PPTP local authentication problem

remi-reszka · ‎12-11-2010

Hi all,

I have a UC560 box with uc500-advipservicesk9-mz.150-1.XA2 on it and configured for PPTP termination, using windows PPTP client for remote access. Everything works perfectly until I upgrade IOS to uc500-advipservicesk9-mz.150-1.XA3a. Now when the clients try to authenticate I get the following from debugginf ppp:

xxx#
000288: .Dec 12 05:52:56.486: PPP: Alloc Context [86B36B04]
000289: .Dec 12 05:52:56.486: ppp2 PPP: Phase is ESTABLISHING
000290: .Dec 12 05:52:56.486: ppp2 PPP: Using vpn set call direction
000291: .Dec 12 05:52:56.486: ppp2 PPP: Treating connection as a callin
000292: .Dec 12 05:52:56.486: ppp2 PPP: Session handle[BA000002] Session id[2]
000293: .Dec 12 05:52:56.486: ppp2 LCP: Event[OPEN] State[Initial to Starting]
000294: .Dec 12 05:52:56.486: ppp2 PPP LCP: Enter passive mode, state[Stopped]
xxx#
000295: .Dec 12 05:52:58.486: ppp2 PPP LCP: Exit passive mode, state[Starting]
000296: .Dec 12 05:52:58.486: ppp2 LCP: O CONFREQ [Starting] id 1 len 15
000297: .Dec 12 05:52:58.486: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000298: .Dec 12 05:52:58.486: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000299: .Dec 12 05:52:58.486: ppp2 LCP: Event[UP] State[Starting to REQsent]
xxx#
000300: .Dec 12 05:53:00.502: ppp2 LCP: O CONFREQ [REQsent] id 2 len 15
000301: .Dec 12 05:53:00.502: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000302: .Dec 12 05:53:00.502: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000303: .Dec 12 05:53:00.502: ppp2 LCP: Event[Timeout+] State[REQsent to REQsent]
xxx#
000304: .Dec 12 05:53:02.518: ppp2 LCP: O CONFREQ [REQsent] id 3 len 15
000305: .Dec 12 05:53:02.518: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000306: .Dec 12 05:53:02.518: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000307: .Dec 12 05:53:02.518: ppp2 LCP: Event[Timeout+] State[REQsent to REQsent]
xxx#
000308: .Dec 12 05:53:04.534: ppp2 LCP: O CONFREQ [REQsent] id 4 len 15
000309: .Dec 12 05:53:04.534: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000310: .Dec 12 05:53:04.534: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000311: .Dec 12 05:53:04.534: ppp2 LCP: Event[Timeout+] State[REQsent to REQsent]
xxx#
000312: .Dec 12 05:53:06.550: ppp2 LCP: O CONFREQ [REQsent] id 5 len 15
000313: .Dec 12 05:53:06.550: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000314: .Dec 12 05:53:06.550: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000315: .Dec 12 05:53:06.550: ppp2 LCP: Event[Timeout+] State[REQsent to REQsent]
xxx#
000316: .Dec 12 05:53:08.567: ppp2 LCP: O CONFREQ [REQsent] id 6 len 15
000317: .Dec 12 05:53:08.567: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000318: .Dec 12 05:53:08.567: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000319: .Dec 12 05:53:08.567: ppp2 LCP: Event[Timeout+] State[REQsent to REQsent]
xxx#
000320: .Dec 12 05:53:10.583: ppp2 LCP: O CONFREQ [REQsent] id 7 len 15
000321: .Dec 12 05:53:10.583: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000322: .Dec 12 05:53:10.583: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000323: .Dec 12 05:53:10.583: ppp2 LCP: Event[Timeout+] State[REQsent to REQsent]
xxx#
000324: .Dec 12 05:53:12.599: ppp2 LCP: O CONFREQ [REQsent] id 8 len 15
000325: .Dec 12 05:53:12.599: ppp2 LCP:    AuthProto MS-CHAP (0x0305C22380)
000326: .Dec 12 05:53:12.599: ppp2 LCP:    MagicNumber 0xD10211FE (0x0506D10211FE)
000327: .Dec 12 05:53:12.599: ppp2 LCP: Event[Timeout+] State[REQsent to REQsent]
000328: .Dec 12 05:53:13.515: ppp2 PPP DISC: Lower Layer disconnected
000329: .Dec 12 05:53:13.515: ppp2 PPP: Sending Acct Event[Down] id[E]
000330: .Dec 12 05:53:13.515: ppp2 LCP: O TERMREQ [REQsent] id 9 len 4
000331: .Dec 12 05:53:13.515: ppp2 LCP: Event[CLOSE] State[REQsent to Closing]
000332: .Dec 12 05:53:13.515: ppp2 PPP: Phase is TERMINATING
xxx#
000333: .Dec 12 05:53:13.519: ppp2 LCP: Event[DOWN] State[Closing to Initial]
000334: .Dec 12 05:53:13.519: ppp2 PPP: Phase is DOWN
xxxx#

The Windows client gets error 619. The funny thing is when I go back to the previous IOS, I still have the same problem so to speak my PPTP termination no longer works with any of the IOS. I tried to reconfigure PPTP and play with the config but with no results. Anyone has any idea how to resolve it? Thanks in advance.

Herbert Baerten · ‎12-15-2010

Hi Remi,

If it works in one version and not in the next without any changes, then this is (most likely) a bug and I would suggest either trying 15.1T or opening a TAC case.

However if you still see the problem after downgrading then something else must be wrong. But what do you mean exactly with "I still have the same problem so to speak" ? The problem is not exactly the same?

In any case, the problem seems to be that the router sends a PPP CONFREQ to the client but does not get a response (if it does not like the request it should at least respond with a reject).

I suggest enabling PPP logs on the client to see what is happening there. Check http://support.microsoft.com/kb/234014

hth

Herbert