Re: pptp server woes

[Leif Larsson <leif.larsson@l3system.se>]

I've had a lot of trouble with win98 clients. The problem was 
the install of Microsoft VPN Adapter. 90% of the issues were 
resolved by updating the driver (windows update) and/or:
try to uninstall the driver and then install it 
via the control-panel,add-remove programs, communications, VPN.
NOT via control-panel,network. I know it sounds strange. I saw 
the tip on some page on the internet. Dont forget to reboot 
in between installs/uninstalls.
Check the traffic on the BSD box with something like:
tcpdump -n -i "outside interface" proto gre or port 1723
There should be between 5-10 packets to/from port 1723 (server) 
and after that a couple of "gre packets". 
If the install is faulty there will not any "gre packets".

Leif




Raan Young wrote:
> 
> > I haven't set up a VPN server on OpenBSD, but I have set up some using Win9x
> > clients and NT4 Server.  I do know that Win9x does require the GRE protocol
> > for pptp, and if GRE is blocked (firewall, router) it behaves like this.
> > Perhaps removing GRE wasn't the answer?
> 
> Well, it didn't work with GRE in place either.  I got the idea to remove it from
> several emails in the archive and faq 6.9.  Now, faq 6.9 is talking about
> setting up OpenBSD as a pptp client (whereas I want a server) but it seemed like
> a good thing to try, and it did change the error message I was getting...
> 
> The server system is also functioning as a firewall, and I did have to add rules
> to allow proto gre in and out -- but that much seems to be working, since the
> firewall stopped reporting those packets as blocked...
> 
> Let me clarify that I removed the gre psuedo-device, not the gre protocol.
> 
> Raan

-- 
L3 System AB
http://www.l3system.se
--------------

PGP key fingerprint = E2 44 1D 09 C8 46 1A 4B  89 52 9B A3 34 C0 2F A2