mpd, MS-vpn and growing confusion. (apparently solved)

Peter Cornelius pcc at gmx.net
Thu Oct 9 09:27:20 PDT 2003


HEUREKA! 
 
Hi, 
 
> > 	set link yes chap 
> if you are using mpd in client mode, then please don't use "yes" or 
> "enable", just use accept: 
> set link no pap chap 
> set link accept chap 
 
This apparently makes the difference.  I can't check detailed now, but I
have an IP address and routing entries, so I believe that it 
works. I'll check later as I have to leave now. 
 
> > 	set ccp yes mpp-compress 
> > 	set ccp yes stac 
> I assume you removed already these two lines. 
 
I now have: 
 
vpn: 
	new -i ng0 vpn vpn0 
	set iface disable on-demand 
	set iface addrs 172.16.26.129 172.16.26.127 
	set iface idle 0 
	#### disconnect the client after 8 hours 
	set iface session 28800 
	set iface route 172.16.26.0/16 
	set bundle disable multilink 
	set bundle authname "nt-domain\\user" 
	set link yes acfcomp protocomp 
	set link no pap 
	# !!! MUST USE ACCEPT HERE IN CLIENT MODE !!! 
	#set link yes chap 
	set link accept chap 
	set link mtu 1460 
	#### If remote machine is NT you need this.. 
	set link enable no-orig-auth 
	set link keep-alive 61 753 
	set ipcp yes vjcomp 
	set ipcp ranges 172.16.26.129/16 172.16.26.127/16 
	#### The five lines below enable Microsoft Point-to-Point encryption 
	#### (MPPE) using the ng_mppc(8) netgraph node type. 
	set bundle enable compression 
	set ccp yes mppc 
	set ccp yes mpp-e40 
	set ccp yes mpp-e56 
	set ccp yes mpp-e128 
	set bundle enable crypt-reqd 
	set ccp yes mpp-stateless 
	# !!! MUST NOT USE mpp-compress WITH NT SERVER HERE !!! 
	#set ccp yes mpp-compress 
	# stac is not recommended but neither compiled in nor effective. 
	#set ccp yes stac 
	open 
 
Thanks a lot for the help, 
 
All the best, 
 
Peter. 

-- 
NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien...
Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService

Jetzt kostenlos anmelden unter http://www.gmx.net

+++ GMX - die erste Adresse für Mail, Message, More! +++



More information about the freebsd-net mailing list