How to Configure PPTP VPN users

Jossy,

you should not use PPTP because credentials are sent in plain text (use SSL Client instead). https://community.sophos.com/products/xg-firewall/f/vpn/10975/ssl-vpn-policy

You can access to cli using ssh client (putty for example) and choose option 4.

Regards,

Hi Luk

Thanks for your response on this.

I am using SSL Client and tested it already as working. However, for certain users they need to use PPTP. That's the reason, I was asking for it.

If I were to configure PPTP VPN, do I need to enable the CHAP authentication?

Could you please confirm.

Regards
Jossy

Jossy,

if the users use Windows Computers, yes you need to activate CHAP using command line (option 4).

Regards,

Luk

Thanks for that update. Just for information purpose, what if the user is linux based? Do we need to anything additional?

Regards

Jossy

Jossy,

using CHAP should work even for Linux Users.

Have a look at:

https://wiki.archlinux.org/index.php/PPTP_Client

Regards

Hi Luk

The PPTP works fine without the Encryption.

On windows, under the PPTP connection properties we have something called Security. In that under the Data Encryption portion, the PPTP works fine only if we select the option as "Optional Encryption (connect even if no encryption)".

However we have a linux user who uses the pptp connection at the moment. We will eventually move that user to SSL VPN. 

When the linux user uses the PPTP connection, he/she is getting the following error:

"Jan 13 11:09:22 mtl-vccsils02p pppd[16475]: CHAP authentication succeeded: ^K

Jan 13 11:09:22 mtl-vccsils02p pppd[16475]: CHAP authentication succeeded

Jan 13 11:09:22 mtl-vccsils02p pppd[16475]: MPPE required, but MS-CHAP[v2] auth not performed."

Any suggestion to get around this issue and make it work. ?

Regards

Jossy

Hi Luk

The PPTP works fine without the Encryption.

On windows, under the PPTP connection properties we have something called Security. In that under the Data Encryption portion, the PPTP works fine only if we select the option as "Optional Encryption (connect even if no encryption)".

However we have a linux user who uses the pptp connection at the moment. We will eventually move that user to SSL VPN. 

When the linux user uses the PPTP connection, he/she is getting the following error:

"Jan 13 11:09:22 mtl-vccsils02p pppd[16475]: CHAP authentication succeeded: ^K

Jan 13 11:09:22 mtl-vccsils02p pppd[16475]: CHAP authentication succeeded

Jan 13 11:09:22 mtl-vccsils02p pppd[16475]: MPPE required, but MS-CHAP[v2] auth not performed."

Any suggestion to get around this issue and make it work. ?

Regards

Jossy

Jossy,

what client are you using with Linux? Try this:

http://pptpclient.sourceforge.net/

If you set the authentication to any with the command:  "set vpn pptp authentication any" Windows and Linux should work both.

Let us know.

Thanks