HOWTO pptpclient with MS vpn server

KsE · # route add -net 10.10.0.0/24 dev ppp0

I thought I would write this 'cause it took me a while to get this working. I didn't find any posts on the forums, or docs, including the official at http://pptpclient.sourceforge.net/howto-gentoo.phtml that worked right to get gentoo to connect with MS vpn server.

We will assume the vpn is on network 10.10.0.0/24 and the client is on network 10.0.0.0/24.

First, add the use flag mppe-mppc for ppp.

rookbluff · n00b Joined: 20 Feb 2004 Posts: 9 Location: Virginia

KsE · Posted: Wed Feb 23, 2005 4:03 pm Post subject:

Can you post more of the error?
Do you have a raid controller?
Were you using genkernel before?
Did you emerge a new kernel? If so, did you copy the .config file from the old one?
When you start up the live cd on that computer, does it recognize your hdd's right away? Or do you need to modprobe something first?

...just need some more information.

rev138 · l33t Joined: 19 Jun 2003 Posts: 848 Location: Vermont, USA

rev138 · l33t Joined: 19 Jun 2003 Posts: 848 Location: Vermont, USA

Nevermind.... I needed to a '/sbin/' before the route command in the script. Works now

jingo · Posted: Sun Feb 27, 2005 2:30 pm Post subject:

I seem not to be able to connect!

KsE · Posted: Sun Feb 27, 2005 5:25 pm Post subject:

Are you connecting to a MS vpn server?

Can you post your configs? (take out sensitive info)

It doesn't look like it's trying to authenticate.

jingo · Posted: Sun Feb 27, 2005 6:11 pm Post subject:

/etc/ppp/peers/my_peer:

KsE · Posted: Mon Feb 28, 2005 3:25 am Post subject:

Hmm, you might want to email the pptpclient mailing list.

http://pptpclient.sourceforge.net/contact.phtml

The developers of pptpclient will be able to help you there. I'm not sure what's going on there.

RypPn · n00b Joined: 25 Nov 2004 Posts: 11

Hi there,

When I originally worked on the documentation for the pptp.sourceforge site in January it became evident that Copyright Issues were going to restrict what algorithms could be documented. If you need compression support also, I include the information I had worked on at the time but couldn't be included, hope this is of help...

Best Regards,

John R.

These are instructions for installing PPTP Client on Gentoo Linux.
Most of the software is available on portage, please remember to add USE flag mppe-mppc to /etc/make.conf to apply the mppe-mppc patch to ppp.

MPPE is Microsoft Point-To-Point Encryption, and is described in
RFC3078.
Microsoft Windows VPN Server requires MPPE.
You will need to patch your kernel if your PPTP Server requires it. The patch is available from http://www.polbox.com/h/hs001/<p>

Kernel Configuration

Apply the patch to the kernel:

$ cd /usr/src
$ ln -s linux-2.6.X-gentoo-rX linux-2.6.X
$ patch -p0 < linux-2.6.X-mppe-mppc-1.X.patch.gz

Configure the kernel:

$ make menuconfig
Cryptographic options --->
[*] Cryptographic API
[*] HMAC support
[M] MD5 digest algorithm
--- SHA1 digest algorithm
[M] SHA256 digest algorithm
[M] SHA384 and SHA512 digest algorithms
[M] DES and Triple DES EDE cipher algorithms
--- ARC4 cipher algorithm
[M] Deflate compression algorithm

and

Device Drivers --->
Networking support --->
[*] PPP (point-to-point protocol) support
[*] PPP filtering
[M] PPP support for async serial ports
[M] PPP support for sync tty ports
[M] PPP Deflate compression
[M] PPP BSD-Compress compression
[M] Microsoft PPP compression/encryption (MPPC/MPPE)

Emerge ppp:

$ emerge ppp

If you have enabled the mppe-mppc USE flag correctly output from this should look like this...
>>> emerge (1 of 1) net-dialup/ppp-2.4.2-r9 to /
>>> md5 src_uri ;-) ppp-2.4.2.tar.gz
>>> md5 src_uri ;-) ppp-2.4.2-mppe-mppc-1.1.patch.gz
>>> md5 src_uri ;-) ppp-dhcpc.tgz
>>> Unpacking source...
>>> Unpacking ppp-2.4.2.tar.gz to /var/tmp/portage/ppp-2.4.2-r9/work
>>> Unpacking ppp-2.4.2-mppe-mppc-1.1.patch.gz to /var/tmp/portage/ppp-2.4.2-r9/work
>>> Unpacking ppp-dhcpc.tgz to /var/tmp/portage/ppp-2.4.2-r9/work
* Applying cbcp-dosfix.patch ... [ ok ]
* Applying mpls.patch.gz ... [ ok ]
* Applying killaddr-smarter.patch.gz ... [ ok ]
* Applying cflags.patch ... [ ok ]
* Applying control_c.patch ... [ ok ]
mppe-mppc
* Enabling mppe-mppc support
* Applying ppp-2.4.2-mppe-mppc-1.1.patch.gz ... [ ok ]

(Final tip, edit /etc/ppp/peers/$TUNNEL and change require-mppe to mppe required stateless)

Installation

Update your portage tree:

$ emerge sync

Install pptpclient:

$ emerge -a pptpclient

Install pptpconfig (GUI):

$ emerge -a pptpconfig

Run as root and the window should appear:

$ pptpconfig

Or follow the last part on the pptp website to setup a desktop entry.

jkelly · n00b Joined: 25 Feb 2005 Posts: 6 Location: Suisse

Thanks to both John R. and KsE for the pointers. I'm still stuck in the water, after closely following John R.'s post (except for omitting "stateless" on "mppe required stateless", cuz that gave me an error), but my situation is a bit different: I'm trying to connect to a Debian machine that is acting as a PPTP server with MPPE compiled in (so that the boss can use the VPN from home from his Windows machine).

My colleague who set up the firewall/VPN server told me that I'd need MPPE, so I figured I'd follow standard directions PPTP w/MPPE. But when I try connecting using pptpconfig, I get this:

RypPn · n00b Joined: 25 Nov 2004 Posts: 11

If you'd like to work on this with me come on IRC to #gentoo on freenode, you'll find me under the nick RypPn. As long as you post the eventual solution back here for others to follow

Best Regards,

John

R4miu5 · Posted: Mon Mar 14, 2005 6:36 pm Post subject:

i was trying to connect to the vpn of my school but when i do pon my_peer nothing happens.

ifconfig ppp0:
tells me no ip just no packages arrived departed and so on...

i think theres an error about my chap-secrets, because i dont know exactly what to write in it.

my domain is mb my user name is skellxig and how does my file have to look if my password were test?

but its a good tutorial. its not your fault that im so stupid:D

KsE · Posted: Tue Mar 15, 2005 4:49 pm Post subject:

R4miu5 · Posted: Tue Mar 15, 2005 5:01 pm Post subject:

sorry my english is not the best. i dont really understand what you wanted to tell me.

but if i do pon my_peer and ifconfig ppp0 i see what i told you and after 1 second it disappears

KsE · Posted: Tue Mar 15, 2005 7:43 pm Post subject:

You're going to have to do some debugging to see what the problem is.

I explained this as the last code segment in the howto.

R4miu5 · Posted: Tue Mar 15, 2005 9:59 pm Post subject:

i get an error like

KsE · Posted: Wed Mar 16, 2005 7:13 pm Post subject:

Well, your chap authentication isn't working. What kernel do you have? Which patch did you use? Did you build the necessary kernel options?

I'd need to see your whole output for that. Also, you can try the pptp-client mailing list. The actual developers will answer your questions there, and they'll probably have more of an idea.

R4miu5 · Posted: Wed Mar 16, 2005 8:15 pm Post subject:

kernel: 2.6.11-r3
patch: http://www.polbox.com/h/hs001/linux-2.6.11-mppe-mppc-1.3.patch.gz
all modules activated

i'm sorry. but i cant copy and paste from the console. ill try the mailing list. thanks for help

MultiMike · n00b Joined: 31 May 2004 Posts: 38

After applying the patch, recompiling kernel and installing modules, I have no 'ppp_mppe' module that I can load. I have 'ppp-compress-18', but not the other. I am unable to successfully connect to the VPN, so is that why? How do I get this module?

R4miu5 · Posted: Fri Mar 18, 2005 6:45 pm Post subject:

i retried now and i get the following message:

KsE · Posted: Fri Mar 18, 2005 8:36 pm Post subject:

nichocouk · Guru Joined: 10 Mar 2005 Posts: 585 Location: Glasgow

Hi there,

I am about to install PPP to connect to my college's VPN server. I'm not sure if it is a Windows server or not. The admin says that in order to connect to VPN I 'will require to have MPOA installed in the linux kernel'. Has it something to do with MPPE? atm i'm using linux-2.6.10-gentoo-r6.

sorry if it's a stupid question...

_________________
nichocouk

L'Etat, c'est moi.

neilhwatson · l33t Joined: 06 Feb 2003 Posts: 719 Location: Canada

My pptp tunnel connects and is stable. However, I cannot route any traffic through it. I attempt to add a route but, that causes the tunnel to drop. For more info: https://forums.gentoo.org/viewtopic-t-311222-highlight-.html
_________________
The true guru is a teacher.
Neil Watson

nichocouk · Guru Joined: 10 Mar 2005 Posts: 585 Location: Glasgow

OK, sorry, my question was stupid... :roll:

It has nothing to do, these are two different options in the kernel config (and you don't need a patch to enable MPOA in the kernel).
_________________
nichocouk

L'Etat, c'est moi.