VPN

Hi everybody,

after we upgraded from 1.34 to 1.8.1 the working PPTP configuration stopped passing traffic into the LAN. For testing I added a rule any->any into the firewall with no success.
It is possible to ping the PPTP-ServerIP but no traffic passes behind this point.
Upgrading to 1.8.2 after reading a post with a similar IPSec-Problem was not successfull.
Do I have to look at a configuration change for PPTP after upgrading?

Thanks a lot,

Marc

I did not have to change anything on all of mine.  That is not to say you will not have to.

One thing I would do, and save your config, and then reset to default, and rebuild the config from scratch.  This may remove some hidden cruft picked up along the way.

[Hardware crypto: Intel AES-NI]

I'm also experiencing some troubles with VPN.

Site A
- m0n0 1.3.X, VMWare ESXi 4.X, E1000 NICs, VPN works fine
- m0n0 1.3.X, VMWare ESXi 5.1, E1000 NICs, new hardware, VPN works fine
- m0n0 1.8.1, VMWare ESXi 5.1, E1000 NICs, VPN works fine

Site B
- m0n0 1.8.1, fresh install, VMWare ESXi 5.5, E1000 NICs, VPN do not work

Cross checking all settings on the VPN client, always getting "Error 628" from Windows 7.

A real long shot; the host hardware is different between the two servers and I noticed that the one where it is working says
Hardware crypto: Intel AES-NI at the Status - System information.

Other differencies:
- Virtual machine version; 7 vs 8 (Site A - Site B)
- Hardware NICs (although all other things that I use with m0n0 works as I expect)

Log output of one attempt to connect to Site B:

Code:

mpd: [L-1] Accepting PPTP connection
mpd: [L-1] Link: OPEN event
mpd: [L-1] LCP: Open event
mpd: [L-1] LCP: state change Initial --> Starting
mpd: [L-1] LCP: LayerStart
mpd: [L-1] PPTP: attaching to peer's outgoing call
mpd: [L-1] Link: UP event
mpd: [L-1] LCP: Up event
mpd: [L-1] LCP: state change Starting --> Req-Sent
mpd: [L-1] LCP: SendConfigReq #1
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: rec'd Configure Request #0 (Req-Sent)
mpd: [L-1] MRU 1400
mpd: [L-1] MAGICNUM 527b09ce
mpd: [L-1] PROTOCOMP
mpd: [L-1] ACFCOMP
mpd: [L-1] CALLBACK 6
mpd: [L-1] LCP: SendConfigRej #0
mpd: [L-1] CALLBACK 6
mpd: [L-1] LCP: SendConfigReq #2
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: rec'd Configure Request #2 (Req-Sent)
mpd: [L-1] MRU 1400
mpd: [L-1] MAGICNUM 527b09ce
mpd: [L-1] PROTOCOMP
mpd: [L-1] ACFCOMP
mpd: [L-1] LCP: SendConfigAck #2
mpd: [L-1] MRU 1400
mpd: [L-1] MAGICNUM 527b09ce
mpd: [L-1] PROTOCOMP
mpd: [L-1] ACFCOMP
mpd: [L-1] LCP: state change Req-Sent --> Ack-Sent
mpd: [L-1] LCP: SendConfigReq #3
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: SendConfigReq #4
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: SendConfigReq #5
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: SendConfigReq #6
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: SendConfigReq #7
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: SendConfigReq #8
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] LCP: SendConfigReq #9
mpd: [L-1] ACFCOMP
mpd: [L-1] PROTOCOMP
mpd: [L-1] MRU 1460
mpd: [L-1] MAGICNUM ffee3270
mpd: [L-1] AUTHPROTO CHAP MSOFTv2
mpd: [L-1] MP MRRU 2048
mpd: [L-1] MP SHORTSEQ
mpd: [L-1] ENDPOINTDISC [802.1] 00 0c 29 47 85 a0
mpd: [L-1] PPTP call terminated
mpd: [L-1] Link: DOWN event
mpd: [L-1] LCP: Close event
mpd: [L-1] LCP: state change Ack-Sent --> Closing
mpd: [L-1] LCP: SendTerminateReq #10
mpd: [L-1] LCP: Down event
mpd: [L-1] LCP: LayerFinish
mpd: [L-1] LCP: state change Closing --> Initial
mpd: [L-1] Link: SHUTDOWN event
mpd: [L-1] Link: Shutdown

I also was experiencing the same Error 628. Running ESXi 5.5.0. Upgrading from 1.8.1 to 1.8.2 did not fix the problem for me. However, I decided to try running the ESXi upgrade to 5.5.0 Update 2a and PPTP is now working!