Connect to a Microsoft VPN trough a wireless network

masterkorp · 2010-10-20 10:46:59

Hello i am having problems connecting to a Microsoft VPN trough a wireless network.

The wireless network it self is open, so i connect and request an IP.
If i open my browser connect it gets me redirected to a page to configure the VPN (windows only).

I configured my profile like this:

Here is my /etc/ppp/options.pptp file (modified)

###############################################################################
# $Id: options.pptp,v 1.3 2006/03/26 23:11:05 quozl Exp $
#
# Sample PPTP PPP options file /etc/ppp/options.pptp
# Options used by PPP when a connection is made by a PPTP client.
# This file can be referred to by an /etc/ppp/peers file for the tunnel.
# Changes are effective on the next connection.  See "man pppd".
#
# You are expected to change this file to suit your system.  As
# packaged, it requires PPP 2.4.2 or later from http://ppp.samba.org/
# and the kernel MPPE module available from the CVS repository also on
# http://ppp.samba.org/, which is packaged for DKMS as kernel_ppp_mppe.
###############################################################################

# Lock the port
lock

# Authentication
# We don't need the tunnel server to authenticate itself
noauth

# We won't do PAP, EAP, CHAP, or MSCHAP, but we will accept MSCHAP-V2
# (you may need to remove these refusals if the server is not using MPPE)
refuse-pap
refuse-eap
refuse-chap
refuse-mschap

# Compression
# Turn off compression protocols we know won't be used
nobsdcomp
nodeflate

# Encryption
# (There have been multiple versions of PPP with encryption support,
# choose with of the following sections you will use.  Note that MPPE
# requires the use of MSCHAP-V2 during authentication)

# http://ppp.samba.org/ the PPP project version of PPP by Paul Mackarras
# ppp-2.4.2 or later with MPPE only, kernel module ppp_mppe.o
# {{{
# Require MPPE 128-bit encryption
#require-mppe-128
# }}}

# http://polbox.com/h/hs001/ fork from PPP project by Jan Dubiec
# ppp-2.4.2 or later with MPPE and MPPC, kernel module ppp_mppe_mppc.o
# {{{
# Require MPPE 128-bit encryption
#mppe required,stateless
# }}}

here is my /etc/ppp/cahp-secrets (password changed for security reasons)

# Secrets for authentication using CHAP
# client    server    secret            IP addresses
campus.ismai.pt\\cdsi21423 PPTP 13716008 *

My /etc/ppp/peers/<profile>

remotename PPTP
ipparam ismai
pty "pptp 10.0.5.254 --nolaunchpppd"
name campus.ismai.pt\\cdsi21423
require-mppe-128
require-mppe-40
usepeerdns
refuse-eap
noauth
file /etc/ppp/options.pptp

so i connect to the VPN using pon and here is my log

Oct 20 10:33:03 localhost dhcpcd[2718]: wlan0: leased 10.0.5.122 for 10800 seconds
Oct 20 10:33:03 localhost dhcpcd[2718]: forked to background, child pid 2742
Oct 20 10:33:09 localhost pppd[2745]: pppd 2.4.5 started by root, uid 0
Oct 20 10:33:09 localhost pppd[2745]: Using interface ppp0
Oct 20 10:33:09 localhost pppd[2745]: Connect: ppp0 <--> /dev/pts/1
Oct 20 10:33:09 localhost pptp[2746]: anon log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Oct 20 10:33:09 localhost pptp[2750]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Oct 20 10:33:09 localhost pptp[2750]: anon log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Oct 20 10:33:09 localhost pptp[2750]: anon log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Oct 20 10:33:10 localhost pptp[2750]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Oct 20 10:33:10 localhost pptp[2750]: anon log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Oct 20 10:33:10 localhost pptp[2750]: anon log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 24192).
Oct 20 10:33:13 localhost pppd[2745]: CHAP authentication succeeded
Oct 20 10:33:13 localhost pppd[2745]: MPPE 128-bit stateless compression enabled
Oct 20 10:33:13 localhost pppd[2745]: Cannot determine ethernet address for proxy ARP
Oct 20 10:33:13 localhost pppd[2745]: local  IP address 192.168.7.109
Oct 20 10:33:13 localhost pppd[2745]: remote IP address 192.168.6.109
Oct 20 10:33:13 localhost pppd[2745]: primary   DNS address 10.0.3.11
Oct 20 10:33:13 localhost pppd[2745]: secondary DNS address 10.0.3.11
Oct 20 10:34:10 localhost pptp[2750]: anon log[logecho:pptp_ctrl.c:677]: Echo Reply received.

In theory every thing is correct, right ?

My ppp0 interface is right by running ifconfig ppp0.

But when i open Firefox i keep being redirect to that configure page.

I talked to the network admin and he said, that is not net access any computer inside the VPN just the VPN Server itself so there is no there no add a route ( i tried anyway, but still the same). And it just said "just install windows like everyone else"

My toughs about this problem are:
Since in theory we have to interfaces that gives me Internet access (wlan0 and ppp0) but the wlan0 only redirects me to a certain page.
So i think that my Firefox is using wlan0 instead of ppp0 to access the internet. But the problem is that i don't have the knowlege to confirm this and try to fix.

So any help will welcome !

skanky · 2010-10-21 12:48:11

I've set this up recently and I've seen similar behaviour in that FFX wouldn't use ppp0 and so I couldn't access the company intranet. This was with FFX already running though, and I've not (yet) tried it starting up after the connection has been made. My set-up is different though in that I'm not using a public wireless network - though the cause seems to be the same.

FWIW the look-up I was doing was quick and elinks picked up the VPN DNS etc. immediately and worked no problem - hence why I haven't yet looked into this further. I'm hoping to get it sorted soon though - so post back here if you do find something.

In the meantime, I *think* I've set up my routing correctly (need to double check), but this page may help you:
http://pptpclient.sourceforge.net/routing.phtml

-------

EDIT: well that solved mine quickly. I selected "Work Offline", then "Work Online" and bang it started working. If that doesn't solve yours, you probably need to look into your routing. Let me know if you need examples.

Last edited by skanky (2010-10-21 12:54:00)

Arch Linux

#1 2010-10-20 10:46:59

Connect to a Microsoft VPN trough a wireless network

#2 2010-10-21 12:48:11

Re: Connect to a Microsoft VPN trough a wireless network

Board footer