Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1520 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PPTP/PPPoA Connect failure

x-cimo
Can anyone bring some light in what is happening, and maybe a way to fix this? I am using the PPPoA to connect to a PPTP vpn server. This is one 8.302

2012:04:11-21:28:36 plasmashield pppd-pppoa[7954]: pppd 2.4.5 started by (unknown), uid 0
2012:04:11-21:28:36 plasmashield pppd-pppoa[7954]: Couldn't open pty slave /dev/pts/0: No such file or directory
2012:04:11-21:28:36 plasmashield pppd-pppoa[7954]: using channel 23
2012:04:11-21:28:36 plasmashield pppd-pppoa[7954]: Using interface ppp0
2012:04:11-21:28:36 plasmashield pppd-pppoa[7954]: Connect: ppp0  /dev/ttyp0
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [LCP ConfReq id=0x1     ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [LCP ConfReq id=0x1      ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [LCP ConfAck id=0x1      ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [LCP ConfAck id=0x1     ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [LCP EchoReq id=0x0 magic=0x60db5231]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [LCP EchoReq id=0x0 magic=0x8d76dfe]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [LCP EchoRep id=0x0 magic=0x60db5231]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [CHAP Challenge id=0x43 , name = "pptpd"]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [CHAP Response id=0x43  , name = "myuser"]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [LCP EchoRep id=0x0 magic=0x8d76dfe]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [CHAP Success id=0x43 "S=3B0106700EB424B4E5370D56743ACB0D5A334AA1"]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: CHAP authentication succeeded
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [CCP ConfReq id=0x1   ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [IPCP ConfReq id=0x1    ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [CCP ConfReq id=0x1 ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [CCP ConfRej id=0x1 ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [LCP TermReq id=0x2 "MPPE required but peer negotiation failed"]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: LCP terminated by peer (MPPE required but peer negotiation failed)
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: sent [LCP TermAck id=0x2]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: rcvd [CCP ConfRej id=0x1   ]
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: Discarded non-LCP packet when LCP not open
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: Modem hangup
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: Connection terminated.
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: Script /usr/sbin/pptp-current X.X.X.X --nolaunchpppd finished (pid 7955), status = 0x0
2012:04:11-21:28:37 plasmashield pppd-pppoa[7954]: Exit. 

Thanks


This thread was automatically locked due to age.
Parents
  • 0
    It seem that everything goes downhill when the 

    server say:
    CCP ConfReq id=0x1 

    and 
    ASG reply: 
    CCP ConfRej id=0x1 

    Which I think mean that ASG dosen't accept the MPPE 128bit ( +S = use 128-bit key lengths for encryption).

    Does anyone know where to look for the PPTP conf file in astaro? (/etc/ppp/options.pptp )


    Thanks
  • 0 in reply to x-cimo
    So, I got the interface to connect by editing the /var/sec/chroot-pptpc/bin/PPTPC.sh file and adding the require-mppe-128 option to the pptpc connect such as:

    $PPPD call $SYMN ipparam "$IPPARAM" &

    became

    $PPPD call $SYMN require-mppe-128 ipparam "$IPPARAM" &

    Obviously this is not a supported configuration, but I really wonder, could astaro add this option? Or is there already a way to do this from the gui... 

    I wonder how long my change in the .sh file would last if I update to a newer version...

    Thanks...
Reply
  • 0 in reply to x-cimo
    So, I got the interface to connect by editing the /var/sec/chroot-pptpc/bin/PPTPC.sh file and adding the require-mppe-128 option to the pptpc connect such as:

    $PPPD call $SYMN ipparam "$IPPARAM" &

    became

    $PPPD call $SYMN require-mppe-128 ipparam "$IPPARAM" &

    Obviously this is not a supported configuration, but I really wonder, could astaro add this option? Or is there already a way to do this from the gui... 

    I wonder how long my change in the .sh file would last if I update to a newer version...

    Thanks...
Children
No Data