Topic: PPTP Connection Problems

[donaldrb]

Hello all,

I've been working on this one for a couple of evenings with little luck.  

I'm attempting to log into my SME server from an outside Windows machine using the PPTP protocal.  I've tried both Win98SE and XPPro machines with the same result, access is denied within a second of first making a connection.  I've looked through the forums and haven't found anything that looks like a solution.

I'm including the logs from the 98 and my SME machine.  Any help would be appreciated.

Thanks in advance.

Win 98SE:

09-21-2004 10:44:14.87 - Microsoft Dial Up Adapter log opened.
09-21-2004 10:44:14.87 - Server type is  PPP (Point to Point Protocol).
09-21-2004 10:44:14.87 - FSA : Software compression disabled.
09-21-2004 10:44:14.87 - FSA : Protocol not bound - skipping control protocol 803f (NBFCP).
09-21-2004 10:44:14.87 - FSA : Adding Control Protocol 8021 (IPCP) to control protocol chain.
09-21-2004 10:44:14.87 - FSA : Protocol not bound - skipping control protocol 802b (IPXCP).
09-21-2004 10:44:14.87 - FSA : Adding Control Protocol c029 (CallbackCP) to control protocol chain.
09-21-2004 10:44:14.87 - FSA : Adding Control Protocol c027 (no description) to control protocol chain.
09-21-2004 10:44:14.87 - FSA : Adding Control Protocol c023 (PAP) to control protocol chain.
09-21-2004 10:44:14.87 - FSA : Adding Control Protocol c223 (CHAP) to control protocol chain.
09-21-2004 10:44:14.87 - FSA : Adding Control Protocol c021 (LCP) to control protocol chain.
09-21-2004 10:44:14.87 - LCP : Layer started.
09-21-2004 10:44:14.87 - PPP : Transmitting Control Packet of length: 16
09-21-2004 10:44:14.87 - Data 0000: c0 21 01 01 00 0e 05 06 | .!......
09-21-2004 10:44:14.87 - Data 0008: 00 78 5b e4 07 02 08 02 | .x[.....
09-21-2004 10:44:15.27 - Remote access driver is shutting down.
09-21-2004 10:44:15.27 - CRC Errors             0
09-21-2004 10:44:15.27 - Timeout Errors         0
09-21-2004 10:44:15.27 - Alignment Errors       0
09-21-2004 10:44:15.27 - Overrun Errors         0
09-21-2004 10:44:15.27 - Framing Errors         0
09-21-2004 10:44:15.27 - Buffer Overrun Errors  0
09-21-2004 10:44:15.27 - Incomplete Packets     0
09-21-2004 10:44:15.27 - Bytes Received         0
09-21-2004 10:44:15.27 - Bytes Transmittted     18
09-21-2004 10:44:15.27 - Frames Received        0
09-21-2004 10:44:15.27 - Frames Transmitted     1
09-21-2004 10:44:15.27 - Microsoft Dial Up Adapter log closed.

SME Server:
Sep 21 10:56:56 dumbo pptpd[10249]: MGR: Launching /usr/sbin/pptpctrl to handle client
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: local address = 192.168.0.10
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: remote address = 192.168.0.246
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: pppd speed = 460800
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: pppd options file = /etc/ppp/options.pptpd
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: Client 216.209.247.128 control connection started
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: Received PPTP Control Message (type: 1)
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: Made a START CTRL CONN RPLY packet
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: I wrote 156 bytes to the client.
Sep 21 10:56:56 dumbo pptpd[10249]: CTRL: Sent packet to client
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: Received PPTP Control Message (type: 7)
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: Set parameters to 0 maxbps, 16 window size
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: Made a OUT CALL RPLY packet
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: Starting call (launching pppd, opening GRE)
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: pty_fd = 5
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: tty_fd = 6
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: I wrote 32 bytes to the client.
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: Sent packet to client
Sep 21 10:56:57 dumbo pptpd[10250]: CTRL (PPPD Launcher): Connection speed = 460800
Sep 21 10:56:57 dumbo pptpd[10250]: CTRL (PPPD Launcher): local address = 192.168.0.10
Sep 21 10:56:57 dumbo pptpd[10250]: CTRL (PPPD Launcher): remote address = 192.168.0.246
Sep 21 10:56:57 dumbo pptpd[10249]: GRE: read(fd=5,buffer=804d940,len=8196) from PTY failed: status = -1 error = Input/output error
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: PTY read or GRE write failed (pty,gre)=(5,6)
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: Client 216.209.247.128 control connection finished
Sep 21 10:56:57 dumbo pptpd[10249]: CTRL: Exiting now
Sep 21 10:56:57 dumbo pptpd[9756]: MGR: Reaped child 10249

[smeghead]

Info required on SME Version, contribs/updates installed, VPN client settings, using ADSL modem/router (brand & model), etc

You get the idea.  No point postulating in a vacuum!

[briank]

Hi Donald
If you are behind a router check it is passing protocol 47 GRE
See http://forums.contribs.org/index.php?topic=23090.0
Regards
Brian

[donaldrb]

Right... details.  That makes sense.

Network Topology:
SME Server: Version 6.0.1-01 being used as a file/backup/internet gateway/email server for a small number (five) of clients.  No updates installed.  SME version 6.0.01-01 has been up and running for just under a couple of weeks.  Version 5 had been running on the same machine for > 2 years, but PPTP was never enabled as the network connectivity was until recently, a dial-up connection.
Modem: Motorola Surfboard and is connected directly to the SME server.
Clients: Mixed Win98SE/XPPro network environment using a static IP number plan.  
Misc: Linksys 802.11b wireless router used only as a wireless hub.  Other than a couple of wired hubs for connectivity, there is no other significant hardware.

VPN Client Configuration:  As noted, I've tried to connect using both XPPro and Win98 machines.  In the case of the XP machine, I followed a contribs.org forum contribution on how to connect to a VPN using an XP machine (with no luck).  In the case of the win98 machine, I have the following VPN options enabled (but as I've noted, I've tried just about every possible combination of options).

Enabled
Log on to network
Allowed Protocols
Only TCP/IP - the IP address is static and is set to be consistant with the number plan 192.168.0.x and designed not to confict with any internal machines.  DNS is set as per the internal network machines.  

If I've overlooked any detail, let me know.  Thanks for any help you can provide.

Regards,

Rob

[ldkeen]

Rob
Just a thought - Under ver 5 the default behaviour was to allow vpn access to everyone. Under 6 you have to go into server-manager, user accounts and specify which users will have vpn access to the server.

[donaldrb]

I enabled VPN for a couple of selected users and alas, it still doesn't work...

I'm including the logs from both the 98 and SME machines.  I think it would appear from these logs that the SME server is the machine which first terminates the communication link (outlined in red).  Any idea as to how to nail this down?


09-23-2004 15:04:19.57 - Microsoft Dial Up Adapter log opened.
09-23-2004 15:04:19.57 - Server type is  PPP (Point to Point Protocol).
09-23-2004 15:04:19.57 - FSA : Adding Control Protocol 80fd (CCP) to control protocol chain.
09-23-2004 15:04:19.57 - FSA : Protocol not bound - skipping control protocol 803f (NBFCP).
09-23-2004 15:04:19.57 - FSA : Adding Control Protocol 8021 (IPCP) to control protocol chain.
09-23-2004 15:04:19.57 - FSA : Protocol not bound - skipping control protocol 802b (IPXCP).
09-23-2004 15:04:19.57 - FSA : Adding Control Protocol c029 (CallbackCP) to control protocol chain.
09-23-2004 15:04:19.57 - FSA : Encrypted Password required.
09-23-2004 15:04:19.57 - FSA : Encrypted Password required.
09-23-2004 15:04:19.57 - FSA : Adding Control Protocol c223 (CHAP) to control protocol chain.
09-23-2004 15:04:19.57 - FSA : Adding Control Protocol c021 (LCP) to control protocol chain.
09-23-2004 15:04:19.57 - LCP : Layer started.
09-23-2004 15:04:19.57 - PPP : Transmitting Control Packet of length: 16
09-23-2004 15:04:19.57 - Data 0000: c0 21 01 01 00 0e 05 06 | .!......
09-23-2004 15:04:19.57 - Data 0008: 01 63 d9 63 07 02 08 02 | .c.c....
09-23-2004 15:04:20.11 - PPP : Received Control Packet of length: 40
09-23-2004 15:04:20.11 - Data 0000: c0 21 01 01 00 26 02 06 | .!...&..
09-23-2004 15:04:20.11 - Data 0008: 00 00 00 00 03 05 c2 23 | .......#
09-23-2004 15:04:20.11 - Data 0010: 81 05 06 29 9b 9a 28 07 | ...)..(.
09-23-2004 15:04:20.11 - Data 0018: 02 08 02 11 04 05 dc 13 | ........
09-23-2004 15:04:20.11 - Data 0020: 09 03 00 50 ba c9 c4 cc | ...P....
09-23-2004 15:04:20.11 - LCP : Received and accepted ACCM of 0.
09-23-2004 15:04:20.11 - LCP : Received and accepted authentication protocol c223 (CHAP).
09-23-2004 15:04:20.11 - LCP : Received and accepted magic number 299b9a28.
09-23-2004 15:04:20.11 - LCP : Received and accepted protocol field compression option.
09-23-2004 15:04:20.11 - LCP : Received and accepted address+control field compression option.
09-23-2004 15:04:20.11 - PPP : Transmitting Control Packet of length: 19
09-23-2004 15:04:20.11 - Data 0000: c0 21 04 01 00 11 11 04 | .!......
09-23-2004 15:04:20.11 - Data 0008: 05 dc 13 09 03 00 50 ba | ......P.
09-23-2004 15:04:20.11 - Data 0010: c9 c4 cc 00 00 00 00 00 | ........
09-23-2004 15:04:20.11 - PPP : Received Control Packet of length: 16
09-23-2004 15:04:20.11 - Data 0000: c0 21 02 01 00 0e 05 06 | .!......
09-23-2004 15:04:20.11 - Data 0008: 01 63 d9 63 07 02 08 02 | .c.c....
09-23-2004 15:04:20.12 - PPP : Received Control Packet of length: 27
09-23-2004 15:04:20.12 - Data 0000: c0 21 01 02 00 19 02 06 | .!.....
09-23-2004 15:04:20.12 - Data 0008: 00 00 00 00 03 05 c2 23 | .......#
09-23-2004 15:04:20.12 - Data 0010: 81 05 06 29 9b 9a 28 07 | ...)..(.
09-23-2004 15:04:20.12 - Data 0018: 02 08 02 00 00 00 00 00 | ........
09-23-2004 15:04:20.12 - LCP : Received and accepted ACCM of 0.
09-23-2004 15:04:20.12 - LCP : Received and accepted authentication protocol c223 (CHAP).
09-23-2004 15:04:20.12 - LCP : Received and accepted magic number 299b9a28.
09-23-2004 15:04:20.12 - LCP : Received and accepted protocol field compression option.
09-23-2004 15:04:20.12 - LCP : Received and accepted address+control field compression option.
09-23-2004 15:04:20.12 - PPP : Transmitting Control Packet of length: 27
09-23-2004 15:04:20.12 - Data 0000: c0 21 02 02 00 19 02 06 | .!.....
09-23-2004 15:04:20.12 - Data 0008: 00 00 00 00 03 05 c2 23 | .......#
09-23-2004 15:04:20.12 - Data 0010: 81 05 06 29 9b 9a 28 07 | ...)..(.
09-23-2004 15:04:20.12 - Data 0018: 02 08 02 00 00 00 00 00 | ........
09-23-2004 15:04:20.12 - LCP : Layer up.
09-23-2004 15:04:20.12 - CHAP : Layer started.
09-23-2004 15:04:20.13 - PPP : Received Control Packet of length: 28
09-23-2004 15:04:20.13 - Data 0000: c2 23 01 01 00 1a 10 97 | .#.....
09-23-2004 15:04:20.13 - PPP : Transmitting Control Packet of length: 66
09-23-2004 15:04:20.13 - Data 0000: c2 23 02 01 00 40 31 28 | .#...@1(
09-23-2004 15:04:20.13 - Data 0008: d7 9d 1d 98 59 bd 0a 81 | ...Y...
09-23-2004 15:04:20.13 - Data 0010: c1 1f f1 64 b1 71 37 00 | ..d.q7.
09-23-2004 15:04:20.13 - Data 0018: 00 00 00 00 00 00 00 82 | ........
09-23-2004 15:04:20.13 - Data 0020: eb d4 d1 49 55 f3 00 fb | ...IU...
09-23-2004 15:04:20.13 - Data 0028: 28 ad dd 7c d1 df a8 29 | (..|...)
09-23-2004 15:04:20.13 - Data 0030: 4e 6e 48 f7 25 21 5b 04 | NnH.%![.
09-23-2004 15:04:20.13 - Data 0038: 4b 49 4e 47 5c 61 64 6d | KING\adm
09-23-2004 15:04:20.13 - Data 0040: 69 6e 00 00 00 00 00 00 | in......
09-23-2004 15:04:20.27 - PPP : Received Control Packet of length: 48
09-23-2004 15:04:20.27 - Data 0000: c2 23 03 01 00 2e 53 3d | .#....S=
09-23-2004 15:04:20.27 - Data 0008: 37 45 33 42 30 41 35 45 | 7E3B0A5E
09-23-2004 15:04:20.27 - Data 0010: 45 35 31 32 35 38 30 39 | E5125809
09-23-2004 15:04:20.27 - Data 0018: 31 44 30 39 43 34 41 41 | 1D09C4AA
09-23-2004 15:04:20.27 - Data 0020: 43 44 35 43 42 39 31 39 | CD5CB919
09-23-2004 15:04:20.27 - Data 0028: 32 44 39 36 44 42 39 35 | 2D96DB95
09-23-2004 15:04:20.27 - CHAP : Login was successful.
09-23-2004 15:04:20.27 - CHAP : Layer up.
09-23-2004 15:04:20.27 - IPCP : Layer started.
09-23-2004 15:04:20.27 - IPCP : IP address is c0a8000f.
09-23-2004 15:04:20.27 - CCP : Layer started.
09-23-2004 15:04:20.27 - PPP : Transmitting Control Packet of length: 42
09-23-2004 15:04:20.27 - Data 0000: 80 21 01 01 00 28 02 06 | .!...(..
09-23-2004 15:04:20.27 - Data 0008: 00 2d 0f 01 03 06 c0 a8 | .-......
09-23-2004 15:04:20.27 - Data 0010: 00 0f 81 06 c0 a8 00 0a | ........
09-23-2004 15:04:20.27 - Data 0018: 82 06 00 00 00 00 83 06 | ........
09-23-2004 15:04:20.27 - Data 0020: 00 00 00 00 84 06 00 00 | ........
09-23-2004 15:04:20.27 - Data 0028: 00 00 00 00 00 00 00 00 | ........
09-23-2004 15:04:20.27 - PPP : Transmitting Control Packet of length: 17
09-23-2004 15:04:20.27 - Data 0000: 80 fd 01 01 00 0f 12 06 | ........
09-23-2004 15:04:20.27 - Data 0008: 01 00 00 31 11 05 00 01 | ...1....
09-23-2004 15:04:20.27 - Data 0010: 04 00 00 00 00 00 00 00 | ........
09-23-2004 15:04:20.39 - PPP : Received Control Packet of length: 12
09-23-2004 15:04:20.39 - Data 0000: 80 fd 01 01 00 0a 12 06 | ........
09-23-2004 15:04:20.39 - Data 0008: 01 00 00 40 00 00 00 00 | ...@....
09-23-2004 15:04:20.39 - CCP : NAK unrecognized compression value 40.
09-23-2004 15:04:20.39 - PPP : Transmitting Control Packet of length: 12
09-23-2004 15:04:20.39 - Data 0000: 80 fd 03 01 00 0a 12 06 | ........
09-23-2004 15:04:20.39 - Data 0008: 01 00 00 20 00 00 00 00 | ... ....
09-23-2004 15:04:20.39 - PPP : Received Control Packet of length: 6
09-23-2004 15:04:20.39 - Data 0000: 80 21 06 01 00 04 00 00 | .!......
09-23-2004 15:04:20.39 - PPP : Received Control Packet of length: 17
09-23-2004 15:04:20.39 - Data 0000: 80 fd 04 01 00 0f 12 06 | ........
09-23-2004 15:04:20.39 - Data 0008: 01 00 00 31 11 05 00 01 | ...1....
09-23-2004 15:04:20.39 - Data 0010: 04 00 00 00 00 00 00 00 | ........
09-23-2004 15:04:20.39 - PPP : Transmitting Control Packet of length: 6
09-23-2004 15:04:20.39 - Data 0000: 80 fd 01 02 00 04 00 00 | ........
09-23-2004 15:04:20.47 - PPP : Received Control Packet of length: 47
09-23-2004 15:04:20.47 - Data 0000: c0 21 05 03 00 2d 4d 50 | .!...-MP
09-23-2004 15:04:20.47 - Data 0008: 50 45 20 72 65 71 75 69 | PE requi
09-23-2004 15:04:20.47 - Data 0010: 72 65 64 20 62 75 74 20 | red but
09-23-2004 15:04:20.47 - Data 0018: 70 65 65 72 20 6e 65 67 | peer neg
09-23-2004 15:04:20.47 - Data 0020: 6f 74 69 61 74 69 6f 6e | otiation
09-23-2004 15:04:20.47 - Data 0028: 20 66 61 69 6c 65 64 00 |  failed.
09-23-2004 15:04:20.47 - LCP : Received terminate request.
09-23-2004 15:04:20.47 - LCP : Layer down.
09-23-2004 15:04:20.47 - CHAP : Layer down.
09-23-2004 15:04:20.47 - PPP : Transmitting Control Packet of length: 6
09-23-2004 15:04:20.47 - Data 0000: c0 21 06 03 00 04 00 00 | .!......
09-23-2004 15:04:20.49 - Remote access driver is shutting down.
09-23-2004 15:04:20.49 - CRC Errors             0
09-23-2004 15:04:20.49 - Timeout Errors         0
09-23-2004 15:04:20.49 - Alignment Errors       0
09-23-2004 15:04:20.49 - Overrun Errors         0
09-23-2004 15:04:20.49 - Framing Errors         0
09-23-2004 15:04:20.49 - Buffer Overrun Errors  0
09-23-2004 15:04:20.49 - Incomplete Packets     0
09-23-2004 15:04:20.49 - Bytes Received         249
09-23-2004 15:04:20.49 - Bytes Transmittted     219
09-23-2004 15:04:20.49 - Frames Received        9
09-23-2004 15:04:20.49 - Frames Transmitted     9
09-23-2004 15:04:20.49 - Microsoft Dial Up Adapter log closed.


Sep 23 15:03:48 dumbo pptpd[4032]: MGR: Launching /usr/sbin/pptpctrl to handle client
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: local address = 192.168.0.10
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: remote address = 192.168.0.246
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: pppd speed = 460800
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: pppd options file = /etc/ppp/options.pptpd
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Client 192.168.0.2 control connection started
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Received PPTP Control Message (type: 1)
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Made a START CTRL CONN RPLY packet
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: I wrote 156 bytes to the client.
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Sent packet to client
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Received PPTP Control Message (type: 7)
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Set parameters to 0 maxbps, 16 window size
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Made a OUT CALL RPLY packet
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: Starting call (launching pppd, opening GRE)
Sep 23 15:03:48 dumbo pptpd[4032]: CTRL: pty_fd = 5
Sep 23 15:03:49 dumbo pptpd[4032]: CTRL: tty_fd = 6
Sep 23 15:03:49 dumbo pptpd[4032]: CTRL: I wrote 32 bytes to the client.
Sep 23 15:03:49 dumbo pptpd[4033]: CTRL (PPPD Launcher): Connection speed = 460800
Sep 23 15:03:49 dumbo pptpd[4032]: CTRL: Sent packet to client
Sep 23 15:03:49 dumbo pptpd[4033]: CTRL (PPPD Launcher): local address = 192.168.0.10
Sep 23 15:03:49 dumbo pptpd[4033]: CTRL (PPPD Launcher): remote address = 192.168.0.246
Sep 23 15:03:49 dumbo pppd[4033]: pppd 2.4.2b1 started by root, uid 0
Sep 23 15:03:49 dumbo pppd[4033]: Starting negotiation on /dev/pts/0
Sep 23 15:03:49 dumbo kernel: divert: not allocating divert_blk for non-ethernet device ppp0
Sep 23 15:03:49 dumbo pppd[4033]: Using interface ppp0
Sep 23 15:03:49 dumbo pppd[4033]: CHAP peer authentication succeeded for admin

Sep 23 15:03:49 dumbo pppd[4033]: MPPE required but peer negotiation failed

Sep 23 15:03:49 dumbo /etc/hotplug/net.agent: assuming ppp0 is already up
Sep 23 15:03:50 dumbo pppd[4033]: Connection terminated.
Sep 23 15:03:50 dumbo pptpd[4032]: CTRL: Received PPTP Control Message (type: 12)
Sep 23 15:03:50 dumbo pppd[4033]: Connect time 0.1 minutes.
Sep 23 15:03:50 dumbo pptpd[4032]: CTRL: Made a CALL DISCONNECT RPLY packet
Sep 23 15:03:50 dumbo pppd[4033]: Sent 29 bytes, received 14 bytes.
Sep 23 15:03:50 dumbo pptpd[4032]: CTRL: Received CALL CLR request (closing call)
Sep 23 15:03:50 dumbo kernel: divert: no divert_blk to free, ppp0 not ethernet
Sep 23 15:03:50 dumbo pppd[4033]: Connect time 0.1 minutes.
Sep 23 15:03:50 dumbo pptpd[4032]: CTRL: I wrote 148 bytes to the client.
Sep 23 15:03:50 dumbo /etc/hotplug/net.agent: NET unregister event not supported
Sep 23 15:03:50 dumbo pppd[4033]: Sent 29 bytes, received 14 bytes.
Sep 23 15:03:50 dumbo pptpd[4032]: CTRL: Sent packet to client
Sep 23 15:03:50 dumbo pppd[4033]: Exit.
Sep 23 15:03:55 dumbo pptpd[4032]: CTRL: EOF or bad error reading ctrl packet length.
Sep 23 15:03:55 dumbo pptpd[4032]: CTRL: couldn't read packet header (exit)
Sep 23 15:03:55 dumbo pptpd[4032]: CTRL: CTRL read failed
Sep 23 15:03:55 dumbo pptpd[4032]: CTRL: Client 192.168.0.2 control connection finished
Sep 23 15:03:55 dumbo pptpd[4032]: CTRL: Exiting now
Sep 23 15:03:55 dumbo pptpd[2499]: MGR: Reaped child 4032

[Damian]

doanldrb,

This one is down to encryption lengths I think.

See http://pptpclient.sourceforge.net/howto-diagnosis.phtml#mppe_rbpnf

I'll look further for the fix (I've had this working on SME 6.0 using 98SE, W2K and XP clients).

Damian

[Damian]

Hi donaldrb,

I uninstalled Win98SE DUN 1.4, rebooted and reinstalled it again.

Now the VPN connection works.

It's worth mentioning that in between it working and not working I installed Netscreen Remote VPN client for another job (which didn't work either yet). Maybe netscreen stuffed DUN 1.4 ? Who knows

Take a few minutes to read this relevant post on Astaro Linux
-
http://www.astaro.org/showflat.php?Cat=&Number=26196&Main=24071

Damian

[donaldrb]

Thanks to your help everyone, I was able to determine the root of the problem.  Actually, I had a different and distinct problem on each of my two test machines, and each was not connecting for a completely different reason.

On my Win98SE machine, I determined that I needed to upgrade my DUN to version 1.4, thereby giving me the 128 bit encryption I needed.  All is well with that client.

The XP box is a little different.  I figured that the 128 encryption is already part of the OS, (which is what drew me away from thinking about encryption being the problem in the first place).  It turns out that I cannot connect when I specify a static IP... connects fine when the IP is dynamic, but not static.  Of course, given my network design, I don't even have a server assigning IP addresses.  I'm not even sure where the number comes from.

My Win98SE machine works in both dynamic and static mode, but the same is not the case for the XP client.

Any ideas?

Regardless, thanks for all the help... as you might be able to tell, I'm somewhat a newbie when it comes to Linux and I'm looking forward to the day when I can contribute as well as consume to this environment.

Cheers,

Rob

[Damian]

Hi donaldrb,

Pleased it's working on 98. I made the assumption that you already had DUN 1.4 & IE 5.5 or above. That bit wasn't made clear.

As for XP only working in DHCP mode (but you have no DHCP server) I suggest that in static IP mode that not all settings are set. Make sure you define the IP address, subnet mask, default route and DNS server. Check these from a DOS window by typing "ipconfig /all".

Damian

[jgates]

Hi donaldrb,

I had this problem and actually found....because I'd re-installed everything from scratch (including re-configuring NAT on my modem) and VPN worked before....that it was actually a modem problem.

I had to Telnet my modem and issue it a set of commands. The modem I use...an Alcatel 530 incorporates (quote) " an application level gateway (ALG) in the firmware.This allows the modem to recognise certain protocols such as IPSEC and preserve PORT in the NAT translation table which is a critical requirement for ensuring VPN connectivity. However certain VPN clients have a proprietary protocol for VPN solutions...."

Check out http://www.ozcableguy.com/ for a workaround which may fix your problem. It did mine.

The specific passthrough I used is at http://www.ozcableguy.com/alcatel.html#510

Hope this helps.

John

[donaldrb]

John,

Thanks for the heads up on the modem... I didn't realize that the modem could be part of the problem.  I'll check it out.

Rob

[jgates]

Not a problem..glad to help. It's just that after years of mucking about with Linux/Samba etc (no pun intended) I've found the SME to be so seamless so I couldn't really see the problem (in my case!!!) being something to do with a fresh new 6.0 (re)installation...so...for one of the few times in my life...think laterally...