Реализовать шифрованное(MMPE128 либо более стойкое) подключение клинтов(winXP) по протоколу pppoe к серверу (Debian Lenny) используя уч.записи домена.
Проблема:
Не работает mmpe
Код: Выделить всё
Config
name pppoe
logfile /var/log/log.pppoe
plugin winbind.so
ntlm_auth-helper "/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1"
require-mschap-v2
netmask 255.255.0.0
lock
debug
require-mppe-128
mppe-statefulLogs:
Код: Выделить всё
Using interface ppp0
Connect: ppp0 <--> /dev/pts/4
sent [LCP ConfReq id=0x1 <auth chap MS-v2> <magic 0x7abc32ed>]
rcvd [LCP ConfAck id=0x1 <auth chap MS-v2> <magic 0x7abc32ed>]
rcvd [LCP ConfReq id=0x1 <mru 1480> <magic 0x4c6c0dcd> <callback CBCP>]
sent [LCP ConfRej id=0x1 <callback CBCP>]
rcvd [LCP ConfReq id=0x2 <mru 1480> <magic 0x4c6c0dcd>]
sent [LCP ConfAck id=0x2 <mru 1480> <magic 0x4c6c0dcd>]
sent [LCP EchoReq id=0x0 magic=0x7abc32ed]
sent [CHAP Challenge id=0x19 <cb970389a54ed180724fa3a8b4764105>, name = "pppoe"]
rcvd [LCP Ident id=0x3 magic=0x4c6c0dcd "MSRASV5.10"]
rcvd [LCP Ident id=0x4 magic=0x4c6c0dcd "MSRAS-1-XXXXXXXX"]
rcvd [LCP EchoRep id=0x0 magic=0x4c6c0dcd]
rcvd [CHAP Response id=0x19 <26516fb07edd88bcd73b28d263d... e429c2953e7a10ac3c732f79f6d292400>, name = "DOMAIN\\USER"]
sent [CHAP Success id=0x19 "S=BB41CCA305C970B ...9645BA5AE M=Access granted"]
sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x5 <mppe -H +M +S +L -D -C>]
sent [CCP ConfNak id=0x5 <mppe -H -M +S -L -D -C>]
rcvd [IPCP ConfReq id=0x6 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
sent [IPCP TermAck id=0x6]
rcvd [CCP ConfNak id=0x1 <mppe -H -M +S -L -D -C>]
sent [CCP ConfReq id=0x2 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfReq id=0x7 <mppe -H -M +S -L -D -C>]
sent [CCP ConfAck id=0x7 <mppe -H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe -H -M +S -L -D -C>]
MPPE 128-bit stateful compression enabled
sent [IPCP ConfReq id=0x1 <addr 10.0.0.1>]
rcvd [IPCP ConfAck id=0x1 <addr 10.0.0.1>]
rcvd [IPCP ConfReq id=0x8 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
sent [IPCP ConfRej id=0x8 <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
rcvd [IPCP ConfReq id=0x9 <addr 0.0.0.0>]
sent [IPCP ConfNak id=0x9 <addr 10.67.15.1>]
rcvd [IPCP ConfReq id=0xa <addr 10.67.15.1>]
sent [IPCP ConfAck id=0xa <addr 10.67.15.1>]
Cannot determine ethernet address for proxy ARP
local IP address 10.0.0.1
remote IP address 10.67.15.1
Script /etc/ppp/ip-up started (pid 15529)
Script /etc/ppp/ip-up finished (pid 15529), status = 0x0
rcvd [proto=0xcc4] d3 dd 7f fc a0 ea 29 f5 58 75 84 22 04 a3 e1 1f 0f 32 55 b1 5b 62 96 c0 64 09 f8 8a 3f b9 7e e9 ...
Unsupported protocol 0xcc4 received
sent [LCP ProtRej id=0x2 0c c4 d3 dd 7f fc a0 ea 29 f5 58 75 84 22 04 a3 e1 1f 0f 32 55 b1 5b 62 96 c0 64 09 f8 8a 3f b9 ...]
rcvd [proto=0xb3] 52 13 97 ae 15 ba 2d 2c 32 ea e6 4c 73 b6 48 b1 08 7b 78 e4 46 6c 39 f4 8b 32 2d 8a d2 25 9c cd ...
Unsupported protocol 0xb3 receivedДиагностика:
pppoe туннель поднимается
В свойствах соединения Шифрование- MMPE128
Пингование - НЕТ
Вижу проблему в сервере - так как клиент пакеты от сервера в туннеле видит и декодирует
Сервер от клиента пакеты не может расшифровать.
