PPTP VPN Client

[ee99ee3]

I downloaded pptpclient from pptpclient.sourceforge.net. I run pptp-command, setup my CHAP secrets (the server I'm connecting to uses CHAP to authenticate). Then I setup the tunnel. I do exactly what all the documentation says to do, but when I go to connect I get this error:

/usr/sbin/pppd: In file /etc/ppp/options.pptp: unrecognized option 'require-mppe'
ERROR! Connection timed out.

I'm sure that the server is alive, becuase I talked to someone else that was connecteing to the same one, and it works fine for them (they were in Winblows XP). I can see the server just fine from here. I access it all the time, I just can't get VPN to work.


Here's my /etc/ppp/options.pptp file:

#
# Lock the port
#
lock

#
# We don't need the tunnel server to authenticate itself
#
noauth
require-chapms-v2
require-mppe

#
# Turn off transmission protocols we know won't be used
#
nobsdcomp
nodeflate

#
# We want MPPE
#
mppe-40
mppe-128
mppe-stateless

#
# We want a sane mtu/mru
#
mtu 1000
mru 1000

#
# Time this thing out of it goes poof
#
lcp-echo-failure 10
lcp-echo-interval 10

Any ideas?


Thanks.

-ee99ee3

[jumpedintothefire]

There is a kernel patch or prepatched rpm's available around the internet,
ah here it is: http://devel.linvision.com/

Wait, that is for the kernel problem that you'll run into if you don't have encryption support.
There is a matching pppd rpm to go with the kernel rpm. ;)

Your problem is that you pppd doesn't like that option, try # that out first and see what happends...

For futher debugging info try:
http://pptpclient.sourceforge.net/howto-diagnosis.phtml

Make sure you go through the fault tree under "Check MPPE support" first

[ee99ee3]

Okay. I think you got me pointed in the right direction. Apparently, I need the ppp_mppe module loaded. So I looked for it, and apparently I don't have it. I'm running Redhat 7.3 (kernel 2.4.18-3). Anyhoo, where can I get it?

I've searched all I know how to with Google, and only came up with an RPM package ("ppp-mppe-2.4.1-3.i386.rpm"). All this does is install something related to MPPE over PPP, I guess. It doesn't come with any modules or anything that I could use.

Ideas? Help! lol.

[ee99ee3]

I also tried just now putting it on my other Linux box... a Debian Potato machine.

I set it up and everything, and I got an error this time about require-chapms-v2. It's the same as the above error, only it's not mppe, it's chapms-v2.

Ideas?

-ee99ee3

[ 19 June 2002: Message edited by: ee99ee3 ]

[jumpedintothefire]

Patch pppd and recompile.
Patch the kernel and recompile.

Directions and patches at:
http://www.shorewall.net/PPTP.htm

the 2.4.16 patches do work with 2.4.18.
The author and myself are running patched 2.4.18 kernels.

The two connection script at the bottom is mine :-)

Check out http://www.shorewall.net
one hell of an advanced iptables firewall...

good luck