Необходимо объеденить 2 офиса по средствам впн. Обе фряхи 6.2, mpd-3.18_6 тоже на обоих.
1- центральный (собственно на нем стоит впн сервер)
2ой- филиал.
Суть проблемы в том что виндовым клиентом цепляется замечательно. Фря в филиале на отрез отказывается цепляться.
лог со стороны центрального сервера.
Код: Выделить всё
Jul 20 23:15:28 mail mpd: [pptp0] LCP: state change Ack-Sent --> Opened
Jul 20 23:15:28 mail mpd: [pptp0] LCP: phase shift ESTABLISH --> AUTHENTICATE
Jul 20 23:15:28 mail mpd: [pptp0] LCP: auth: peer wants nothing, I want CHAP
Jul 20 23:15:28 mail mpd: [pptp0] CHAP: sending CHALLENGE
Jul 20 23:15:28 mail mpd: [pptp0] LCP: LayerUp
Jul 20 23:15:28 mail mpd: [pptp0] CHAP: rec'd RESPONSE #1
Jul 20 23:15:28 mail mpd: Name: "mainvpn"
Jul 20 23:15:28 mail mpd: Peer name: "mainvpn"
Jul 20 23:15:28 mail mpd: mpd: warning: line too long, truncated
Jul 20 23:15:28 mail mpd: Response is valid
Jul 20 23:15:28 mail mpd: [pptp0] CHAP: sending SUCCESS
Jul 20 23:15:28 mail mpd: [pptp0] LCP: authorization successful
Jul 20 23:15:28 mail mpd: [pptp0] LCP: phase shift AUTHENTICATE --> NETWORK
Jul 20 23:15:28 mail mpd: [pptp0] setting interface ng0 MTU to 1460 bytes
Jul 20 23:15:28 mail mpd: [pptp0] up: 1 link, total bandwidth 64000 bps
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: Up event
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: state change Starting --> Req-Sent
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: SendConfigReq #73
Jul 20 23:15:28 mail mpd: IPADDR 172.168.55.200
Jul 20 23:15:28 mail mpd: COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Jul 20 23:15:28 mail mpd: [pptp0] CCP: Open event
Jul 20 23:15:28 mail mpd: [pptp0] CCP: state change Initial --> Starting
Jul 20 23:15:28 mail mpd: [pptp0] CCP: LayerStart
Jul 20 23:15:28 mail mpd: [pptp0] CCP: Up event
Jul 20 23:15:28 mail mpd: [pptp0] CCP: state change Starting --> Req-Sent
Jul 20 23:15:28 mail mpd: [pptp0] CCP: SendConfigReq #133
Jul 20 23:15:28 mail mpd: [pptp0] CCP: Checking whether 40 bits are enabled -> yes
Jul 20 23:15:28 mail mpd: [pptp0] CCP: Checking whether 56 bits are enabled -> no
Jul 20 23:15:28 mail mpd: [pptp0] CCP: Checking whether 128 bits are enabled -> yes
Jul 20 23:15:28 mail mpd: MPPC
Jul 20 23:15:28 mail mpd: 0x01000060: MPPE, 40 bit, 128 bit, stateless
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: rec'd Configure Request #11 link 0 (Req-Sent)
Jul 20 23:15:28 mail mpd: IPADDR 172.168.56.254
Jul 20 23:15:28 mail mpd: NAKing with 172.168.55.201
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: SendConfigNak #11
Jul 20 23:15:28 mail mpd: IPADDR 172.168.55.201
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: rec'd Configure Reject #73 link 0 (Req-Sent)
Jul 20 23:15:28 mail mpd: COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: SendConfigReq #74
Jul 20 23:15:28 mail mpd: IPADDR 172.168.55.200
Jul 20 23:15:28 mail mpd: [pptp0] LCP: rec'd Protocol Reject #11 link 0 (Opened)
Jul 20 23:15:28 mail mpd: [pptp0] LCP: protocol CCP was rejected
Jul 20 23:15:28 mail mpd: [pptp0] CCP: protocol was rejected by peer
Jul 20 23:15:28 mail mpd: [pptp0] CCP: Close event
Jul 20 23:15:28 mail mpd: [pptp0] CCP: state change Req-Sent --> Closing
Jul 20 23:15:28 mail mpd: [pptp0] CCP: SendTerminateReq #134
Jul 20 23:15:28 mail mpd: [pptp0] CCP: encryption required, but MPPE was not negotiated in both directions
Jul 20 23:15:28 mail mpd: [pptp0] CCP: failed to negotiate required encryption
Jul 20 23:15:28 mail mpd: [pptp0] CCP: Close event
Jul 20 23:15:28 mail mpd: [pptp0] CCP: state change Closing --> Closed
Jul 20 23:15:28 mail mpd: [pptp0] CCP: LayerFinish
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: failed to negotiate required encryption
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: state change Req-Sent --> Stopped
Jul 20 23:15:28 mail mpd: [pptp0] IPCP: LayerFinish
Jul 20 23:15:28 mail mpd: [pptp0] CCP: LayerFinish
Jul 20 23:15:28 mail mpd: [pptp0] bundle: CLOSE event in state OPENED
Jul 20 23:15:28 mail mpd: [pptp0] closing link "pptp0"...
Jul 20 23:15:28 mail mpd: [pptp0] link: CLOSE event
Jul 20 23:15:28 mail mpd: [pptp0] LCP: Close event
Jul 20 23:15:28 mail mpd: [pptp0] LCP: state change Opened --> Closing
Jul 20 23:15:28 mail mpd: [pptp0] LCP: phase shift NETWORK --> TERMINATE
конфиги сервера филиала.
mpd.conf
Код: Выделить всё
default:
load vpn
vpn:
new -i ng0 vpn vpn
set iface disable on-demand
set iface idle 0
set bundle disable multilink
set bundle authname mainvpn
set bundle password "XXXXXXX"
set link keep-alive 60 180
set link accept chap
set link no pap
set bundle disable compression
set ccp yes mpp-e40
set ccp no mpp-e128
set bundle disable crypt-reqd
set ccp no mpp-stateless
set ipcp no vjcomp
set link mtu 1460
set iface up-script /usr/local/etc/mpd/up-script.sh
set iface down-script /usr/local/etc/mpd/down-script.sh
open
Код: Выделить всё
vpn:
set link type pptp
set pptp self AA.BB.CC.DD
set pptp peer EE.FF.GG.HH
set pptp enable originate incoming outcall
Заранее спасибо.