Настройка клиента VPN

[Avenit]

Не получается че-то с шифрованием...

rcvd [CHAP Success id=0xb4 "Access granted"]
CHAP authentication succeeded: Access granted
CHAP authentication succeeded
MPPE required, but MS-CHAP[v2] auth not performed.
sent [LCP TermReq id=0x2 "MPPE required but not available"]
rcvd [LCP TermReq id=0x2 "MPPE required but not available"]
sent [LCP TermAck id=0x2]
rcvd [LCP TermAck id=0x2]

Конфиг:

Код: Выделить всё

pty "pptp vpnserver --nolaunchpppd"
user testuser
password "testpassword"
nodeflate
nobsdcomp
noauth
#refuse-mschap
mppe required

Модуль в ядре есть и загружен, ppp собран с поддержкой mppe...

[Палач]

$ cat /etc/ppp/options.pptp

lock
noauth
refuse-eap
refuse-chap
refuse-mschap
nobsdcomp
nodeflate
require-mppe-128
persist
holdoff 10
connect /bin/true

[Avenit]

я это пробовал...

Код: Выделить всё

# pon vpnka
/usr/sbin/pppd: In file /etc/ppp/peers/vpnka: unrecognized option 'require-mppe-128'

[Палач]

Давайте сверяться:

[I] net-dialup/ppp
Installed versions: 2.4.4-r21(11:48:30 12.09.2008)(dhcp ipv6 pam -activefilter -atm -eap-tls -gtk -mppe-mppc -radius)
[I] net-dialup/pptpclient
Installed versions: 1.7.1-r1(11:48:30 12.09.2008)(tk)

$ zcat /proc/config.gz | grep MPPE
CONFIG_PPP_MPPE=m

[Avenit]

Код: Выделить всё

 # zcat /proc/config.gz | grep MPPE
CONFIG_PPP_MPPE=m
inet ~ # emerge -pv ppp pptpclient

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R   ] net-dialup/ppp-2.4.4-r15  USE="mppe-mppc pam -activefilter -atm -dhcp -eap-tls -gtk -ipv6 -radius" 0 kB
[ebuild   R   ] net-dialup/pptpclient-1.7.1-r1  USE="-tk" 0 kB

Total: 2 packages (2 reinstalls), Size of downloads: 0 kB
inet ~ #

PS
C WinXP соединяется с параметрами по умолчанию.

[Палач]

попробуйте убрать флаг mppe-mppc или поднять версию ppp до моей

[Avenit]

net-dialup/ppp-2.4.4-r15 - последняя в пакетах
перекомпилил без mppe-mppc, теперь дает использовать require-mppe-128, но ошибка та же...

Код: Выделить всё

# pon vpnka debug dump logfd 2 nodetach
pppd options in effect:
debug           # (from command line)
nodetach                # (from command line)
logfd 2         # (from command line)
dump            # (from command line)
noauth          # (from /etc/ppp/peers/vpnka)
refuse-mschap           # (from /etc/ppp/peers/vpnka)
user GiraGL             # (from /etc/ppp/peers/vpnka)
password ??????         # (from /etc/ppp/peers/vpnka)
                # (from /etc/ppp/options)
pty pptp vpnserver --nolaunchpppd           # (from /etc/ppp/peers/vpnka)
nobsdcomp               # (from /etc/ppp/peers/vpnka)
nodeflate               # (from /etc/ppp/peers/vpnka)
require-mppe-128                # (from /etc/ppp/peers/vpnka)
using channel 62
Using interface ppp1
Connect: ppp1 <--> /dev/pts/4
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x36de0d6b> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xf56e4ae6> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xf56e4ae6> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xf56e4ae6> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xf56e4ae6> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x36de0d6b> <pcomp> <accomp>]
rcvd [LCP EchoReq id=0x0 magic=0xf56e4ae6]
sent [LCP EchoRep id=0x0 magic=0x36de0d6b]
rcvd [CHAP Challenge id=0x60 <761ec47ff85dff03b489cbbab30938c179>, name = "pptpd"]
sent [CHAP Response id=0x60 <4593ddab38d64632bc9571435e95d52a>, name = "testuser"]
rcvd [CHAP Success id=0x60 "Access granted"]
CHAP authentication succeeded: Access granted
CHAP authentication succeeded
MPPE required, but MS-CHAP[v2] auth not performed.
sent [LCP TermReq id=0x2 "MPPE required but not available"]
rcvd [LCP TermReq id=0x2 "MPPE required but not available"]
sent [LCP TermAck id=0x2]
rcvd [LCP TermAck id=0x2]
Connection terminated.
Script pptp vpnserver --nolaunchpppd finished (pid 25193), status = 0x0

[DaemonTux]

Код: Выделить всё

#cat /etc/ppp/pears/vpn
pty "pptp xxx.xxx.xxx.xxx --nolaunchpppd"
user xxxxx
password "xxxxxx"
defaultroute
nodeflate
nobsdcomp
noauth
mppe required,stateless
mtu 1400

По поводу mppe смотри в в man pppd

[Avenit]

DaemonTux это ничего не изменило, про mppe в манах 2 строчки...

Код: Выделить всё

# pppd call vpnka debug nodetach
using channel 70
Using interface ppp1
Connect: ppp1 <--> /dev/pts/4
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x8a788368> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x7473f4ea> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x7473f4ea> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x7473f4ea> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x7473f4ea> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x8a788368> <pcomp> <accomp>]
rcvd [LCP EchoReq id=0x0 magic=0x7473f4ea]
sent [LCP EchoRep id=0x0 magic=0x8a788368]
rcvd [CHAP Challenge id=0xc0 <33bc961430504cf01184df89d6dece16>, name = "pptpd"]
sent [CHAP Response id=0xc0 <ab27d6282e3dab0df24a5b316d404fc1>, name = "testuser"]
rcvd [CHAP Success id=0xc0 "Access granted"]
CHAP authentication succeeded: Access granted
CHAP authentication succeeded
MPPE required, but MS-CHAP[v2] auth not performed.
sent [LCP TermReq id=0x2 "MPPE required but not available"]
rcvd [LCP TermReq id=0x2 "MPPE required but not available"]
sent [LCP TermAck id=0x2]
rcvd [LCP TermAck id=0x2]
Connection terminated.
Script pptp vpnserver --nolaunchpppd finished (pid 32547), status = 0x0

[DaemonTux]

Код: Выделить всё

MPPE required, but MS-CHAP[v2] auth not performed.

Вам эта строчка о чемнебуть говорит?

[Avenit]

добавил require-mschap, теперь не авторизуется даже

Код: Выделить всё

using channel 87
Using interface ppp1
Connect: ppp1 <--> /dev/pts/4
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS> <magic 0xcf2146b0> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x697bebe> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x697bebe> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x697bebe> <pcomp> <accomp>]
sent [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0x697bebe> <pcomp> <accomp>]
rcvd [LCP ConfRej id=0x1 <auth chap MS>]
sent [LCP ConfReq id=0x2 <asyncmap 0x0> <magic 0xcf2146b0> <pcomp> <accomp>]
rcvd [LCP ConfAck id=0x2 <asyncmap 0x0> <magic 0xcf2146b0> <pcomp> <accomp>]
peer refused to authenticate: terminating link
sent [LCP TermReq id=0x3 "peer refused to authenticate"]
rcvd [LCP EchoReq id=0x0 magic=0x697bebe]
rcvd [CHAP Challenge id=0x8 <54f53fab32389c9ca21742ac4035648b>, name = "pptpd"]
Discarded non-LCP packet when LCP not open
rcvd [LCP TermAck id=0x3]
Connection terminated.