pptp-сервер на mpd5 - не получается подключиться с winxp

Настройка сетевых служб, маршрутизации, фаерволлов. Проблемы с сетевым оборудованием.
Правила форума
Убедительная просьба юзать теги [code] при оформлении листингов.
Сообщения не оформленные должным образом имеют все шансы быть незамеченными.
f1045
проходил мимо
Сообщения: 3
Зарегистрирован: 2011-09-06 15:39:41

pptp-сервер на mpd5 - не получается подключиться с winxp

Непрочитанное сообщение f1045 » 2011-09-06 17:03:38

FreeBSD 8.2 / MPD 5.5 - PPTP-сервер
клиенты с (через инет, за натом) с win7/vista - подключаются успешно, с winxp - получают 619 ошибку.

Конфиг мпд более менее стандартный, tcpmssfix есть.
(используется ms-chap v2, mppс-шифрование, юзеры - системные)

Код: Выделить всё

default:
        load pptp_server
pptp_server:
        set ippool add pool1 10.0.0.50 10.0.0.100
        create bundle template B
        set iface enable proxy-arp
        set iface idle 0
        set iface enable tcpmssfix
        set ipcp yes vjcomp
        set ipcp ranges 10.0.0.1/24 ippool pool1
        set ipcp dns 10.0.0.1
        set bundle enable compression
        set ccp yes mppc
        set mppc yes e40 e56 e128 stateless
        create link template L pptp
        set link action bundle B
        set link enable multilink
        set link enable acfcomp protocomp
        set link no pap chap eap
        set link enable chap-msv1
        set link enable chap-msv2
        set link keep-alive 10 60
        set link mtu 1460
        set pptp self bge0
        set link enable incoming
        set auth enable system-auth
        set auth enable system-acct
На w7/vista настройки - дефолтные, всё работает. На ХР в настройках пробовал все возможные варианты.

Неудачная попытка соединения выглядит в логе мпд так:

Код: Выделить всё

Sep  6 14:06:06 vpnserv mpd: [L-2] Accepting PPTP connection
Sep  6 14:06:06 vpnserv mpd: [L-2] Link: OPEN event
Sep  6 14:06:06 vpnserv mpd: [L-2] LCP: Open event
Sep  6 14:06:06 vpnserv mpd: [L-2] LCP: state change Initial --> Starting
Sep  6 14:06:06 vpnserv mpd: [L-2] LCP: LayerStart
Sep  6 14:06:06 vpnserv mpd: [L-2] PPTP: attaching to peer's outgoing call
Sep  6 14:06:06 vpnserv mpd: [L-2] Link: UP event
Sep  6 14:06:06 vpnserv mpd: [L-2] LCP: Up event
Sep  6 14:06:06 vpnserv mpd: [L-2] LCP: state change Starting --> Req-Sent
Sep  6 14:06:06 vpnserv mpd: [L-2] LCP: SendConfigReq #1
Sep  6 14:06:06 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 14:06:06 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 14:06:06 vpnserv mpd: [L-2]   MRU 1500
Sep  6 14:06:06 vpnserv mpd: [L-2]   MAGICNUM 010b1f19
Sep  6 14:06:06 vpnserv mpd: [L-2]   AUTHPROTO CHAP MSOFTv2
Sep  6 14:06:06 vpnserv mpd: [L-2]   MP MRRU 2048
Sep  6 14:06:06 vpnserv mpd: [L-2]   MP SHORTSEQ
Sep  6 14:06:06 vpnserv mpd: [L-2]   ENDPOINTDISC [802.1] 00 30 05 9e 3f 5b
Sep  6 14:06:09 vpnserv mpd: [L-2] LCP: SendConfigReq #2
Sep  6 14:06:09 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 14:06:09 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 14:06:09 vpnserv mpd: [L-2]   MRU 1500
Sep  6 14:06:09 vpnserv mpd: [L-2]   MAGICNUM 010b1f19
Sep  6 14:06:09 vpnserv mpd: [L-2]   AUTHPROTO CHAP MSOFTv2
Sep  6 14:06:09 vpnserv mpd: [L-2]   MP MRRU 2048
Sep  6 14:06:09 vpnserv mpd: [L-2]   MP SHORTSEQ
Sep  6 14:06:09 vpnserv mpd: [L-2]   ENDPOINTDISC [802.1] 00 30 05 9e 3f 5b
[..]

Sep  6 14:06:25 vpnserv mpd: [L-2] LCP: SendConfigReq #10
Sep  6 14:06:25 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 14:06:25 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 14:06:25 vpnserv mpd: [L-2]   MRU 1500
Sep  6 14:06:25 vpnserv mpd: [L-2]   MAGICNUM 010b1f19
Sep  6 14:06:25 vpnserv mpd: [L-2]   AUTHPROTO CHAP MSOFTv2
Sep  6 14:06:25 vpnserv mpd: [L-2]   MP MRRU 2048
Sep  6 14:06:25 vpnserv mpd: [L-2]   MP SHORTSEQ
Sep  6 14:06:25 vpnserv mpd: [L-2]   ENDPOINTDISC [802.1] 00 30 05 9e 3f 5b
Sep  6 14:06:27 vpnserv mpd: [L-2] LCP: parameter negotiation failed
Sep  6 14:06:27 vpnserv mpd: [L-2] LCP: state change Req-Sent --> Stopped
Sep  6 14:06:27 vpnserv mpd: [L-2] LCP: LayerFinish
Sep  6 14:06:27 vpnserv mpd: [L-2] PPTP call terminated
Sep  6 14:06:27 vpnserv mpd: [L-2] Link: DOWN event
Sep  6 14:06:27 vpnserv mpd: [L-2] LCP: Close event
Sep  6 14:06:27 vpnserv mpd: [L-2] LCP: state change Stopped --> Closed
Sep  6 14:06:27 vpnserv mpd: [L-2] LCP: Down event
Sep  6 14:06:27 vpnserv mpd: [L-2] LCP: state change Closed --> Initial
Sep  6 14:06:27 vpnserv mpd: [L-2] Link: SHUTDOWN event
Sep  6 14:06:27 vpnserv mpd: [L-2] Link: Shutdown
Удачная - так

Код: Выделить всё

Sep  6 13:54:45 vpnserv mpd: [L-2] Accepting PPTP connection
Sep  6 13:54:45 vpnserv mpd: [L-2] Link: OPEN event
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: Open event
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: state change Initial --> Starting
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: LayerStart
Sep  6 13:54:45 vpnserv mpd: [L-2] PPTP: attaching to peer's outgoing call
Sep  6 13:54:45 vpnserv mpd: [L-2] Link: UP event
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: Up event
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: state change Starting --> Req-Sent
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: SendConfigReq #1
Sep  6 13:54:45 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   MRU 1500
Sep  6 13:54:45 vpnserv mpd: [L-2]   MAGICNUM 8e41659f
Sep  6 13:54:45 vpnserv mpd: [L-2]   AUTHPROTO CHAP MSOFTv2
Sep  6 13:54:45 vpnserv mpd: [L-2]   MP MRRU 2048
Sep  6 13:54:45 vpnserv mpd: [L-2]   MP SHORTSEQ
Sep  6 13:54:45 vpnserv mpd: [L-2]   ENDPOINTDISC [802.1] 00 30 05 9e 3f 5b
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: rec'd Configure Request #0 (Req-Sent)
Sep  6 13:54:45 vpnserv mpd: [L-2]   MRU 1400
Sep  6 13:54:45 vpnserv mpd: [L-2]   MAGICNUM 55567812
Sep  6 13:54:45 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   CALLBACK 6
Sep  6 13:54:45 vpnserv mpd: [L-2]   MP MRRU 1614
Sep  6 13:54:45 vpnserv mpd: [L-2]   ENDPOINTDISC [LOCAL] bc ad 64 ca d7 42 4c fb 8d 10 e8 3d bb dd 72 30 00 00 0
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: SendConfigRej #0
Sep  6 13:54:45 vpnserv mpd: [L-2]   CALLBACK 6
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: rec'd Configure Request #1 (Req-Sent)
Sep  6 13:54:45 vpnserv mpd: [L-2]   MRU 1400
Sep  6 13:54:45 vpnserv mpd: [L-2]   MAGICNUM 55567812
Sep  6 13:54:45 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   MP MRRU 1614
Sep  6 13:54:45 vpnserv mpd: [L-2]   ENDPOINTDISC [LOCAL] bc ad 64 ca d7 42 4c fb 8d 10 e8 3d bb dd 72 30 00 00 0
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: SendConfigAck #1

Sep  6 13:54:45 vpnserv mpd: [L-2]   MRU 1400
Sep  6 13:54:45 vpnserv mpd: [L-2]   MAGICNUM 55567812
Sep  6 13:54:45 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 13:54:45 vpnserv mpd: [L-2]   MP MRRU 1614
Sep  6 13:54:45 vpnserv mpd: [L-2]   ENDPOINTDISC [LOCAL] bc ad 64 ca d7 42 4c fb 8d 10 e8 3d bb dd 72 30 00 00 0
Sep  6 13:54:45 vpnserv mpd: [L-2] LCP: state change Req-Sent --> Ack-Sent
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: SendConfigReq #2
Sep  6 13:54:47 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 13:54:47 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 13:54:47 vpnserv mpd: [L-2]   MRU 1500
Sep  6 13:54:47 vpnserv mpd: [L-2]   MAGICNUM 8e41659f
Sep  6 13:54:47 vpnserv mpd: [L-2]   AUTHPROTO CHAP MSOFTv2
Sep  6 13:54:47 vpnserv mpd: [L-2]   MP MRRU 2048
Sep  6 13:54:47 vpnserv mpd: [L-2]   MP SHORTSEQ
Sep  6 13:54:47 vpnserv mpd: [L-2]   ENDPOINTDISC [802.1] 00 30 05 9e 3f 5b
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: rec'd Configure Reject #2 (Ack-Sent)
Sep  6 13:54:47 vpnserv mpd: [L-2]   MP SHORTSEQ
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: SendConfigReq #3
Sep  6 13:54:47 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 13:54:47 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 13:54:47 vpnserv mpd: [L-2]   MRU 1500
Sep  6 13:54:47 vpnserv mpd: [L-2]   MAGICNUM 8e41659f
Sep  6 13:54:47 vpnserv mpd: [L-2]   AUTHPROTO CHAP MSOFTv2
Sep  6 13:54:47 vpnserv mpd: [L-2]   MP MRRU 2048
Sep  6 13:54:47 vpnserv mpd: [L-2]   ENDPOINTDISC [802.1] 00 30 05 9e 3f 5b
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: rec'd Configure Ack #3 (Ack-Sent)
Sep  6 13:54:47 vpnserv mpd: [L-2]   ACFCOMP
Sep  6 13:54:47 vpnserv mpd: [L-2]   PROTOCOMP
Sep  6 13:54:47 vpnserv mpd: [L-2]   MRU 1500
Sep  6 13:54:47 vpnserv mpd: [L-2]   MAGICNUM 8e41659f
Sep  6 13:54:47 vpnserv mpd: [L-2]   AUTHPROTO CHAP MSOFTv2
Sep  6 13:54:47 vpnserv mpd: [L-2]   MP MRRU 2048
Sep  6 13:54:47 vpnserv mpd: [L-2]   ENDPOINTDISC [802.1] 00 30 05 9e 3f 5b
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: state change Ack-Sent --> Opened
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: auth: peer wants nothing, I want CHAP
Sep  6 13:54:47 vpnserv mpd: [L-2] CHAP: sending CHALLENGE #1 len: 21
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: LayerUp

Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: rec'd Ident #2 (Opened)
Sep  6 13:54:47 vpnserv mpd: [L-2]   MESG: MSRASV5.20
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: rec'd Ident #3 (Opened)
Sep  6 13:54:47 vpnserv mpd: [L-2]   MESG: MSRAS-0-F1045MOB
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: rec'd Ident #4 (Opened)
Sep  6 13:54:47 vpnserv mpd: [L-2]   MESG: N/<DE>N<FB><DD><BD>HM-       <DD>^AM-^R)<E6>M-       <BF>
Sep  6 13:54:47 vpnserv mpd: [L-2] CHAP: rec'd RESPONSE #1 len: 59
Sep  6 13:54:47 vpnserv mpd: [L-2]   Name: "user2"
Sep  6 13:54:47 vpnserv mpd: [L-2] AUTH: Trying SYSTEM
Sep  6 13:54:47 vpnserv mpd: [L-2] AUTH: Found user user2 Uid:5001 Gid:5000 Fmt:$3$
Sep  6 13:54:47 vpnserv mpd: [L-2] AUTH: SYSTEM returned: undefined
Sep  6 13:54:47 vpnserv mpd: [L-2] CHAP: Auth return status: undefined
Sep  6 13:54:47 vpnserv mpd: [L-2] CHAP: Response is valid
Sep  6 13:54:47 vpnserv mpd: [L-2] CHAP: Reply message: S=E59A771463D679AB81BA37C074BE971DE8B9B890
Sep  6 13:54:47 vpnserv mpd: [L-2] CHAP: sending SUCCESS #1 len: 46
Sep  6 13:54:47 vpnserv mpd: [L-2] LCP: authorization successful
Sep  6 13:54:47 vpnserv mpd: [L-2] Link: Matched action 'bundle "B" ""'
Sep  6 13:54:47 vpnserv mpd: [L-2] Creating new bundle using template "B".
Sep  6 13:54:47 vpnserv mpd: [B-2] Bundle: Interface ng0 created
Sep  6 13:54:47 vpnserv mpd: [L-2] Link: Join bundle "B-2"
Sep  6 13:54:47 vpnserv mpd: [B-2] Bundle: Status update: up 1 link, total bandwidth 64000 bps
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: Open event
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: state change Initial --> Starting
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: LayerStart
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: Open event
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: state change Initial --> Starting
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: LayerStart
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: Up event
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: Got IP 10.0.0.50 from pool "pool1" for peer
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: state change Starting --> Req-Sent
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: SendConfigReq #1
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: Up event
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: state change Starting --> Req-Sent

Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: SendConfigReq #1
Sep  6 13:54:47 vpnserv mpd: [B-2]   MPPC
Sep  6 13:54:47 vpnserv mpd: [B-2]     0x010000e0:MPPE(40, 56, 128 bits), stateless
Sep  6 13:54:47 vpnserv mpd: [L-2] ACCT: wtmp L-2 user2 xx.xx.xx.xx login
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: rec'd Configure Request #5 (Req-Sent)
Sep  6 13:54:47 vpnserv mpd: [B-2]   MPPC
Sep  6 13:54:47 vpnserv mpd: [B-2]     0x01000040:MPPE(128 bits), stateless
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: SendConfigAck #5
Sep  6 13:54:47 vpnserv mpd: [B-2]   MPPC
Sep  6 13:54:47 vpnserv mpd: [B-2]     0x01000040:MPPE(128 bits), stateless
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: state change Req-Sent --> Ack-Sent
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: rec'd Configure Request #6 (Req-Sent)
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]     NAKing with 10.0.0.50
Sep  6 13:54:47 vpnserv mpd: [B-2]   PRIDNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]     NAKing with 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2]   PRINBNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]   SECDNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]   SECNBNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: SendConfigRej #6
Sep  6 13:54:47 vpnserv mpd: [B-2]   PRINBNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]   SECDNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]   SECNBNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: rec'd Configure Reject #1 (Req-Sent)
Sep  6 13:54:47 vpnserv mpd: [B-2]   COMPPROTO VJCOMP, 16 comp. channels, no comp-cid
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: SendConfigReq #2
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: rec'd Configure Nak #1 (Ack-Sent)
Sep  6 13:54:47 vpnserv mpd: [B-2]   MPPC
Sep  6 13:54:47 vpnserv mpd: [B-2]     0x01000040:MPPE(128 bits), stateless
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: SendConfigReq #2
Sep  6 13:54:47 vpnserv mpd: [B-2]   MPPC
Sep  6 13:54:47 vpnserv mpd: [B-2]     0x01000040:MPPE(128 bits), stateless
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: rec'd Configure Request #7 (Req-Sent)
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]     NAKing with 10.0.0.50

Sep  6 13:54:47 vpnserv mpd: [B-2]   PRIDNS 0.0.0.0
Sep  6 13:54:47 vpnserv mpd: [B-2]     NAKing with 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: SendConfigNak #7
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 10.0.0.50
Sep  6 13:54:47 vpnserv mpd: [B-2]   PRIDNS 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: rec'd Configure Ack #2 (Req-Sent)
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: state change Req-Sent --> Ack-Rcvd
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: rec'd Configure Ack #2 (Ack-Sent)
Sep  6 13:54:47 vpnserv mpd: [B-2]   MPPC
Sep  6 13:54:47 vpnserv mpd: [B-2]     0x01000040:MPPE(128 bits), stateless
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: state change Ack-Sent --> Opened
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: LayerUp
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: Compress using: mppc (MPPE(128 bits), stateless)
Sep  6 13:54:47 vpnserv mpd: [B-2] CCP: Decompress using: mppc (MPPE(128 bits), stateless)
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: rec'd Configure Request #8 (Ack-Rcvd)
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 10.0.0.50
Sep  6 13:54:47 vpnserv mpd: [B-2]     10.0.0.50 is OK
Sep  6 13:54:47 vpnserv mpd: [B-2]   PRIDNS 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: SendConfigAck #8
Sep  6 13:54:47 vpnserv mpd: [B-2]   IPADDR 10.0.0.50
Sep  6 13:54:47 vpnserv mpd: [B-2]   PRIDNS 10.0.0.1
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: state change Ack-Rcvd --> Opened
Sep  6 13:54:47 vpnserv mpd: [B-2] IPCP: LayerUp
Sep  6 13:54:47 vpnserv mpd: [B-2]   10.0.0.1 -> 10.0.0.50
Sep  6 13:54:47 vpnserv mpd: [B-2] IFACE: No interface to proxy arp on for 10.0.0.50
Sep  6 13:54:47 vpnserv mpd: [B-2] IFACE: Up event
tcpdump : (111.111.111.111 - клиент, 222.222.222.222 - сервер)

Код: Выделить всё

17:54:25.148815 IP 111.111.111.111.3742 > 222.222.222.222.1723: Flags [S], seq 1475934750, win 65535, options [mss 1460,nop,nop,sackOK], length 0
17:54:25.148853 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [S.], seq 777439343, ack 1475934751, win 65535, options [mss 1460,sackOK,eol], length 0
17:54:25.196916 IP 111.111.111.111.3742 > 222.222.222.222.1723: Flags [P.], ack 1, win 65535, length 156: pptp CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0) FIRM_REV(2600) [|pptp]
17:54:25.197083 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [P.], ack 157, win 65535, length 156: pptp CTRL_MSGTYPE=SCCRP PROTO_VER(1.0) RESULT_CODE(1) ERR_CODE(0) FRAME_CAP(AS) BEARER_CAP(DA) MAX_CHAN(0) FIRM_REV(257) [|pptp]
17:54:25.245304 IP 111.111.111.111.3742 > 222.222.222.222.1723: Flags [P.], ack 157, win 65379, length 168: pptp CTRL_MSGTYPE=OCRQ CALL_ID(0) CALL_SER_NUM(27664) MIN_BPS(300) MAX_BPS(100000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0) PHONE_NO_LEN(0) [|pptp]
17:54:25.245755 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [P.], ack 325, win 65535, length 32: pptp CTRL_MSGTYPE=OCRP CALL_ID(45976) PEER_CALL_ID(0) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0) CONN_SPEED(64000) RECV_WIN(16) PROC_DELAY(1) PHY_CHAN_ID(0)
17:54:25.245932 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 0, length 54: LCP, Conf-Request (0x01), id 1, length 40
17:54:25.295715 IP 111.111.111.111.3742 > 222.222.222.222.1723: Flags [P.], ack 189, win 65347, length 24: pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(45976) SEND_ACCM(0xffffffff) RECV_ACCM(0xffffffff)
17:54:25.399513 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [.], ack 349, win 65535, length 0
17:54:27.333417 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 1, length 54: LCP, Conf-Request (0x01), id 2, length 40
17:54:29.422865 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 2, length 54: LCP, Conf-Request (0x01), id 3, length 40
17:54:31.512752 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 3, length 54: LCP, Conf-Request (0x01), id 4, length 40
17:54:33.602719 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 4, length 54: LCP, Conf-Request (0x01), id 5, length 40
17:54:35.692591 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 5, length 54: LCP, Conf-Request (0x01), id 6, length 40
17:54:37.781869 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 6, length 54: LCP, Conf-Request (0x01), id 7, length 40
17:54:39.871317 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 7, length 54: LCP, Conf-Request (0x01), id 8, length 40
17:54:41.961262 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 8, length 54: LCP, Conf-Request (0x01), id 9, length 40
17:54:44.050882 IP 222.222.222.222 > 111.111.111.111: GREv1, call 0, seq 9, length 54: LCP, Conf-Request (0x01), id 10, length 40
17:54:46.140512 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [P.], ack 349, win 65535, length 148: pptp CTRL_MSGTYPE=CDN CALL_ID(45976) RESULT_CODE(3) ERR_CODE(0) CAUSE_CODE(0) [|pptp]
17:54:46.188734 IP 111.111.111.111.3742 > 222.222.222.222.1723: Flags [P.], ack 337, win 65199, length 16: pptp CTRL_MSGTYPE=StopCCRQ REASON(1)
17:54:46.188804 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [P.], ack 365, win 65535, length 16: pptp CTRL_MSGTYPE=StopCCRP RESULT_CODE(1) ERR_CODE(0)
17:54:46.188814 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [F.], seq 353, ack 365, win 65535, length 0
17:54:46.236876 IP 111.111.111.111.3742 > 222.222.222.222.1723: Flags [F.], seq 365, ack 354, win 65183, length 0
17:54:46.236892 IP 222.222.222.222.1723 > 111.111.111.111.3742: Flags [.], ack 366, win 65534, length 0
В фаерволе на сервере tcp 1723, gre, icmp - разрешено. (пробовал и вообще без фаервола - не влияет), к фаерволу клиента доступа нет.
Это что - порезанный у клиента GRE? Проблемы с MTU? куда копать?

Хостинговая компания Host-Food.ru
Хостинг HostFood.ru
 

Услуги хостинговой компании Host-Food.ru

Хостинг HostFood.ru

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

Аватара пользователя
Electronik
капитан
Сообщения: 1593
Зарегистрирован: 2008-11-15 17:32:56
Откуда: Минск
Контактная информация:

Re: pptp-сервер на mpd5 - не получается подключиться с winxp

Непрочитанное сообщение Electronik » 2011-09-06 18:14:57

какая ошибка на хр
Предскажем будущее hw по логам и дампу, снимем сглаз и порчу с рута, поможем придумать пароль(С)
Блог


Аватара пользователя
Electronik
капитан
Сообщения: 1593
Зарегистрирован: 2008-11-15 17:32:56
Откуда: Минск
Контактная информация:

Re: pptp-сервер на mpd5 - не получается подключиться с winxp

Непрочитанное сообщение Electronik » 2011-09-06 23:22:35

на xp брандмауэр отключён?
Предскажем будущее hw по логам и дампу, снимем сглаз и порчу с рута, поможем придумать пароль(С)
Блог


Аватара пользователя
tynix
сержант
Сообщения: 246
Зарегистрирован: 2008-08-06 8:25:42
Откуда: Красноярск

Re: pptp-сервер на mpd5 - не получается подключиться с winxp

Непрочитанное сообщение tynix » 2011-09-07 17:06:19

А чего это от 222 к 111 есть GRE трафик, а обратно нет?
Настройте l2tp - там в мпд пару строчек поменять и в винде в реестре отключить IPSEC (если нужно по-быстрому). Тогда точно будет видно, кто и что режет.
Don' t panic !
cd /usr/ports && make srach
make: don't know how to make srach. Stop

Аватара пользователя
xelak
сержант
Сообщения: 173
Зарегистрирован: 2007-12-09 16:20:00
Откуда: Украина,Харьков
Контактная информация:

Re: pptp-сервер на mpd5 - не получается подключиться с winxp

Непрочитанное сообщение xelak » 2011-09-08 15:12:22

pptp не коннетит более одного клиента из-за ната.

Аватара пользователя
tynix
сержант
Сообщения: 246
Зарегистрирован: 2008-08-06 8:25:42
Откуда: Красноярск

Re: pptp-сервер на mpd5 - не получается подключиться с winxp

Непрочитанное сообщение tynix » 2011-09-09 16:18:24

Зависит от ната.
Don' t panic !
cd /usr/ports && make srach
make: don't know how to make srach. Stop