FreeBSD mpd PPTP client connection to SnapGearLITE+

Daniel O'Connor doconnor at
Tue Apr 5 18:36:56 PDT 2005

On Tue, 5 Apr 2005 23:42, Walentyn wrote:
> >      Supports MPPE (draft-ietf-pppext-mppe)  MPPE is Microsoft Point to
> > Point Encryption scheme.  It is possible to configure ppp to participate
> > in Microsoft's Windows VPN.  For now, ppp can only get encryption keys
> > from CHAP 81 authentication.  ppp must be compiled with DES for MPPE to
> > oper- ate.
> I stand corrected.
> From my previous reading, it looked like there were a whole bunch of
> disparate patches to give ppp MMPE functionality.  From the quoted manual
> section, it seems that it has rudimentary functionality if you compile it
> yourself.  (I prefer NOT to roll my own.)

Only if you build world with -DNO_CRYPTO does PPP not have DES support.

I have had userland ppp as both a client and server for doing MPPE with.

> Also from what I read, it would appear that netgraph/mpd, etc. is a more
> integrated more cleanly coded implementation that should work very well --
> if you can get it to work, that is.  :)

Try ppp and see if it works.

> I'll tinker with my set up for another day or two.  If I'm able to get it
> working I'll report.  Otherwise, I found that SnapGear may be dead as a
> company but Cyberguard still supports it and has come out with some very
> interesting new products, in particular a PCI NIC firewall/VPN (see URL
> below) which might just be what I need.

Looks kind of neat but IMO a bit of a waste of money :)

Daniel O'Connor software and network engineer
for Genesis Software -
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url :

More information about the freebsd-stable mailing list