Re: PPTP woes

From: Andre D. Henry (andre@go-net.com)
Date: Thu Oct 04 2001 - 09:29:02 EDT


I had a similar problem. I fixed it by running the newest IOS. On a 2600
it was 12.2(3) and I belive I upgraded from 12.2(1).

Andre

On Wed, 3 Oct 2001, kevin graham wrote:

>
> So I'm adding PPTP to a 3662 in hopes of being able to kill of an NT
> machine. I only mention it as a disclaimer that I know perfectly well I
> need to migrate users to IPSec or atleast L2TP.
>
> When making hte connection, the vpdn comes up, and the virtual-access
> interface is created. However, the conneciton is dying during PPP
> negotiation:
>
>
> 14w2d: Vi1 VPDN: O out
> 14w2d: Vi1 LCP: TIMEout: State REQsent
> 14w2d: Vi1 LCP: O CONFREQ [REQsent] id 37 len 15
> 14w2d: Vi1 LCP: AuthProto MS-CHAP (0x0305C22380)
> 14w2d: Vi1 LCP: MagicNumber 0xB401B18C (0x0506B401B18C)
> 14w2d: Vi1 VPDN: O out
> 14w2d: Vi1 LCP: TIMEout: State REQsent
> 14w2d: Vi1 LCP: O CONFREQ [REQsent] id 38 len 15
> 14w2d: Vi1 LCP: AuthProto MS-CHAP (0x0305C22380)
> 14w2d: Vi1 LCP: MagicNumber 0xB401B18C (0x0506B401B18C)
>
> It will loop on that for a number of times until the Win2k machine gives
> up and drops. There is never a CONFACK or even CONFNAK. Looking at the
> TAC, the only time I see this sited is when line speeds are munged or
> other misconfiguration -- it all points ot the lower layer, which in this
> case gives the pretense of working.
>
> The router is currently running 12.2(1) w/ lots of bells and whistles
> (c3660-jk9o3s-mz.122-1). All of the virtual access config is straight out
> of the 'PPTP with MPPE' configuration guide.
>
> #show vpdn
>
> %No active L2TP tunnels
>
> %No active L2F tunnels
>
> PPTP Tunnel and Session Information Total tunnels 1 sessions 1
>
> LocID Remote Name State Remote Address Port Sessions
> 110 estabd 192.168.9.165 2946 1
>
> LocID RemID TunID Intf Username State Last Chg
> 109 16384 110 Vi1 estabd 00:00:02
>
> %No active PPPoE tunnels
>
> #show int VIrtual-Access 1
> Virtual-Access1 is up, line protocol is up
> Hardware is Virtual Access interface
> Interface is unnumbered. Using address of Loopback0 (192.168.255.1)
> MTU 1500 bytes, BW 100 Kbit, DLY 100000 usec,
> reliability 255/255, txload 1/255, rxload 1/255
> Encapsulation PPP, loopback not set
> Keepalive not set
> DTR is pulsed for 5 seconds on reset
> LCP REQsent
> Closed: CCP
> Last input never, output never, output hang never
> Last clearing of "show interface" counters 00:06:01
> Queueing strategy: fifo
> Output queue 0/40, 0 drops; input queue 0/75, 0 drops
> 5 minute input rate 0 bits/sec, 0 packets/sec
> 5 minute output rate 0 bits/sec, 0 packets/sec
> 0 packets input, 0 bytes, 0 no buffer
> Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
> 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
> 7 packets output, 133 bytes, 0 underruns
> 0 output errors, 0 collisions, 0 interface resets
> 0 output buffer failures, 0 output buffers swapped out
> 0 carrier transitions
>
>
> .....
>
> vpdn-group 1
> ! Default PPTP VPDN group
> accept-dialin
> protocol pptp
> virtual-template 1
>
> interface Virtual-Template1
> ip unnumbered Loopback0
> ip mroute-cache
> no keepalive
> peer default ip address pool PPP
> ppp encrypt mppe auto
> ppp authentication ms-chap
> ip local pool PPP 192.168.255.2 192.168.255.61
>
>
> Any ideas where I should start looking? This has been a bit of a pet
> project that I've been tripping up on the same thing everytime I go back
> and revisit it (but haven't cared enough to really dig in). Have I just
> been staring at it too long and am missing something foolish?
>
> Thanks.
> ..kg..
>
>



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:19 EDT