Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: btech on July 18, 2006, 02:35:19 AM

Title: VPN Failure
Post by: btech on July 18, 2006, 02:35:19 AM

OK - I have tried different Kernels, assuming that it might be the CentOS update as the bugtracker discusses in detail, but I cannot get the VPN to work on this SME Server I am running.  Here is the log of a failed connection:

Jul 17 17:30:11 poly1 pptpd[3550]: CTRL: Starting call (launching pppd, opening GRE)
Jul 17 17:30:11 poly1 pppd[3551]: Plugin radius.so loaded.
Jul 17 17:30:11 poly1 pppd[3551]: RADIUS plugin initialized.
Jul 17 17:30:11 poly1 pppd[3551]: pppd 2.4.3 started by root, uid 0
Jul 17 17:30:11 poly1 kernel: divert: not allocating divert_blk for non-ethernet device ppp0
Jul 17 17:30:11 poly1 pppd[3551]: Using interface ppp0
Jul 17 17:30:11 poly1 pppd[3551]: Connect: ppp0 <--> /dev/pts/1
Jul 17 17:30:11 poly1 pptpd[3550]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Jul 17 17:30:11 poly1 pppd[3551]: MPPE required but peer negotiation failed
Jul 17 17:30:11 poly1 pppd[3551]: Connection terminated.
Jul 17 17:30:11 poly1 pppd[3551]: Connect time 0.0 minutes.
Jul 17 17:30:11 poly1 pppd[3551]: Sent 10 bytes, received 10 bytes.
Jul 17 17:30:11 poly1 kernel: divert: no divert_blk to free, ppp0 not ethernet
Jul 17 17:30:11 poly1 pptpd[3550]: CTRL: Reaping child PPP[3551]
Jul 17 17:30:11 poly1 pppd[3551]: Exit.

Any ideas whats up with this?  The entry about MPPE is what led me to try different kernel versions, with no luck so far ...

Thanks,
Jeff

Title: more info
Post by: btech on July 18, 2006, 02:48:46 AM

It appears I can connect through a different firewall/IP to the VPN in question (after switching the kernel on ther SME Server).  However, the XP system that cannot connect to the SME Server system CAN connect to other VPNs that are M0n0wall driven, so it isn't as simple as a GRE issue (I don't think).  I am using a PFSense firewall/router on the system having the trouble with the SME VPN.

It appears to be a very persnickety SME Server VPN issue, somwehow related possibly to PFSense as the firewall.  Has anyone run into this?

Thanks,
Jeff

Title: VPN Failure
Post by: joeblack1 on July 18, 2006, 09:35:01 AM

HI Jeff.

Try version 6.x,  as there seems to be several issues with VPN <->SME7.0.

Regards.

Title: VPN Failure
Post by: btech on July 18, 2006, 06:46:31 PM

Thanks - I will contemplate that.  I am rather fond of version 7, despite this glitch.

Any ideas about the specifics of the VPN problems?  I have another version 7 box that is working fine, and configured basically the same.  The hardware is almost identical.  However, I think that the packages are "off" somehow on the problem system, and that may be causing my problem.

Does anyone know of a simlpe mechanism for getting back to a default SME7 configuration (kernel, PPTP, etc) without having to reinstall or spend hours with Yumm verifying, removing and reinstalling versions?

Thanks,
Jeff

Title: VPN Failure
Post by: pfloor on July 21, 2006, 02:08:04 AM

> Jul 17 17:30:11 poly1 pppd[3551]: MPPE required but peer negotiation failed

This indicates that the client is not configured correctly.

Are you using Windows XP?

If so, in the connection's properties under the "security" tab, make sure you use "Typical" and "Require Data Encryption"

(http://smeserver.us/images/vpn.jpg)

Title: VPN Failure
Post by: pfloor on July 21, 2006, 02:12:39 AM

Quote from: "joeblack1"

HI Jeff.

Try version 6.x,  as there seems to be several issues with VPN <->SME7.0.

Regards.

There *were* issues with VPN in 7.0 and as far as I am aware they have all been resolved.

I use VPN daily for hours at a time transfering multiple MB of data without any issues what-so-ever.  

Do you know of any new issues that have not been reported to the bug tracker?

If there are new problems, please report them so they can get fixed.

Thanks.

Title: VPN Failure
Post by: duncan on July 21, 2006, 08:09:01 AM

Quote from: "joeblack1"

HI Jeff.

Try version 6.x,  as there seems to be several issues with VPN <->SME7.0.

Regards.

I see no problems with pptp at all in 7.0.