You are not logged in.
- Topics: Active | Unanswered
#1 2013-06-18 10:43:50
- francesco_dem
- Member
- From: Napoli - Italy
- Registered: 2013-06-16
- Posts: 52
PPTP vpn connection : problem
Hi everybody,i am having problems connecting to a Microsoft VPN.
I configured my profile like this:
# Lock the port
lock
# Authentication
# We don't need the tunnel server to authenticate itself
# and the kernel MPPE module available from the CVS repository also on
# [url]http://ppp.samba.org/[/url], which is packaged for DKMS as kernel_ppp_mppe.
###############################################################################
# Lock the port
lock
# Authentication
# We don't need the tunnel server to authenticate itself
noauth
# We won't do PAP, EAP, CHAP, or MSCHAP, but we will accept MSCHAP-V2
# (you may need to remove these refusals if the server is not using MPPE)
refuse-pap
refuse-eap
refuse-chap
refuse-mschap
# Compression
# We won't do PAP, EAP, CHAP, or MSCHAP, but we will accept MSCHAP-V2
# (you may need to remove these refusals if the server is not using MPPE)
refuse-pap
refuse-eap
refuse-chap
refuse-mschap
# Compression
# Turn off compression protocols we know won't be used
nobsdcomp
nodeflate
# Encryption
# (There have been multiple versions of PPP with encryption support,
# choose with of the following sections you will use. Note that MPPE
# requires the use of MSCHAP-V2 during authentication)
# [url]http://ppp.samba.org/[/url] the PPP project version of PPP by Paul Mackarras
nobsdcomp
nodeflate
# Encryption
# (There have been multiple versions of PPP with encryption support,
# choose with of the following sections you will use. Note that MPPE
# requires the use of MSCHAP-V2 during authentication)
# [url]http://ppp.samba.org/[/url] the PPP project version of PPP by Paul Mackarras
# ppp-2.4.2 or later with MPPE only, kernel module ppp_mppe.o
# {{{
# Require MPPE 128-bit encryption
# require-mppe-128
# }}}
# [url]http://polbox.com/h/hs001/[/url] fork from PPP project by Jan Dubiec
# ppp-2.4.2 or later with MPPE and MPPC, kernel module ppp_mppe_mppc.o
# {{{
# Require MPPE 128-bit encryption
# {{{
# Require MPPE 128-bit encryption
# require-mppe-128
# }}}
# [url]http://polbox.com/h/hs001/[/url] fork from PPP project by Jan Dubiec
# ppp-2.4.2 or later with MPPE and MPPC, kernel module ppp_mppe_mppc.o
# {{{
# Require MPPE 128-bit encryption
#mppe required,stateless
# }}}here is my /etc/ppp/cahp-secrets (password changed for security reasons)
# Secrets for authentication using CHAP
# client server secret IP addresses
xtzukXXX PPTP XXXXXXXXXXXX *My /etc/ppp/peers/<profile>
pty "pptp connect.swissvpn.net --nolaunchpppd"
name xtzukysv
remotename PPTP
require-mppe-128
file /etc/ppp/options.pptp
ipparam SwissVPNso i connect to the VPN using pon and here is my log
ipparam SwissVPN # (from /etc/ppp/peers/SwissVPN)
proxyarp # (from /etc/ppp/options)
nobsdcomp # (from /etc/ppp/options.pptp)
nodeflate # (from /etc/ppp/options.pptp)
require-mppe-128 # (from /etc/ppp/peers/SwissVPN)
noipx # (from /etc/ppp/options)
using channel 1
Using interface ppp0
Connect: ppp0 <--> /dev/pts/1
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xcf93892c> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <accomp> <pcomp> <mru 1460> <magic 0x5cd6d834> <auth chap MS-v2> <mrru 2048> <ssnhf> <endpoint [MAC:00:50:56:95:00:3b]>]
sent [LCP ConfRej id=0x1 <mrru 2048> <ssnhf>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xcf93892c> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x2 <accomp> <pcomp> <mru 1460> <magic 0x5cd6d834> <auth chap MS-v2>]
sent [LCP ConfAck id=0x2 <accomp> <pcomp> <mru 1460> <magic 0x5cd6d834> <auth chap MS-v2>]
sent [LCP EchoReq id=0x0 magic=0xcf93892c]
rcvd [CHAP Challenge id=0x1 <bb1e68d107a05f3bdb8216f1b3343a09>, name = ""]
sent [CHAP Response id=0x1 <d2a453aa28c459179b1bdc7b09c9482e0000000000000000b44280f0db9355e201eb237c90384043ea26fac3f9eb128100>, name = "xtzukysv"]
rcvd [LCP EchoRep id=0x0 magic=0x5cd6d834]
rcvd [CHAP Success id=0x1 "S=245BD1EEEAA909E38650D53E9642F03F8ED472EC"]
CHAP authentication succeeded
sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [IPCP ConfReq id=0x1 <addr 80.254.79.59> <compress VJ 0f 00>]
sent [IPCP TermAck id=0x1]
rcvd [IPV6CP ConfReq id=0x1 <addr fe80::0250:56ff:fe95:003b>]
Unsupported protocol 'IPv6 Control Protocol' (0x8057) received
sent [LCP ProtRej id=0x2 80 57 01 01 00 0e 01 0a 02 50 56 ff fe 95 00 3b]
rcvd [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
sent [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 67.215.65.132>]
rcvd [IPCP ConfNak id=0x1 <addr 80.254.75.149>]
sent [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 80.254.75.149>]
rcvd [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr 80.254.75.149>]
rcvd [IPCP ConfReq id=0x2 <addr 80.254.79.59> <compress VJ 0f 00>]
sent [IPCP ConfAck id=0x2 <addr 80.254.79.59> <compress VJ 0f 00>]
Cannot determine ethernet address for proxy ARP
local IP address 80.254.75.149
remote IP address 80.254.79.59
Script /etc/ppp/ip-up started (pid 1878)
Script /etc/ppp/ip-up finished (pid 1878), status = 0x0To start my vpn connection : "pon SwissVPN" and then "route add default dev ppp0", but after 1 minutes the vpn doesn't work
[root@francescopc francesco]# sudo ifconfig -a
enp4s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.0.3 netmask 255.255.255.0 broadcast 192.168.0.255
inet6 fe80::224:8cff:fe94:707d prefixlen 64 scopeid 0x20<link>
ether 00:24:8c:94:70:7d txqueuelen 1000 (Ethernet)
RX packets 32967 bytes 23120011 (22.0 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 29277 bytes 8248892 (7.8 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 17
enp6s0: flags=4098<BROADCAST,MULTICAST> mtu 1500
ether 00:24:8c:94:70:7e txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 18
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 0 (Local Loopback)
RX packets 101 bytes 13000 (12.6 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 101 bytes 13000 (12.6 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
ppp0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1456
inet 80.254.66.22 netmask 255.255.255.255 destination 80.254.79.91
ppp txqueuelen 3 (Point-to-Point Protocol)
RX packets 7 bytes 92 (92.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 6 bytes 72 (72.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0[root@francescopc francesco]# ping -I ppp0 [url=http://www.google.com]www.google.com[/url]
PING [url=http://www.google.com]www.google.com[/url] (173.194.44.240) from 80.254.66.22 ppp0: 56(84) bytes of data.
^C
--- [url=http://www.google.com]www.google.com[/url] ping statistics ---
14 packets transmitted, 0 received, 100% packet loss, time 13008ms[root@francescopc francesco]# ping [url=http://www.google.com]www.google.com[/url]
PING [url=http://www.google.com]www.google.com[/url] (173.194.44.243) 56(84) bytes of data.
64 bytes from 173.194.44.243: icmp_seq=1 ttl=53 time=89.0 ms
64 bytes from 173.194.44.243: icmp_seq=2 ttl=53 time=90.7 ms
64 bytes from 173.194.44.243: icmp_seq=3 ttl=53 time=89.3 ms
64 bytes from 173.194.44.243: icmp_seq=4 ttl=53 time=90.5 ms
64 bytes from 173.194.44.243: icmp_seq=5 ttl=53 time=88.0 ms
64 bytes from 173.194.44.243: icmp_seq=6 ttl=53 time=88.7 ms
^C64 bytes from 173.194.44.243: icmp_seq=7 ttl=53 time=88.7 ms
--- [url=http://www.google.com]www.google.com[/url] ping statistics ---
7 packets transmitted, 7 received, 0% packet loss, time 6009ms
rtt min/avg/max/mdev = 88.052/89.307/90.755/1.000 ms[root@francescopc francesco]# sudo route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.0.1 0.0.0.0 UG 0 0 0 enp4s0
zrh1-vpn01-bge0 192.168.0.1 255.255.255.255 UGH 0 0 0 enp4s0
zrh1-vpn14-em0. 192.168.0.1 255.255.255.255 UGH 0 0 0 enp4s0
zrh1-vpn14-pptp * 255.255.255.255 UH 0 0 0 ppp0
192.168.0.0 * 255.255.255.0 U 0 0 0 enp4s0
[root@francescopc francesco]# ip route
default via 192.168.0.1 dev enp4s0
80.254.79.58 via 192.168.0.1 dev enp4s0 src 192.168.0.3
80.254.79.90 via 192.168.0.1 dev enp4s0 src 192.168.0.3
80.254.79.91 dev ppp0 proto kernel scope link src 80.254.66.22
192.168.0.0/24 dev enp4s0 proto kernel scope link src 192.168.0.3 any help will welcome!
thanks
Offline