Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Oct 2003 18:27:16 +0200 (MEST)
From:      "Peter Cornelius" <pcc@gmx.net>
To:        Michael Bretterklieber <mbretter@a-quadrat.at>
Cc:        freebsd-net@FreeBSD.ORG
Subject:   Re: mpd, MS-vpn and growing confusion. (apparently solved)
Message-ID:  <1445.1065716836@www25.gmx.net>
References:  <Pine.WNT.4.58.0310090929060.1560@BRUTUS>

next in thread | previous in thread | raw e-mail | index | archive | help
HEUREKA! 
 
Hi, 
 
> > 	set link yes chap 
> if you are using mpd in client mode, then please don't use "yes" or 
> "enable", just use accept: 
> set link no pap chap 
> set link accept chap 
 
This apparently makes the difference.  I can't check detailed now, but I
have an IP address and routing entries, so I believe that it 
works. I'll check later as I have to leave now. 
 
> > 	set ccp yes mpp-compress 
> > 	set ccp yes stac 
> I assume you removed already these two lines. 
 
I now have: 
 
vpn: 
	new -i ng0 vpn vpn0 
	set iface disable on-demand 
	set iface addrs 172.16.26.129 172.16.26.127 
	set iface idle 0 
	#### disconnect the client after 8 hours 
	set iface session 28800 
	set iface route 172.16.26.0/16 
	set bundle disable multilink 
	set bundle authname "nt-domain\\user" 
	set link yes acfcomp protocomp 
	set link no pap 
	# !!! MUST USE ACCEPT HERE IN CLIENT MODE !!! 
	#set link yes chap 
	set link accept chap 
	set link mtu 1460 
	#### If remote machine is NT you need this.. 
	set link enable no-orig-auth 
	set link keep-alive 61 753 
	set ipcp yes vjcomp 
	set ipcp ranges 172.16.26.129/16 172.16.26.127/16 
	#### The five lines below enable Microsoft Point-to-Point encryption 
	#### (MPPE) using the ng_mppc(8) netgraph node type. 
	set bundle enable compression 
	set ccp yes mppc 
	set ccp yes mpp-e40 
	set ccp yes mpp-e56 
	set ccp yes mpp-e128 
	set bundle enable crypt-reqd 
	set ccp yes mpp-stateless 
	# !!! MUST NOT USE mpp-compress WITH NT SERVER HERE !!! 
	#set ccp yes mpp-compress 
	# stac is not recommended but neither compiled in nor effective. 
	#set ccp yes stac 
	open 
 
Thanks a lot for the help, 
 
All the best, 
 
Peter. 

-- 
NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien...
Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService

Jetzt kostenlos anmelden unter http://www.gmx.net

+++ GMX - die erste Adresse für Mail, Message, More! +++



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1445.1065716836>