Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Mike Miguel on June 05, 2003, 01:04:27 PM

Title: VPN PPTP
Post by: Mike Miguel on June 05, 2003, 01:04:27 PM
Hi,

I would like to connect to my router-gateway SME Server 5.5 connected on Interbet by ADSL using PPTP VPN. I try to do it from a W2KSP3 connected to Internet. My server-manager seems to be well configurated
But i cannot access :

Jun  4 13:50:10 psrl-linux pptpd[3040]: CTRL: Received PPTP Control Message
(type: 15)
Jun  4 13:50:10 psrl-linux pptpd[3040]: CTRL: Got a SET LINK INFO packet
with standard ACCMs
Jun  4 13:50:41 psrl-linux pptpd[3040]: Error reading from pppd:
Input/output error
Jun  4 13:50:41 psrl-linux pptpd[3040]: CTRL: GRE read or PTY write failed
(gre,pty)=(6,5)
Jun  4 13:50:41 psrl-linux pptpd[3040]: CTRL: Client 194.206.158.191 control
connection finished
Jun  4 13:50:41 psrl-linux pptpd[3040]: CTRL: Exiting now
Jun  4 13:50:41 psrl-linux pptpd[2446]: MGR: Reaped child 3040


I checked some FAQs about PPTP and found that this error message comes from a bad configuration of /etc/ppp/options.pptpd or /etc/ppp/options

/etc/ppp/options.pptpd :

auth
+chapms-v2
chapms-strip-domain
domain xxxxx.homelinux.net
# Tell ip-up and ip-down who is running them
ipparam pptpd
nodeflate
nobsdcomp
mppe-128
mppe-stateless
require-mppe
require-mppe-stateless
ms-dns 192.168.0.1
# Server is not domain master - no ms-wins value set
name psrl-linux
netmask 255.255.255.0
proxyarp
require-chap


/etc/ppp/options :

lcp-echo-interval 30
lcp-echo-failure 2
usepeerdns
noauth
lock
noipdefault



Can you help me please telling me what's going wrong please ???



Tichakal, alone in the ghost VPN
Title: Re: VPN PPTP
Post by: guestHH on June 05, 2003, 01:36:19 PM
hmmm, my /etc/ppp/options file only contains 1 line with the word 'lock'.
Title: Re: VPN PPTP
Post by: Mike Miguel on June 05, 2003, 02:11:53 PM
In fact, the error message that appears on my W2K is :

Error 721 : the remote server does not respond

but when i check in my server, the pptpd service works and it seems that the vpn connection is stopped after some connection steps.

Jun 4 13:50:10 psrl-linux pptpd[3040]: CTRL: Received PPTP Control Message
(type: 15)
Jun 4 13:50:10 psrl-linux pptpd[3040]: CTRL: Got a SET LINK INFO packet
with standard ACCMs
Jun 4 13:50:41 psrl-linux pptpd[3040]: Error reading from pppd:
Input/output error
Jun 4 13:50:41 psrl-linux pptpd[3040]: CTRL: GRE read or PTY write failed
(gre,pty)=(6,5)
Jun 4 13:50:41 psrl-linux pptpd[3040]: CTRL: Client 194.206.158.191 control
connection finished
Jun 4 13:50:41 psrl-linux pptpd[3040]: CTRL: Exiting now
Jun 4 13:50:41 psrl-linux pptpd[2446]: MGR: Reaped child 3040



Any ideas ???

Thanks
Title: Re: VPN PPTP
Post by: Mike Miguel on June 05, 2003, 04:02:15 PM
One more thing,


I've just tried it on a XP and it works so great.

So i have two ideas :

1. it is W2K VPN client problem
2. it may be caused by the CheckPoint firewall appliance that we have in front of the W2K box. It is configured to allow pptp-vpn ( 1723 and GRE 47 )  and in the logs, no traffic seem to be blocked but i will check it in.

Thanks for your help
Title: Re: VPN PPTP
Post by: Alejandro Lengua on June 15, 2003, 02:21:41 AM
Try disabling all LCP options on your windows 2k client.

BTW Do you have the option for maximum encryption enabled on your client?