Доброго времени суток. Постараюсь быть в меру краток.В FreeBSD я новичок.
ОС: FreeBsd 7.0
Развернул по статье http://www.lissyara.su/articles/freebsd/security/vpn_mpd5/ pptp сервер.
При подключении windows-клиента идет “реджект” с ошибкой VPN 619.
Что сделал:
Шифрование на клиенте, включал/выключал - не помогает.
mpd.conf
startup:
# configure mpd users
# Задаем пароль для доступа в web-intarface
# т.е меняем password на свой пароль
set user xxx password xxx
# set user password cancer
# configure the console
set console self 127.0.0.1 5005
set console open
# configure the web server
set web self 0.0.0.0 5006
set web open
default:
load pptp_server
pptp_server:
# Определяем диапазон выдаваемых IP удалённым клиентам
set ippool add poolsat 192.168.0.10 192.168.0.20
create bundle template B
set iface enable proxy-arp
set iface idle 0
set iface enable tcpmssfix
set ipcp yes vjcomp
# IP адрес сервера, который мы будем показывать клиентам
# в моем случае 192.168.10.255 (т.е левый IP)
set ipcp ranges 192.168.55.255/32 ippool poolsat
# Если есть свой ДНС сервер, то меняем IP адрес
set ipcp dns 192.168.0.1
# Enable Microsoft Point-to-Point encryption (MPPE)
set bundle enable compression
set ccp yes mppc
set mppc yes compress e40 e56 e128 stateless
create link template L pptp
set link enable multilink
set link yes acfcomp protocomp
set link action bundle B
set link no pap chap
set link enable chap
set link enable chap-msv1
set link enable chap-msv2
set link mtu 1460
set link keep-alive 10 75
# Configure PPTP and open link
# Тут указываем IP сетевой карты которая смотрит в ИНЕТ
set pptp self 94.199.xxx.xxx
set link enable incoming
Вывод tcpdump:
tcpdump -i re0 -p proto 47
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on re0, link-type EN10MB (Ethernet), capture size 96 bytes
17:49:19.822915 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 0, length 54: LCP, Conf-Request (0x01), id 1, length 40
17:49:19.838561 IP mx.galaform.ru > client-105-50.ntline.ru: GREv1, call 31550, seq 0, length 37: LCP, Conf-Request (0x01), id 0, length 23
17:49:19.838970 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 1, ack 0, length 27: LCP, Conf-Reject (0x04), id 0, length 9
17:49:21.834921 IP mx.galaform.ru > client-105-50.ntline.ru: GREv1, call 31550, seq 1, length 37: LCP, Conf-Request (0x01), id 1, length 23
17:49:21.835384 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 2, ack 1, length 27: LCP, Conf-Reject (0x04), id 1, length 9
17:49:21.835760 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 3, length 54: LCP, Conf-Request (0x01), id 2, length 40
17:49:23.900431 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 4, length 54: LCP, Conf-Request (0x01), id 3, length 40
17:49:24.835344 IP mx.galaform.ru > client-105-50.ntline.ru: GREv1, call 31550, seq 2, length 37: LCP, Conf-Request (0x01), id 2, length 23
17:49:24.835823 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 5, ack 2, length 27: LCP, Conf-Reject (0x04), id 2, length 9
17:49:25.935966 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 6, length 54: LCP, Conf-Request (0x01), id 4, length 40
17:49:28.000407 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 7, length 54: LCP, Conf-Request (0x01), id 5, length 40
17:49:28.835196 IP mx.galaform.ru > client-105-50.ntline.ru: GREv1, call 31550, seq 3, length 37: LCP, Conf-Request (0x01), id 3, length 23
17:49:28.835688 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 8, ack 3, length 27: LCP, Conf-Reject (0x04), id 3, length 9
17:49:30.039033 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 9, length 54: LCP, Conf-Request (0x01), id 6, length 40
17:49:32.103680 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 10, length 54: LCP, Conf-Request (0x01), id 7, length 40
17:49:32.836173 IP mx.galaform.ru > client-105-50.ntline.ru: GREv1, call 31550, seq 4, length 37: LCP, Conf-Request (0x01), id 4, length 23
17:49:32.836568 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 11, ack 4, length 27: LCP, Conf-Reject (0x04), id 4, length 9
17:49:34.144361 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 12, length 54: LCP, Conf-Request (0x01), id 8, length 40
17:49:36.208809 IP client-105-50.ntline.ru > mx.galaform.ru: GREv1, call 0, seq 13, length 54: LCP, Conf-Request (0x01), id 9, length 40
17:49:36.835502 IP mx.galaform.ru > client-105-50.ntline.ru: GREv1, call 31550, seq 5, length 37: LCP, Conf-Request (0x01), id 5, length 23
mpd.log
Dec 21 17:49:34 router mpd: [L-1] LCP: SendConfigReq #8
Dec 21 17:49:34 router mpd: [L-1] ACFCOMP
Dec 21 17:49:34 router mpd: [L-1] PROTOCOMP
Dec 21 17:49:34 router mpd: [L-1] MRU 1500
Dec 21 17:49:34 router mpd: [L-1] MAGICNUM 6b9f2c64
Dec 21 17:49:34 router mpd: [L-1] AUTHPROTO CHAP MSOFTv2
Dec 21 17:49:34 router mpd: [L-1] MP MRRU 2048
Dec 21 17:49:34 router mpd: [L-1] MP SHORTSEQ
Dec 21 17:49:34 router mpd: [L-1] ENDPOINTDISC [802.1] 00 24 1d 3e 8e 8e
Dec 21 17:49:36 router mpd: [L-1] LCP: SendConfigReq #9
Dec 21 17:49:36 router mpd: [L-1] ACFCOMP
Dec 21 17:49:36 router mpd: [L-1] PROTOCOMP
Dec 21 17:49:36 router mpd: [L-1] MRU 1500
Dec 21 17:49:36 router mpd: [L-1] MAGICNUM 6b9f2c64
Dec 21 17:49:36 router mpd: [L-1] AUTHPROTO CHAP MSOFTv2
Dec 21 17:49:36 router mpd: [L-1] MP MRRU 2048
Dec 21 17:49:36 router mpd: [L-1] MP SHORTSEQ
Dec 21 17:49:36 router mpd: [L-1] ENDPOINTDISC [802.1] 00 24 1d 3e 8e 8e
Dec 21 17:49:36 router mpd: [L-1] LCP: rec'd Configure Request #5 (Req-Sent)
Dec 21 17:49:36 router mpd: [L-1] MRU 1400
Dec 21 17:49:36 router mpd: [L-1] MAGICNUM 2188714a
Dec 21 17:49:36 router mpd: [L-1] PROTOCOMP
Dec 21 17:49:36 router mpd: [L-1] ACFCOMP
Dec 21 17:49:36 router mpd: [L-1] CALLBACK 6
Dec 21 17:49:36 router mpd: [L-1] LCP: not converging
Dec 21 17:49:36 router mpd: [L-1] LCP: parameter negotiation failed
Dec 21 17:49:36 router mpd: [L-1] LCP: state change Req-Sent --> Stopped
Dec 21 17:49:36 router mpd: [L-1] LCP: LayerFinish
Dec 21 17:49:36 router mpd: [L-1] PPTP call terminated
Dec 21 17:49:36 router mpd: [L-1] Link: DOWN event
Dec 21 17:49:36 router mpd: [L-1] LCP: Close event
Dec 21 17:49:36 router mpd: [L-1] LCP: state change Stopped --> Closed
Dec 21 17:49:36 router mpd: [L-1] LCP: Down event
Dec 21 17:49:36 router mpd: [L-1] LCP: state change Closed --> Initial
Dec 21 17:49:36 router mpd: [L-1] Link: SHUTDOWN event
Dec 21 17:49:36 router mpd: [L-1] Link: Shutdown
Ядро пересобрал с такими опциями (для сжатия данных (по статье указанной выше)):
options NETGRAPH
options NETGRAPH_ETHER
options NETGRAPH_SOCKET
options NETGRAPH_TEE
options NETGRAPH_MPPC_ENCRYPTION
options NETGRAPH_MPPC_COMPRESSION
options NETGRAPH_BPF
options NETGRAPH_IFACE
options NETGRAPH_KSOCKET
options NETGRAPH_PPP
options NETGRAPH_PPTPGRE
options NETGRAPH_TCPMSS
options NETGRAPH_VJC
options NETGRAPH_ONE2MANY
options NETGRAPH_RFC1490
options NETGRAPH_TEE
options NETGRAPH_TTY
options NETGRAPH_UI
Товарищи, подскажите пожалуйста как быть?
Заранее, очень благодарен всем откликнувшимся.
Спасибо!
С уважением.