Topic: Vpn with win98 client into SME

[Per Sorensen]

I am trying to get a win98 client to connect over the internet into a SME 5.1.2 server. In the logfile on the win machine, it says something about encryption failiure and that it does not get an ip. Here is the contents of that file:

02-15-2003 08:24:05.53 - Logf>ringsfil til Microsoft Opkaldskort er ?bnet.
02-15-2003 08:24:05.53 - Servertype er PPP (Point to Point Protocol).
02-15-2003 08:24:05.53 - FSA : Adding Control Protocol 80fd (CCP) to control
protocol chain.
02-15-2003 08:24:05.53 - FSA : Protocol not bound - skipping control
protocol 803f (NBFCP).
02-15-2003 08:24:05.53 - FSA : Adding Control Protocol 8021 (IPCP) to
control protocol chain.
02-15-2003 08:24:05.53 - FSA : Protocol not bound - skipping control
protocol 802b (IPXCP).
02-15-2003 08:24:05.53 - FSA : Adding Control Protocol c029 (CallbackCP) to
control protocol chain.
02-15-2003 08:24:05.53 - FSA : Adding Control Protocol c027 (ingen
beskrivelse) to control protocol chain.
02-15-2003 08:24:05.53 - FSA : Adding Control Protocol c023 (PAP) to control
protocol chain.
02-15-2003 08:24:05.53 - FSA : Adding Control Protocol c223 (CHAP) to
control protocol chain.
02-15-2003 08:24:05.54 - FSA : Adding Control Protocol c021 (LCP) to control
protocol chain.
02-15-2003 08:24:05.54 - LCP : Layer startet.
02-15-2003 08:24:05.54 - PPP: Sender kontrolpakke p? l'ngden 16
02-15-2003 08:24:05.54 - Data 0000: c0 21 01 01 00 0e 05 06 | .!......
02-15-2003 08:24:05.54 - Data 0008: 00 11 2a 40 07 02 08 02 | ..*@....
02-15-2003 08:24:05.55 - PPP: Modtager kontrolpakke p? l'ngden 27
02-15-2003 08:24:05.55 - Data 0000: c0 21 01 01 00 19 02 06 | .!.....
02-15-2003 08:24:05.55 - Data 0008: 00 00 00 00 03 05 c2 23 | .......#
02-15-2003 08:24:05.55 - Data 0010: 81 05 06 06 f8 4c 52 07 | .....LR.
02-15-2003 08:24:05.55 - Data 0018: 02 08 02 00 00 00 00 00 | ........
02-15-2003 08:24:05.55 - LCP : Received and accepted ACCM of 0.
02-15-2003 08:24:05.55 - LCP : Received and accepted authentication protocol
c223 (CHAP).
02-15-2003 08:24:05.55 - LCP : Received and accepted magic number 6f84c52.
02-15-2003 08:24:05.55 - LCP : Received and accepted protocol field
compression option.
02-15-2003 08:24:05.55 - LCP : Received and accepted address+control field
compression option.
02-15-2003 08:24:05.55 - PPP: Sender kontrolpakke p? l'ngden 27
02-15-2003 08:24:05.55 - Data 0000: c0 21 02 01 00 19 02 06 | .!.....
02-15-2003 08:24:05.55 - Data 0008: 00 00 00 00 03 05 c2 23 | .......#
02-15-2003 08:24:05.55 - Data 0010: 81 05 06 06 f8 4c 52 07 | .....LR.
02-15-2003 08:24:05.55 - Data 0018: 02 08 02 00 00 00 00 00 | ........
02-15-2003 08:24:05.60 - PPP: Modtager kontrolpakke p? l'ngden 16
02-15-2003 08:24:05.60 - Data 0000: c0 21 02 01 00 0e 05 06 | .!......
02-15-2003 08:24:05.60 - Data 0008: 00 11 2a 40 07 02 08 02 | ..*@....
02-15-2003 08:24:05.60 - LCP : Layer up.
02-15-2003 08:24:05.60 - CHAP : Layer startet.
02-15-2003 08:24:05.60 - PPP: Modtager kontrolpakke p? l'ngden 35
02-15-2003 08:24:05.60 - Data 0000: c2 23 01 01 00 21 10 5f | .#...!._
02-15-2003 08:24:05.60 - Data 0008: e9 bf b7 f0 97 46 fe 7a | .....F.z
02-15-2003 08:24:05.60 - Data 0010: 68 88 11 d4 a0 19 06 62 | h.....b
02-15-2003 08:24:05.60 - Data 0018: 6a 61 72 6e 65 73 65 72 | jarneser
02-15-2003 08:24:05.60 - Data 0020: 76 65 72 00 00 00 00 00 | ver.....
02-15-2003 08:24:05.60 - PPP: Sender kontrolpakke p? l'ngden 61
02-15-2003 08:24:05.60 - Data 0000: c2 23 02 01 00 3b 31 1d | .#...;1
02-15-2003 08:24:05.60 - Data 0008: 83 aa b7 9f e5 8b 14 f1 | ........
02-15-2003 08:24:05.60 - Data 0010: 37 bd 26 00 98 46 52 00 | 7.&..FR.
02-15-2003 08:24:05.60 - Data 0018: 00 00 00 00 00 00 00 00 | ........
02-15-2003 08:24:05.60 - Data 0020: ff 36 69 57 2e 33 e4 18 | .6iW.3.
02-15-2003 08:24:05.60 - Data 0028: ae 5e 12 58 18 d0 2b c4 | .^.X.+.
02-15-2003 08:24:05.60 - Data 0030: ba b5 a6 33 76 c6 1b 04 | ...3v..
02-15-2003 08:24:05.60 - Data 0038: 69 6e 66 6f 32 00 00 00 | info2...
02-15-2003 08:24:05.65 - PPP: Modtager kontrolpakke p? l'ngden 48
02-15-2003 08:24:05.65 - Data 0000: c2 23 03 01 00 2e 53 3d | .#....S=
02-15-2003 08:24:05.65 - Data 0008: 46 35 37 42 37 30 38 35 | F57B7085
02-15-2003 08:24:05.65 - Data 0010: 46 45 32 30 32 32 44 34 | FE2022D4
02-15-2003 08:24:05.65 - Data 0018: 46 37 39 42 45 30 34 34 | F79BE044
02-15-2003 08:24:05.65 - Data 0020: 46 33 45 42 30 32 39 32 | F3EB0292
02-15-2003 08:24:05.65 - Data 0028: 34 31 43 41 31 44 31 43 | 41CA1D1C
02-15-2003 08:24:05.65 - CHAP : Login was successful.
02-15-2003 08:24:05.65 - CHAP : Layer up.
02-15-2003 08:24:05.65 - IPCP : Layer startet.
02-15-2003 08:24:05.65 - IPCP : IP address is c0a89afa.
02-15-2003 08:24:05.65 - CCP : Layer startet.
02-15-2003 08:24:05.65 - PPP: Sender kontrolpakke p? l'ngden 42
02-15-2003 08:24:05.65 - Data 0000: 80 21 01 01 00 28 02 06 | .!...(..
02-15-2003 08:24:05.65 - Data 0008: 00 2d 0f 01 03 06 c0 a8 | .-......
02-15-2003 08:24:05.65 - Data 0010: 9a fa 81 06 00 00 00 00 | ........
02-15-2003 08:24:05.65 - Data 0018: 82 06 00 00 00 00 83 06 | ........
02-15-2003 08:24:05.65 - Data 0020: 00 00 00 00 84 06 00 00 | ........
02-15-2003 08:24:05.65 - Data 0028: 00 00 00 00 00 00 00 00 | ........
02-15-2003 08:24:05.65 - PPP: Sender kontrolpakke p? l'ngden 17
02-15-2003 08:24:05.65 - Data 0000: 80 fd 01 01 00 0f 12 06 | ........
02-15-2003 08:24:05.65 - Data 0008: 01 00 00 01 11 05 00 01 | ........
02-15-2003 08:24:05.65 - Data 0010: 04 00 00 00 00 00 00 00 | ........
02-15-2003 08:24:05.65 - PPP: Modtager kontrolpakke p? l'ngden 18
02-15-2003 08:24:05.65 - Data 0000: 80 21 01 01 00 10 03 06 | .!......
02-15-2003 08:24:05.65 - Data 0008: c0 a8 9a 01 02 06 00 2d | .......-
02-15-2003 08:24:05.65 - Data 0010: 0f 01 00 00 00 00 00 00 | ........
02-15-2003 08:24:05.65 - IPCP : Received and accepted IP address of
c0a89a01.
02-15-2003 08:24:05.65 - IPCP : Received and accepted compression protocol
request f 1.
02-15-2003 08:24:05.65 - PPP: Sender kontrolpakke p? l'ngden 18
02-15-2003 08:24:05.65 - Data 0000: 80 21 02 01 00 10 03 06 | .!......
02-15-2003 08:24:05.65 - Data 0008: c0 a8 9a 01 02 06 00 2d | .......-
02-15-2003 08:24:05.65 - Data 0010: 0f 01 00 00 00 00 00 00 | ........
02-15-2003 08:24:05.65 - PPP: Modtager kontrolpakke p? l'ngden 12
02-15-2003 08:24:05.65 - Data 0000: 80 fd 01 01 00 0a 12 06 | ........
02-15-2003 08:24:05.65 - Data 0008: 01 00 00 40 00 00 00 00 | ...@....
02-15-2003 08:24:05.65 - CCP : NAK unrecognized compression value 40.
02-15-2003 08:24:05.77 - PPP: Modtager kontrolpakke p? l'ngden 42
02-15-2003 08:24:05.77 - Data 0000: 80 21 02 02 00 28 02 06 | .!...(..
02-15-2003 08:24:05.77 - Data 0008: 00 2d 0f 01 03 06 c0 a8 | .-......
02-15-2003 08:24:05.77 - Data 0010: 9a f9 81 06 c0 a8 9a 01 | ........
02-15-2003 08:24:05.77 - Data 0018: 82 06 c0 a8 9a 01 83 06 | ........
02-15-2003 08:24:05.77 - Data 0020: c0 a8 9a 01 84 06 c0 a8 | ........
02-15-2003 08:24:05.77 - Data 0028: 9a 01 00 00 00 00 00 00 | ........
02-15-2003 08:24:05.77 - IPCP : Layer up.
02-15-2003 08:24:05.79 - PPP: Modtager kontrolpakke p? l'ngden 12
02-15-2003 08:24:05.79 - Data 0000: 80 fd 03 02 00 0a 12 06 | ........
02-15-2003 08:24:05.79 - Data 0008: 01 00 00 40 00 00 00 00 | ...@....
02-15-2003 08:24:05.79 - CCP : NAK unrecognized compression value 40.
02-15-2003 08:24:05.79 - PPP: Sender kontrolpakke p? l'ngden 6
02-15-2003 08:24:05.79 - Data 0000: 80 fd 01 03 00 04 00 00 | ........
02-15-2003 08:24:05.83 - PPP: Modtager kontrolpakke p? l'ngden 6
02-15-2003 08:24:05.83 - Data 0000: 80 fd 02 03 00 04 00 00 | ........
02-15-2003 08:24:05.83 - CCP : Layer up.
02-15-2003 08:24:05.83 - CCP : Layer ned.
02-15-2003 08:24:05.83 - PPP: Sender kontrolpakke p? l'ngden 6
02-15-2003 08:24:05.83 - Data 0000: 80 fd 05 04 00 04 00 00 | ........
02-15-2003 08:24:05.83 - PPP: Modtager kontrolpakke p? l'ngden 35
02-15-2003 08:24:05.83 - Data 0000: c0 21 05 02 00 21 65 6e | .!...!en
02-15-2003 08:24:05.83 - Data 0008: 63 72 79 70 74 69 6f 6e | cryption
02-15-2003 08:24:05.83 - Data 0010: 20 6e 65 67 6f 74 69 61 |  negotia
02-15-2003 08:24:05.83 - Data 0018: 74 69 6f 6e 20 66 61 69 | tion fai
02-15-2003 08:24:05.83 - Data 0020: 6c 65 64 00 00 00 00 00 | led.....
02-15-2003 08:24:05.83 - LCP : Received terminate request.
02-15-2003 08:24:05.83 - LCP : Layer ned.
02-15-2003 08:24:05.83 - CHAP : Layer ned.
02-15-2003 08:24:05.83 - IPCP : Layer ned.
02-15-2003 08:24:05.83 - PPP: Sender kontrolpakke p? l'ngden 6
02-15-2003 08:24:05.83 - Data 0000: c0 21 06 02 00 04 00 00 | .!......
02-15-2003 08:24:05.83 - IPCP : Failed to clear IP address.
02-15-2003 08:24:06.30 - RAS-driver lukker.
02-15-2003 08:24:06.30 - CRC-fejl               0
02-15-2003 08:24:06.30 - Timeout-fejl           0
02-15-2003 08:24:06.30 - Justeringsfejl         0
02-15-2003 08:24:06.30 - Overl>bsfejl           0
02-15-2003 08:24:06.30 - Rammefejl              0
02-15-2003 08:24:06.30 - Bufferoverl>bsfejl     0
02-15-2003 08:24:06.30 - Ukomplette pakker      0
02-15-2003 08:24:06.30 - Byte modtaget          310
02-15-2003 08:24:06.30 - Byte sendt             277
02-15-2003 08:24:06.30 - Rammer modtaget        13
02-15-2003 08:24:06.30 - Rammer sendt           13
02-15-2003 08:24:06.30 - Logf>ringsfil til Microsoft Opkaldskort er
lukket.

Sorry it's danish....

It works fine from winXP, but we will not upgrade since this is an old er machine.

What can i do?

[Jáder Marasca]

Have you upgraded DUN to 1.4?

Nothing will work with DUN < 1.4!! Go to Micro$oft site and download it for free!

[Per Sorensen]

Jáder Marasca wrote:
>
> Have you upgraded DUN to 1.4?
>
> Nothing will work with DUN < 1.4!! Go to Micro$oft site and
> download it for free!

Nope, didn't help. Same problem!

Per

[Mark]

win 98 vpn is 40 bit encryption. SME vpn is 128 bit only - no auto fallback. Upgrade the vpn client (see http://www.knowplace.org/pptp-hints.html)

cheers

Mark

[Per Sorensen]

As far as i can see, this is for US/Canada only:

WHO? This document is for anyone who is interested in making their PPTP VPN RAS connection more secure (Notice: Due to U.S. encryption export restrictions, you have to be an U.S./Canadian citizen residing in the U.S./Canada in order to use these upgrades).

[Ed Form]

Per Sorensen wrote:
>
> As far as i can see, this is for US/Canada only:
>
> WHO? This document is for anyone who is interested in making
> their PPTP VPN RAS connection more secure (Notice: Due to
> U.S. encryption export restrictions, you have to be an
> U.S./Canadian citizen residing in the U.S./Canada in order to
> use these upgrades).

No you don't. The updates are available pretty much everywhere, and certainly in the UK. This has been the cause of a lot of hassle for people using online banking here because banks have been beefing up their security and quite a few people suddenly found they couldn't access their bank any more. An update to the high security model cures it - I must have done 20 recently.

Ed Form

[Per Sorensen]

Mark wrote:
>
> win 98 vpn is 40 bit encryption. SME vpn is 128 bit only - no
> auto fallback. Upgrade the vpn client (see
> http://www.knowplace.org/pptp-hints.html)
>
> cheers
>
> Mark


OK, that works!!

Thanks
Per