pptpclient vpn connection with FreeBSD 6.0-BETA4

G B bsd-daemon at spray.se
Mon Sep 12 03:49:36 PDT 2005


Hello all,
I'm trying to connect a FreeBSD client computer to a Watchguard company firewall that only has PPTP VPN connectivity.

# uname -sr
FreeBSD 6.0-BETA4

pptpclient 1.7.0 + patch-aa and patch-ac from ports (also tried the older 1.5.0 from ports)

/etc/ppp/ppp.conf
company:
 set authname username
 set authkey password
 set timeout 0
 set ifaddr 0 0
 add 192.168.100.0/24 HISADDR
 disable ipv6cp

/var/log/messages
Sep 12 11:35:30 thinkpad pptp[819]: anon log[main:pptp.c:267]: The synchronous pptp option is NOT activated
Sep 12 11:35:30 thinkpad pptp[822]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Sep 12 11:35:30 thinkpad pptp[822]: anon log[ctrlp_disp:pptp_ctrl.c:738]: Received Start Control Connection Reply
Sep 12 11:35:30 thinkpad pptp[822]: anon log[ctrlp_disp:pptp_ctrl.c:772]: Client connection established.
Sep 12 11:35:31 thinkpad pptp[822]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Sep 12 11:35:31 thinkpad pptp[822]: anon log[ctrlp_disp:pptp_ctrl.c:857]: Received Outgoing Call Reply.
Sep 12 11:35:31 thinkpad pptp[822]: anon log[ctrlp_disp:pptp_ctrl.c:896]: Outgoing call established (call ID 0, peer's call ID 1).
Sep 12 11:35:34 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 1
Sep 12 11:35:34 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 2
Sep 12 11:35:34 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 3
Sep 12 11:35:34 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 4
Sep 12 11:35:34 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 5
Sep 12 11:35:34 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 6
Sep 12 11:35:35 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 7
Sep 12 11:35:35 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 8
Sep 12 11:35:35 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 9
Sep 12 11:35:35 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 10
Sep 12 11:35:35 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 11
Sep 12 11:35:35 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 12
Sep 12 11:35:35 thinkpad pptp[823]: anon log[decaps_gre:pptp_gre.c:388]: accepting packet 13
Sep 12 11:36:31 thinkpad pptp[822]: anon log[logecho:pptp_ctrl.c:676]: Echo Reply received.
Sep 12 11:37:31 thinkpad pptp[822]: anon log[logecho:pptp_ctrl.c:676]: Echo Reply received.
Sep 12 11:39:31 thinkpad last message repeated 2 times

/var/log/ppp.log
Sep 12 11:35:32 thinkpad ppp[819]: Phase: Using interface: tun0
Sep 12 11:35:32 thinkpad ppp[819]: Phase: deflink: Created in closed state
Sep 12 11:35:32 thinkpad ppp[819]: Phase: PPP Started (direct mode).
Sep 12 11:35:32 thinkpad ppp[819]: Phase: bundle: Establish
Sep 12 11:35:32 thinkpad ppp[819]: Phase: deflink: closed -> opening
Sep 12 11:35:32 thinkpad ppp[819]: Phase: deflink: Connected!
Sep 12 11:35:32 thinkpad ppp[819]: Phase: deflink: opening -> carrier
Sep 12 11:35:33 thinkpad ppp[819]: Phase: deflink: carrier -> lcp
Sep 12 11:35:34 thinkpad ppp[819]: Phase: bundle: Authenticate
Sep 12 11:35:34 thinkpad ppp[819]: Phase: deflink: his = CHAP 0x81, mine = none
Sep 12 11:35:34 thinkpad ppp[819]: Phase: Chap Input: CHALLENGE (16 bytes from watchguard)
Sep 12 11:35:34 thinkpad ppp[819]: Phase: Chap Output: RESPONSE (username)
Sep 12 11:35:34 thinkpad ppp[819]: Phase: Chap Input: SUCCESS (S=XXXXXXXXXXXXXXXXXXXXXXXXX)
Sep 12 11:35:34 thinkpad ppp[819]: Phase: deflink: lcp -> open
Sep 12 11:35:34 thinkpad ppp[819]: Phase: bundle: Network

# ifconfig tun0
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 336
        inet 192.168.100.242 --> 192.168.100.1 netmask 0xffffffff
        Opened by PID 819

# netstat -rn
Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            213.199.xx.xx      UGS         0       81   fxp0
127.0.0.1          127.0.0.1          UH          0       10    lo0
192.168.100        192.168.100.1      UGS         0       12   tun0
192.168.100.1      192.168.100.242    UH          1       18   tun0
213.199.xx         link#2             UC          0        0   fxp0
213.199.xx.xx      00:00:0c:xx:xx:xx  UHLW        2        0   fxp0    577

So the tunnel seems to be up, but there seems to be no traffic reaching the other side:
# ping 192.168.100.1
PING 192.168.100.1 (192.168.100.1): 56 data bytes
^C
--- 192.168.100.1 ping statistics ---
6 packets transmitted, 0 packets received, 100% packet loss

Is pptp broken on FreeBSD 6.x or is there another problem?
FWIW the connection works from another computer running Mac OS X 10.3


More information about the freebsd-net mailing list