cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1387
Views
0
Helpful
1
Replies

Unable to negotiate IP using IPCP with Windows server

Ilya.Kazakevich
Level 1
Level 1

Hello,

I am connecting to Windows server using PPP (for vpn), I establish connection but server does not respond me for my address requests:

*Mar 23 00:40:06.055: Vi1 MS-CHAP-V2: I CHALLENGE id 0 len 25 from "MSDC"

*Mar 23 00:40:06.063: Vi1 MS CHAP V2: Using hostname from interface CHAP

*Mar 23 00:40:06.063: Vi1 MS CHAP V2: Using password from interface CHAP

*Mar 23 00:40:06.067: Vi1 MS-CHAP-V2: O RESPONSE id 0 len 69 from "XXX"

*Mar 23 00:40:06.087: Vi1 PPP: I pkt type 0xC223, datagramsize 50 link[ppp]

*Mar 23 00:40:06.087: Vi1 MS-CHAP-V2: I SUCCESS id 0 len 46 msg is "S=XXX"

*Mar 23 00:40:06.087: Vi1 MS CHAP V2 No Password found for : XXX

*Mar 23 00:40:06.091: Vi1 MS CHAP V2 Check AuthenticatorResponse Success for : XXX

*Mar 23 00:40:06.091: Vi1 IPCP: O CONFREQ [Closed] id 1 len 20

*Mar 23 00:40:06.091: Vi1 IPCP:    VSO OUI 0x00000C kind 1 (0x000A00000C0100000000)

*Mar 23 00:40:06.091: Vi1 IPCP:    Address 0.0.0.0 (0x030600000000)

*Mar 23 00:40:07.091: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access1, changed state to up

*Mar 23 00:40:07.091: Vi1 LCP: O ECHOREQ [Open] id 1 len 12 magic 0x194CAFCF

*Mar 23 00:40:07.103: Vi1 LCP-FS: I ECHOREP [Open] id 1 len 12 magic 0x361B62E5

*Mar 23 00:40:07.103: Vi1 LCP-FS: Received id 1, sent id 1, line up

*Mar 23 00:40:08.083: Vi1 IPCP: TIMEout: State REQsent

*Mar 23 00:40:08.083: Vi1 IPCP: O CONFREQ [REQsent] id 2 len 20

*Mar 23 00:40:08.083: Vi1 IPCP:    VSO OUI 0x00000C kind 1 (0x000A00000C0100000000)

*Mar 23 00:40:08.083: Vi1 IPCP:    Address 0.0.0.0 (0x030600000000)

*Mar 23 00:40:10.099: Vi1 IPCP: TIMEout: State REQsent

*Mar 23 00:40:10.099: Vi1 IPCP: O CONFREQ [REQsent] id 3 len 20

*Mar 23 00:40:10.099: Vi1 IPCP:    VSO OUI 0x00000C kind 1 (0x000A00000C0100000000)

*Mar 23 00:40:10.099: Vi1 IPCP:    Address 0.0.0.0 (0x030600000000)

*Mar 23 00:40:12.115: Vi1 IPCP: TIMEout: State REQsent

*Mar 23 00:40:12.115: Vi1 IPCP: O CONFREQ [REQsent] id 4 len 20

*Mar 23 00:40:12.115: Vi1 IPCP:    VSO OUI 0x00000C kind 1 (0x000A00000C0100000000)

*Mar 23 00:40:12.115: Vi1 IPCP:    Address 0.0.0.0 (0x030600000000)

*Mar 23 00:40:12.211: Vi1 LCP: O ECHOREQ [Open] id 2 len 12 magic 0x194CAFCF

*Mar 23 00:40:12.219: Vi1 LCP-FS: I ECHOREP [Open] id 2 len 12 magic 0x361B62E5

*Mar 23 00:40:12.219: Vi1 LCP-FS: Received id 2, sent id 2, line up

*Mar 23 00:40:14.131: Vi1 IPCP: TIMEout: State REQsent

*Mar 23 00:40:14.131: Vi1 IPCP: O CONFREQ [REQsent] id 5 len 20

*Mar 23 00:40:14.131: Vi1 IPCP:    VSO OUI 0x00000C kind 1 (0x000A00000C0100000000)

*Mar 23 00:40:14.131: Vi1 IPCP:    Address 0.0.0.0 (0x030600000000)

*Mar 23 00:40:16.147: Vi1 IPCP: TIMEout: State REQsent

*Mar 23 00:40:16.147: Vi1 IPCP: O CONFREQ [REQsent] id 6 len 20

*Mar 23 00:40:16.147: Vi1 IPCP:    VSO OUI 0x00000C kind 1 (0x000A00000C0100000000)

*Mar 23 00:40:16.147: Vi1 IPCP:    Address 0.0.0.0 (0x030600000000)

*Mar 23 00:40:17.331: Vi1 LCP: O ECHOREQ [Open] id 3 len 12 magic 0x194CAFCF

*Mar 23 00:40:17.343: Vi1 LCP-FS: I ECHOREP [Open] id 3 len 12 magic 0x361B62E5

*Mar 23 00:40:17.343: Vi1 LCP-FS: Received id 3, sent id 3, line up

You see: My router asks for address, but only keepalives are on line.

But the same server works with windows client!!

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

service internal

!

hostname Router

!

boot-start-marker

boot-end-marker

!

!

no aaa new-model

!

resource policy

!

ip subnet-zero

!

!

ip cef

vpdn enable

!

vpdn-group pptp

request-dialin

  protocol pptp

  pool-member 1

initiate-to ip XXXX

!

!

!

!

!

!

!

bridge irb

!

!

interface ATM0

no ip address

shutdown

no atm ilmi-keepalive

dsl operating-mode auto

!

interface FastEthernet0

!

interface FastEthernet1

!

interface FastEthernet2

!

interface FastEthernet3

!

interface Dot11Radio0

no ip address

shutdown

speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0

station-role root

!

interface Vlan1

no ip address

bridge-group 1

!

interface Dialer0

ip address negotiated

encapsulation ppp

dialer pool 1

dialer idle-timeout 0

dialer string XXX

dialer persistent

dialer vpdn

dialer-group 1

keepalive 5 3

no cdp enable

ppp authentication ms-chap-v2 optional

ppp eap refuse

ppp chap hostname XXX

ppp chap password 0 XXX

ppp ipcp mask request

ppp ipcp ignore-map

ppp ipcp address accept

!

interface BVI1

mac-address XXX.XXX.XXX

ip address dhcp

!

ip classless

ip route 172.0.0.0 255.0.0.0 Dialer0

!

no ip http server

no ip http secure-server

!

dialer-list 1 protocol ip permit

!

control-plane

!

bridge 1 protocol vlan-bridge

bridge 1 route ip

!

line con 0

no modem enable

line aux 0

line vty 0 4

login

!

scheduler max-task-time 5000

end

1 Reply 1

Ilya.Kazakevich
Level 1
Level 1

Fixed: MPPE was required by server. But why did PPP started IPCP phase before finishing encryption (which should be lcp)? Anyway, vpn works fine now.