Hi folks,
A while back, mpd was suggested as a pptp client. I've started looking at
it. However, I'm having trouble getting it to connect. The office has a
MS server and I'm trying to connect using mpd. FWIW, I can connect via
pptp-client.
The office IP is 1.2.3.4
My dual homed gateway has an internal address of 192.168.0.21 (ie. that's
my default address for boxes on the home LAN).
The office server has internal address of 10.0.0.18
I can connect using MS CHAP V2, MPPE 128, MPPC from my W2K box.
Of note, I see this in the logs but don't know the significance: "pptp0:
CID 0xbc51 in SetLinkInfo not found"
$ less mpd.conf
default:
load vpn
vpn:
new -i ng1 vpn vpn
set iface disable on-demand
set iface addrs 192.168.0.21 10.0.1.18
set iface idle 0
set iface route 10.0.1.0/24
set pptp peer 1.2.3.4
set bundle disable multilink
set bundle authname dan
set bundle password secret
set link yes acfcomp protocomp
set link no pap
set link enable chap
set link accept chap
set ipcp no vjcomp
# set link yes chap
# If remote machine is NT you need this..
set link enable no-orig-auth
set link keep-alive 10 75
set ipcp no vjcomp
set ipcp ranges 192.168.0.21/32 10.0.1.18/32
#
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
#
set bundle disable compression
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e128
set bundle enable crypt-reqd
set ccp yes mpp-stateless
open
$ less mpd.links
vpn:
set link type pptp
set pptp self 192.168.0.21
set pptp peer 1.2.3.4
set pptp enable originate outcall
Here is what happens when I try to connect:
[dan@bast:/usr/local/etc/mpd] $ sudo /usr/local/sbin/mpd
Password:
Multi-link PPP for FreeBSD, by Archie L. Cobbs.
Based on iij-ppp, by Toshiharu OHNO.
mpd: pid 80333, version 3.8 ([EMAIL PROTECTED] 06:56 13-Jun-2002)
[vpn] ppp node is "mpd80333-vpn"
[vpn] using interface ng1
[vpn] IFACE: Open event
[vpn] IPCP: Open event
[vpn] IPCP: state change Initial --> Starting
[vpn] IPCP: LayerStart
[vpn:vpn] [vpn] bundle: OPEN event in state CLOSED
[vpn] opening link "vpn"...
[vpn] link: OPEN event
[vpn] LCP: Open event
[vpn] LCP: state change Initial --> Starting
[vpn] LCP: LayerStart
[vpn] device: OPEN event in state DOWN
pptp0: connecting to 1.2.3.4:1723
[vpn] device is now in state OPENING
pptp0: connected to 1.2.3.4:1723
pptp0: attached to connection with 1.2.3.4:1723
pptp0-0: outgoing call connected at 14808325 bps
[vpn] PPTP call successful
[vpn] device: UP event in state OPENING
[vpn] device is now in state UP
[vpn] link: UP event
[vpn] link: origination is local
[vpn] LCP: Up event
[vpn] LCP: state change Starting --> Req-Sent
[vpn] LCP: phase shift DEAD --> ESTABLISH
[vpn] LCP: SendConfigReq #1
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM b6073a2a
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: rec'd Configure Request #0 link 0 (Req-Sent)
AUTHPROTO CHAP MSOFTv2
MAGICNUM 154e5078
PROTOCOMP
ACFCOMP
CALLBACK
Not supported
MP MRRU 1614
ENDPOINTDISC [LOCAL] 71 35 8f ec 71 33 4c 72 b2 5e 3e c3 c4 1f 11 c5 00
00 00 00
UNKNOWN[23] len=4
[vpn] LCP: SendConfigRej #0
CALLBACK
MP MRRU 1614
UNKNOWN[23] len=4
[vpn] LCP: rec'd Configure Ack #1 link 0 (Req-Sent)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM b6073a2a
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: state change Req-Sent --> Ack-Rcvd
[vpn] LCP: rec'd Configure Request #1 link 0 (Ack-Rcvd)
AUTHPROTO CHAP MSOFTv2
MAGICNUM 154e5078
PROTOCOMP
ACFCOMP
ENDPOINTDISC [LOCAL] 71 35 8f ec 71 33 4c 72 b2 5e 3e c3 c4 1f 11 c5 00
00 00 00
[vpn] LCP: SendConfigAck #1
AUTHPROTO CHAP MSOFTv2
MAGICNUM 154e5078
PROTOCOMP
ACFCOMP
ENDPOINTDISC [LOCAL] 71 35 8f ec 71 33 4c 72 b2 5e 3e c3 c4 1f 11 c5 00
00 00 00
[vpn] LCP: state change Ack-Rcvd --> Opened
[vpn] LCP: phase shift ESTABLISH --> AUTHENTICATE
[vpn] LCP: auth: peer wants CHAP, I want CHAP
[vpn] CHAP: sending CHALLENGE
[vpn] LCP: LayerUp
pptp0: CID 0xbc51 in SetLinkInfo not found
[vpn] CHAP: rec'd CHALLENGE #0
Name: "ROGERT"
Using authname "dan"
[vpn] CHAP: sending RESPONSE
[vpn] CHAP: rec'd SUCCESS #0
MESG: S=D0173C96516670A95E8461386C6E401CB0C93CDE
[vpn] LCP: rec'd Configure Request #3 link 0 (Opened)
AUTHPROTO CHAP MSOFTv2
MAGICNUM 17b425d5
PROTOCOMP
ACFCOMP
CALLBACK
Not supported
MP MRRU 1614
ENDPOINTDISC [LOCAL] 71 35 8f ec 71 33 4c 72 b2 5e 3e c3 c4 1f 11 c5 00
00 00 00
UNKNOWN[23] len=4
[vpn] LCP: LayerDown
[vpn] LCP: SendConfigReq #2
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM b6073a2a
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: SendConfigRej #3
CALLBACK
MP MRRU 1614
UNKNOWN[23] len=4
[vpn] LCP: state change Opened --> Req-Sent
[vpn] LCP: phase shift AUTHENTICATE --> ESTABLISH
[vpn] LCP: rec'd Configure Reject #2 link 0 (Req-Sent)
AUTHPROTO CHAP MSOFTv2
[vpn] LCP: SendConfigReq #3
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM b6073a2a
[vpn] LCP: rec'd Configure Request #4 link 0 (Req-Sent)
AUTHPROTO CHAP MSOFTv2
MAGICNUM 17b425d5
PROTOCOMP
ACFCOMP
ENDPOINTDISC [LOCAL] 71 35 8f ec 71 33 4c 72 b2 5e 3e c3 c4 1f 11 c5 00
00 00 00
[vpn] LCP: SendConfigAck #4
AUTHPROTO CHAP MSOFTv2
MAGICNUM 17b425d5
PROTOCOMP
ACFCOMP
ENDPOINTDISC [LOCAL] 71 35 8f ec 71 33 4c 72 b2 5e 3e c3 c4 1f 11 c5 00
00 00 00
[vpn] LCP: state change Req-Sent --> Ack-Sent
pptp0: CID 0xbc51 in SetLinkInfo not found
[vpn] LCP: rec'd Configure Ack #3 link 0 (Ack-Sent)
ACFCOMP
PROTOCOMP
MRU 1500
MAGICNUM b6073a2a
[vpn] LCP: state change Ack-Sent --> Opened
[vpn] LCP: phase shift ESTABLISH --> AUTHENTICATE
[vpn] LCP: auth: peer wants CHAP, I want nothing
[vpn] LCP: LayerUp
[vpn] CHAP: rec'd CHALLENGE #0
Name: "ROGERT"
Using authname "dan"
[vpn] CHAP: sending RESPONSE
[vpn] CHAP: rec'd SUCCESS #0
MESG: S=F5963AA507E1DECD8998FC50240CB9C088AF4DA9
[vpn] LCP: authorization successful
[vpn] LCP: phase shift AUTHENTICATE --> NETWORK
[vpn] up: 1 link, total bandwidth 64000 bps
[vpn] IPCP: Up event
[vpn] IPCP: state change Starting --> Req-Sent
[vpn] IPCP: SendConfigReq #1
IPADDR 192.168.0.21
pptp0: CID 0xbc51 in SetLinkInfo not found
[vpn] IPCP: SendConfigReq #2
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #3
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #4
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #5
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #6
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #7
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #8
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #9
IPADDR 192.168.0.21
[vpn] IPCP: SendConfigReq #10
IPADDR 192.168.0.21
[vpn] IPCP: state change Req-Sent --> Stopped
[vpn] IPCP: LayerFinish
[vpn] IPCP: parameter negotiation failed
[vpn] IPCP: LayerFinish
[vpn] bundle: CLOSE event in state OPENED
[vpn] closing link "vpn"...
[vpn] bundle: CLOSE event in state CLOSED
[vpn] closing link "vpn"...
[vpn] link: CLOSE event
[vpn] LCP: Close event
[vpn] LCP: state change Opened --> Closing
[vpn] LCP: phase shift NETWORK --> TERMINATE
[vpn] up: 0 links, total bandwidth 9600 bps
[vpn] IPCP: Down event
[vpn] IPCP: state change Stopped --> Starting
[vpn] IPCP: LayerStart
[vpn] closing link "vpn"...
[vpn] LCP: SendTerminateReq #4
[vpn] LCP: LayerDown
[vpn] bundle: OPEN event in state CLOSED
[vpn] opening link "vpn"...
[vpn] link: CLOSE event
[vpn] LCP: Close event
[vpn] link: CLOSE event
[vpn] LCP: Close event
[vpn] link: OPEN event
[vpn] LCP: Open event
[vpn] LCP: state change Closing --> Stopping
pptp0: CID 0xbc51 in SetLinkInfo not found
[vpn] LCP: rec'd Terminate Ack #4 link 0 (Stopping)
[vpn] LCP: state change Stopping --> Stopped
[vpn] LCP: phase shift TERMINATE --> ESTABLISH
[vpn] LCP: LayerFinish
[vpn] device: CLOSE event in state UP
pptp0-0: clearing call
[vpn] device is now in state CLOSING
[vpn] device: DOWN event in state CLOSING
[vpn] device is now in state DOWN
[vpn] link: DOWN event
[vpn] LCP: Down event
[vpn] LCP: state change Stopped --> Starting
[vpn] LCP: phase shift ESTABLISH --> DEAD
[vpn] LCP: LayerStart
[vpn] device: OPEN event in state DOWN
[vpn] pausing 7 seconds before open
[vpn] device is now in state DOWN
[vpn] device: OPEN event in state DOWN
[vpn] device is now in state DOWN
pptp0-0: peer call disconnected res=zero? err=none
pptp0-0: killing channel
pptp0: closing connection with 1.2.3.4:1723
pptp0: killing connection with 1.2.3.4:1723
--
Dan Langille
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
