Bekijk de volledige versie : pptp of wl500g
:eek:
Hi,everybody:
I am a newer to use wl500g.Now i have a problem:when i used PPTP to connect to a ipcop firewall,it throwout a error:No auth is possible..
I looked for the cause,then i found that:
Diagnosis: your pppd is refusing to perform MS-CHAP-V2 authentication. The PPTP Server requires it, and so it terminates the connection. The known causes are:
pppd could not find a matching entry in the chap-secrets file, (see below for causes)
pppd was built without MS-CHAP-V2 support (quite uncommon).
Then i want to know was the pptp of wl500g built with MS-CHAP-V2 support ? I checked my chap-secrets file many times,and also the redhat9 can use the file to connect to the ipcop,then why??:confused: :confused:
Who can help me?:o
Greeds
[admin@(none) ppp]$ pppd pty 'pptp keyg.3322.org --nolaunchpppd' call key debug
dump logfd 2 nodetach
pppd options in effect:
debug # (from command line)
nodetach # (from command line)
logfd 2 # (from command line)
linkname key # (from /tmp/ppp/peers/key)
unit 4 # (from /tmp/ppp/peers/key)
dump # (from command line)
noauth # (from /etc/ppp/options.pptp)
refuse-eap # (from /tmp/ppp/peers/key)
name test # (from /tmp/ppp/peers/key)
remotename key # (from /tmp/ppp/peers/key)
# (from /etc/ppp/options.pptp)
pty pptp keyg.3322.org --nolaunchpppd # (from /tmp/ppp/peers/key)
novj # (from /tmp/ppp/peers/key)
ipcp-accept-local # (from /tmp/ppp/peers/key)
ipcp-accept-remote # (from /tmp/ppp/peers/key)
ipparam key # (from /tmp/ppp/peers/key)
noipdefault # (from /tmp/ppp/peers/key)
usepeerdns # (from /tmp/ppp/peers/key)
nobsdcomp # (from /etc/ppp/options.pptp)
nodeflate # (from /etc/ppp/options.pptp)
using channel 6
Using interface ppp4
Connect: ppp4 <--> /dev/pts/1
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x7d871d22> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xc138854> <pcomp> <accomp>]
No auth is possible
sent [LCP ConfRej id=0x1 <auth chap MS-v2>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x7d871d22> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x2 <asyncmap 0x0> <auth chap MS> <magic 0xc138854> <pcomp> <accomp>]
No auth is possible
sent [LCP ConfRej id=0x2 <auth chap MS>]
rcvd [LCP ConfReq id=0x3 <asyncmap 0x0> <auth chap MD5> <magic 0xc138854> <pcomp> <accomp>]
No auth is possible
sent [LCP ConfRej id=0x3 <auth chap MD5>]
rcvd [LCP ConfReq id=0x4 <asyncmap 0x0> <magic 0xc138854> <pcomp> <accomp>]
sent [LCP ConfAck id=0x4 <asyncmap 0x0> <magic 0xc138854> <pcomp> <accomp>]
sent [CCP ConfReq id=0x1 <mppe -H -M -S -L -D +C>]
sent [IPCP ConfReq id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
rcvd [LCP EchoReq id=0x0 magic=0xc138854]
sent [LCP EchoRep id=0x0 magic=0x7d871d22]
rcvd [LCP TermReq id=0x5 "peer refused to authenticate"]
LCP terminated by peer (peer refused to authenticate)
sent [LCP TermAck id=0x5]
Script pptp keyg.3322.org --nolaunchpppd finished (pid 466), status = 0x0
Modem hangup
Connection terminated.
Now my problem is resolved.This tells us the debug information can only tell you "maybe it's the cause",but maybe it's not.
After looking for a long time(about 2 days),i decided to find the way to get out of the trouble.So i guess maybe it's only because the method of authentication is not supported.So...
I refused all the anthentication listed:
refuse-eap
refuse-pap
refuse-chap
refuse-mschap
and i was not sure whether the command is the found so i added:
ip-up-script /usr/local/sbin/ip-up
ip-down-script /usr/local/sbin/ip-down
and pty '/usr/sbin/pptp 192.168.100.21 --nolaunchpppd'
also added :
user 111
password 111
connect true
to make sure the name and password are accepted.
Then the wl500g's pptp connected to the ipcop's pptpd successfully.
Maybe there is superabundance.But i hope it's userful.
Greeds..
After the wl500g being connected to the ipcop firewall,i want to make the two lans below the wl500g and ipcop one lan.But i cannot ping each other.Maybe a route rule should be added,but i donnot know what to add.
I have tried to add:"route add -host 192.168.4.1" but it's not effective.And so is "route add -net 192.168.4.0 netmask 255.255.255.0 dev ppp0".
Then what should i do? Please somebody come to help me..
:confused: