Re: [pptp-devel] LCP: timeout sending Config-Requests

[James C. <jam...@hp...>]

On Fri, Feb 02, 2007 at 12:34:57PM -0700, Robert Campbell wrote:
>    Connect: ppp0 <--> /dev/pts/7
>    sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x4f2e7f65> <pcomp> <accomp>]
>    rcvd [LCP ConfReq id=0x1 <mru 1500> <auth chap MS> <magic 0x20a63e0f> <accomp>]
>    sent [LCP ConfNak id=0x1 <auth chap MS-v2>]
>    rcvd [LCP ConfRej id=0x1 <asyncmap 0x0> <pcomp>]
>    sent [LCP ConfReq id=0x2 <magic 0x4f2e7f65> <accomp>]
>    sent [LCP ConfReq id=0x2 <magic 0x4f2e7f65> <accomp>]

This shows that GRE packets get through initially (there is a ConfRej
from the server in response to a ConfReq from the client), but then the
conversation is either blocked or the server silently ceases.

The ConfNak by the client shows that it is unwilling to authenticate
using auth chap MS, but is willing to authenticate using auth chap
MS-v2.  This may be a cause for the server silently ceasing.  Remove the
refuse-mschap and require-mppe option and try again.  This may cause you
to have an unencrypted tunnel ... since MPPE requires MS-CHAP-v2 for
negotiation of keys.

The ConfRej suggests the server would rather you did not propose pcomp,
so add the option nopcomp and try again.  Might not be as important as
the the lack of authentication capability.

-- 
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/