN debug dump logfd 2 nodetach
> pppd options in effect:
> debug           # (from command line)
> nodetach                # (from command line)
> logfd 2         # (from command line)
> dump            # (from command line)
> noauth          # (from /etc/ppp/options.$VPN)
> name $USERID           # (from /etc/ppp/peers/$VPN)
> remotename $VPN         # (from /etc/ppp/peers/$VPN)
>                 # (from /etc/ppp/options.$VPN)
> pty pptp $VPN_SERVER_IP  --nolaunchpppd          # (from /etc/ppp/peers/$VPN)
> lcp-echo-failure 10             # (from /etc/ppp/options.$VPN)
> lcp-echo-interval 10            # (from /etc/ppp/options.$VPN)
> ipparam ahbl            # (from /etc/ppp/peers/$VPN)
> nobsdcomp               # (from /etc/ppp/options.$VPN)
> nodeflate               # (from /etc/ppp/options.$VPN)
> using channel 17
> Using interface ppp0
> Connect: ppp0 <--> /dev/pts/0
> sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xe15ef011> <pcomp> <accomp>]
> rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xfa1e7de5>
> <pcomp> <accomp>]
> No auth is possible
> sent [LCP ConfRej id=0x1 <auth chap MS-v2>]
> rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xe15ef011> <pcomp> <accomp>]
> rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0xfa1e7de5> <pcomp> <accomp>]
> sent [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0xfa1e7de5> <pcomp> <accomp>]
> sent [LCP EchoReq id=0x0 magic=0xe15ef011]
> sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
> rcvd [LCP EchoReq id=0x0 magic=0xfa1e7de5]
> sent [LCP EchoRep id=0x0 magic=0xe15ef011]
> rcvd [LCP TermReq id=0x3 "peer refused to authenticate"]
> LCP terminated by peer (peer refused to authenticate)
> sent [LCP TermAck id=0x3]
> Modem hangup
> Connection terminated.
> Script pptp $VPN_SERVER_IP  --nolaunchpppd finished (pid 30383), status = 0x0
-- 
Trev Peterson
Advanced Reality
Email: trev at advanced-reality.com
Phone: +1 847 406 9018