PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : vpn (smpppd), pptpconfig, SuSE 9.2



sutterp
18.02.05, 04:14
Ich möchte gerne einen Tunnel zwischen einer Linux maschine und einem CISCO Router aufbauen.

Linux-PC <--> Cisco Router <--> Remote Netz

Der Cisco Router ist bereits konfiguriert, Computers welche Windows XP fahren, können sich einloggen. Dies geht auch mit SuSE Linux V8.2 PC's.

Mit PCs welche SuSE 9.2 installiert haben geht dies nicht. Ich hab in meiner Verzweiflung pptpconfig installiert, hier ist die Fehlermeldung

rcvd [LCP EchoRep id=0x0 magic=0x3c0c0c8c]
rcvd [CHAP Success id=0x1 ""]
CHAP authentication succeeded
Disabling 40-bit MPPE; MS-CHAP LM not supported
sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
rcvd [IPCP ConfReq id=0x1 <addr 144.133.233.94>]
sent [IPCP TermAck id=0x1]
rcvd [LCP ProtRej id=0x2 80 fd 01 01 00 0a 12 06 01 00 00 40]
MPPE required but peer negotiation failed
sent [LCP TermReq id=0x3 "MPPE required but peer negotiation failed"]
rcvd [LCP TermAck id=0x3]
Connection terminated.

http://pptpclient.sourceforge.net/howto-diagnosis.phtml#mppe_rbpnf sagt zu dieser Fehlermeldung:

Symptom: require-mppe-128 option is set, and debug logs contain this sequence:
sent [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]
rcvd [CCP ConfReq id=0x4 <mppe +H -M -S -L -D +C>]
MPPE required but peer negotiation failed
sent [LCP TermReq id=0x4 "MPPE required but peer negotiation failed"]
with the essential component being the immediate termination by the local host on receipt of a CCP ConfReq that has the encryption bits turned off (-M -S -L).
Diagnosis: this is a defect of pppd on your system. It is terminating the connection on the basis that the peer started to suggest no encryption. Your pppd is not first negotiating to achieve encryption. The version of pppd you are using takes the require-mppe-128 option pedantically; refusing to connect if the server is configured to allow no encryption.
Solution: you may fix this by (either);

using a later version of pppd that is not so pedantic, and will negotiate further to achieve encryption (not sure which version), or

configuring the server to require encryption.

Configuring the server to require encryption: Kommt leider nicht in Frage, sonst laufen die Windows Clients in ihrer jetzigen Konfiguration nicht mehr.

using a later version of pppd that is not so pedantic: SuSE 9.2 braucht smpppd 1.50-11, nicht pppd.

Wie gehts weiter?