Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Nov 2003 17:37:32 -0600 (CST)
From:      Archie Cobbs <archie@dellroad.org>
To:        Joe Marcus Clarke <marcus@marcuscom.com>
Cc:        questions@FreeBSD.ORG
Subject:   Re: MPD problems connecting to a Cisco 3000 concentrator
Message-ID:  <200311092337.hA9NbWAZ003784@arch20m.dellroad.org>
In-Reply-To: <1068334731.37279.19.camel@shumai.marcuscom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Joe Marcus Clarke wrote:
> I'm trying to establish an encrypted PPTP connection to a Cisco VPN
> concentrator using mpd-3.14.  It works fine when I disable all
> encryption, but with even 40-bit stateless, I get errors like:
> 
> [vpn] LCP: rec'd Protocol Reject #2 link 0 (Opened)
> [vpn] LCP: protocol 0x32f7 was rejected
> [vpn] LCP: rec'd Protocol Reject #10 link 0 (Opened)
> [vpn] LCP: protocol 0xa785 was rejected
> [vpn] LCP: rec'd Protocol Reject #11 link 0 (Opened)
> [vpn] LCP: protocol 0x5a41 was rejected
> [vpn] LCP: rec'd Protocol Reject #12 link 0 (Opened)
> [vpn] LCP: protocol 0x5ceb was rejected

Almost certain that either the MPD side is incorrectly decrypting the
packets or the Cisco side is incorrectly encrypting them. All known MPD
bugs in this regard are fixed in the latest version of MPD & FreeBSD...
try upgrading the Cisco box?? Or try MS-CHAPv1 instead of v2?

-Archie

__________________________________________________________________________
Archie Cobbs     *    Halloo Communications    *     http://www.halloo.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311092337.hA9NbWAZ003784>