WL500gP + MSCHAP = ?

Printable View

Show 40 post(s) from this thread on one page

14-04-2007, 23:08
haywire

Íå ðàáîòàåò àâòîðèçàöèÿ MSCHAP

Ëîã âîò òàêîé
=========================
Jan 1 03:00:08 pppd[99]: Connect: ppp0 <--> /dev/pts/0
Jan 1 03:00:08 pptp[107]: anon log[main:pptp.c:267]: The synchronous pptp option is NOT activated
Jan 1 03:00:08 pptp[114]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jan 1 03:00:08 pptp[114]: anon log[ctrlp_disp:pptp_ctrl.c:732]: Received Start Control Connection Reply
Jan 1 03:00:08 pptp[114]: anon log[ctrlp_disp:pptp_ctrl.c:766]: Client connection established.
Jan 1 03:00:09 pptp[114]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jan 1 03:00:09 pptp[114]: anon log[ctrlp_disp:pptp_ctrl.c:851]: Received Outgoing Call Reply.
Jan 1 03:00:09 pptp[114]: anon log[ctrlp_disp:pptp_ctrl.c:890]: Outgoing call established (call ID 0, peer's call ID 54784).
Jan 1 03:00:11 pppd[99]: MS-CHAP authentication failed:
Jan 1 03:00:11 pppd[99]: Connection terminated.
=========================

Ðÿäîì ñòîÈò Dlink 524, ïåðåòûêàþ ïðîâîä â íåãî, âñ¸ ðàáîòàåò. Ëîãèí/ïàðîëü 100% ïðàâèëüíûå, â Dlink âáèâàþ òàêèå æå. ×òî äåëàòü ?
15-04-2007, 06:16
Oleg

Âèíäà ÷òî ïèøåò? MS-CHAP èëè MS-CHAP v2?
15-04-2007, 09:30
haywire

Âèíäà òîæå ïèøåò, ÷òî èìÿ/ïàðîëü íåâåðíûå. Â îïöèÿõ PPTP ñîåäèíåíèÿ ó âåíäû íåò MSCHAP, òîëüêî MSCHAPv2. Ýòî Vista. Ñìåíèë ïàðîëü íà èíòåðíåò, Dlink óïîðíî ðàáîòàåò, áîëüøå íè÷òî. Âîò ëîã îò Dlink-a.

====================
Thursday February 01, 2007 03:04:47 PPTP start to dial-up
Thursday February 01, 2007 03:04:47 Associated: PPTP:PNS=10.14.0.237
Thursday February 01, 2007 03:04:49 PPP1: TX LCP Request
Thursday February 01, 2007 03:04:49 PPP1: Rx LCP ACK
Thursday February 01, 2007 03:04:50 PPP1: Rx LCP Request
Thursday February 01, 2007 03:04:50 PPP1: Rx LCP Request
Thursday February 01, 2007 03:04:50 PPP1: TX LCP NACK
Thursday February 01, 2007 03:04:50 PPP1: Rx LCP Request
Thursday February 01, 2007 03:04:50 PPP1: TX LCP Reject
Thursday February 01, 2007 03:04:50 PPP1: Rx LCP Request
Thursday February 01, 2007 03:04:50 PPP1: TX LCP ACK
Thursday February 01, 2007 03:04:51 MSCHAP1: OK
Thursday February 01, 2007 03:04:51 PPP1: Rx IPCP Request
Thursday February 01, 2007 03:04:51 PPP1: Rx IPCP Request
Thursday February 01, 2007 03:04:51 PPP1: Tx IPCP Reguest
Thursday February 01, 2007 03:04:51 PPP1: Rx IPCP NACK/REJECT
Thursday February 01, 2007 03:04:51 IPCP1: IP is 10.16.250.112
Thursday February 01, 2007 03:04:51 PPP1: Tx IPCP Reguest
Thursday February 01, 2007 03:04:51 PPP1: Rx IPCP ACK
Thursday February 01, 2007 03:06:29 Disassociated: 00-13-CE-B6-CF-19
Thursday February 01, 2007 03:06:31 Associated: 00-13-CE-B6-CF-19 st=0
====================

Ìîæåò, ó íèõ êàêàÿ ïðîâåðêà ïî MAC àäðåñó ? Ìàëîâåðîÿòíî. Ðàíüøå, êîãäà ïåðåâîäèëñÿ ñ âåíäû (åù¸ òîãäà ñ XP), íå çàìå÷àë. ß èññÿê. Ìîæíî ìíå ÷òî-íèáóäü ïîñîâåòîâàòü ? Òåõ. ïîääåðæêà ïðîâàéäåðà íå ðàáîòàåò ïî âûõîäíûì.
15-04-2007, 09:44
Oleg

Íó, åñëè Âèíäîóñ íå êîííåêòèòñÿ - áåéòå ïðîâàéäåðà. Îí, âèäèìî, MSCHAP v2 íå íàñòðîèë êàê íàäî. À Ä-ëèíê âèäèìî MSCHAP v2 ïðîñòî íå óìååò.

Ïîïðîáóéòå â Additional pppd options âáèòü

-mschap-v2 +mschap
15-04-2007, 11:45
haywire

Îêàçàëîñü, ÷òî ïðîâàéäåð äåéñòâèòåëüíî MAC ïðîâåðÿåò. Ïðîñòàâèë MAC îò DLINK-à, çàðàáîòàëî. Ïðîøó ïðîùåíèÿ çà áåñïîêîéñòâî.
11-02-2008, 15:35
xam0

WL500gP + VPN CHAP áåç øèôðîâàíèÿ

Заранее спасибо всем, кто ответит.
Проблема следующая:
есть wl500gd с последней прошивкой с этого форума
небоходимо на нем настроить vpn через pptp у местного провайдера east telecom (мытищи)
Текущие настройки:
PPTP
IP 10.195.70.*
Mask 255.255.255.0
Gateway 10.195.70.1
DNS 195.170.32.18 195.170.32.1
user name и psw написаны верно, проверял несколько раз
Idle Disconnect Time 1800
Additional pppd options nomppe nomppc
Heart-Beat or PPTP/L2TP (VPN) Server 195.170.33.3

Внутренняя сеть провайдера видна. Статус постоянно Diconnected.
При этом если в любой момент стартовать vpn с машины, за которой сидишь, всё прекрасно работает. Привязки к маку быть не может, т.к. пробовал поднимать впн с разных машин.

Кусок лога:
Jan 1 00:00:09 pppd[102]: pppd 2.4.2 started by admin, uid 0
Jan 1 00:00:10 pppd[102]: Serial connection established.
Jan 1 00:00:10 pppd[102]: Using interface ppp0
Jan 1 00:00:10 pppd[102]: Connect: ppp0 <--> /dev/pts/0
Jan 1 00:00:10 pptp[108]: anon log[main:pptp.c:267]: The synchronous pptp option is NOT activated
Jan 1 00:00:10 pptp[117]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jan 1 00:00:10 pptp[117]: anon log[ctrlp_disp:pptp_ctrl.c:732]: Received Start Control Connection Reply
Jan 1 00:00:10 pptp[117]: anon log[ctrlp_disp:pptp_ctrl.c:766]: Client connection established.
Jan 1 00:00:11 pptp[117]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jan 1 00:00:11 pptp[117]: anon log[ctrlp_disp:pptp_ctrl.c:851]: Received Outgoing Call Reply.
Jan 1 00:00:11 pptp[117]: anon log[ctrlp_disp:pptp_ctrl.c:890]: Outgoing call established (call ID 0, peer's call ID 28976).
Jan 1 00:00:16 pppd[102]: Unknown MS-CHAP authentication failure: E=691 R=0
Jan 1 00:00:16 pptp[117]: anon log[ctrlp_disp:pptp_ctrl.c:922]: Call disconnect notification received (call id 28976)
Jan 1 00:00:16 pptp[117]: anon log[ctrlp_disp:pptp_ctrl.c:781]: Received Stop Control Connection Request.
Jan 1 00:00:16 pptp[117]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 4 'Stop-Control-Connection-Reply'
Jan 1 00:00:16 pptp[117]: anon log[callmgr_main:pptp_callmgr.c:263]: Closing connection
Jan 1 00:00:16 pptp[117]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Jan 1 00:00:16 pppd[102]: Modem hangup
Jan 1 00:00:16 pppd[102]: Connection terminated.
Jan 1 00:00:16 pptp[117]: anon log[pptp_read_some:pptp_ctrl.c:537]: read returned zero, peer has closed
Jan 1 00:00:18 pptp[117]: anon log[pptp_read_some:pptp_ctrl.c:537]: read returned zero, peer has closed
Jan 1 00:00:20 pptp[117]: anon log[call_callback:pptp_callmgr.c:83]: Closing connection
Jan 1 00:00:46 pptp[127]: anon log[main:pptp.c:267]: The synchronous pptp option is NOT activated
Jan 1 00:00:46 pppd[102]: Serial connection established.
Jan 1 00:00:46 pppd[102]: Using interface ppp0
Jan 1 00:00:46 pppd[102]: Connect: ppp0 <--> /dev/pts/0
Jan 1 00:00:46 pptp[131]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jan 1 00:00:46 pptp[131]: anon log[ctrlp_disp:pptp_ctrl.c:732]: Received Start Control Connection Reply
Jan 1 00:00:46 pptp[131]: anon log[ctrlp_disp:pptp_ctrl.c:766]: Client connection established.
Jan 1 00:00:47 pptp[131]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jan 1 00:00:47 pptp[131]: anon log[ctrlp_disp:pptp_ctrl.c:851]: Received Outgoing Call Reply.
Jan 1 00:00:47 pptp[131]: anon log[ctrlp_disp:pptp_ctrl.c:890]: Outgoing call established (call ID 0, peer's call ID 28978).
Jan 1 00:00:52 pppd[102]: Unknown MS-CHAP authentication failure: E=691 R=0
Jan 1 00:00:52 pppd[102]: Connection terminated
05-06-2008, 13:35
Davis2k3

WL500gP + VPN CHAP áåç øèôðîâàíèÿ.

WL500gP 1.9.2.7-9

Èìååòñÿ ïðîâàéäåð, ñïàðêîâñêèé.
Íàñòðîéêè òàêèå:
DHCP - âñå íàñòðîéêè, ò.å IP, GW, DNS è ò.ï âûäàþòñÿ àâòîìàòè÷åñêè.
VPN - ñåðâåð: 172.16.254.50, åñëè ïîä âèíäîé, òî â áåçîïàñíîñòè (â íàñòðîéêàõ VPN ñîåäåíåíèÿ)
Øèôðîâàíèå äàííûõ - îòêëþ÷åíî.
Ïðîòîêîë ïðîâåðêè ïàðîëÿ, òîëüêî CHAP, âñå îñòàëüíûå ãàëêè îòêëþ÷åíû.

Ðîóòåð íàñòðàèâàë òàê:
Òèï ñîåäèíåíèÿ PPTP
IP - àâòîìàò
DNS- àâòîìàò

Ëîãèí è ïàðîëü óêàçàë.
VPN ñåðâåð óêàçàë.
ÌÀÑ àäðåñà è ò.ï ñòàâèòü íå íóæíî.

Ñîáñòâåííî ðîóòåð ê èíåòó íå õî÷åò ïîäêëþ÷àòüñÿ, à åñëè ïîä âèíäîé, òî ñïîêîéíî ïîäêëþ÷àåòñÿ.

Âëîãàõ ðîóòåðà ïèøåò òàê:

Code:

pppd[108]: Starting link pppd[108]: Serial connection established. pppd[108]: Connect: ppp0 <--> /dev/pts/0 pppd[108]: LCP: timeout sending Config-Requests pppd[108]: Connection terminated. pppd[108]: Starting link pptp[164]: route_add: not adding existing route pppd[108]: Serial connection established. pppd[108]: Connect: ppp0 <--> /dev/pts/1

Ñîáñòâåííî è âñå, òàê è ìóðëûêàåò ýòè ñòðîêè. Ïîäñêàæèòå, ãäå è ÷òî íàäî ïîñòàâèòü?
P.S. Åñëè ãäå è ÷òî íå óêàçàë, ñîððè.
05-06-2008, 15:28
avk

Ýòîò êóñîê ëîãà íåèíôîðìàòèâåí. Ïîëíûé ëîã íåîáÿçàòåëåí, íî âîò ñ 6-7 ñåêóíäû ïðèëîæèòå, ïîñëå

Code:

Jan 1 03:00:07 kernel: vlan1: Setting MAC address to xx xx xx xx xx xx.
07-06-2008, 08:28
Davis2k3

Ñòðàíèöà WAN:

Òèï ñîåäèíåíèÿ: (PPTP)
IP àäðåñ (àâòîìàò):
Ñåòåâàÿ ìàñêà: àíàëîãè÷íàÿ êàê â ëîãàõ
Ãåéòâåé (àâòîìàò):

ÄÍÑ - àâòî

MTU: ïóñòî
MRU: ïóñòî

Service Name: ïóñòî
Access Concentrator Name: ïóñòî
Additional pppd options: ïóñòî

ISP:
Hostname: ïóñòî
MAC Address:
PPP Server: 172.16.254.50

Øèôðîâàíèå: No ÷åãî-òî òàì(íå ïîìíþ)

Ëîã : Âîò æàëóåòñÿ íà Unknown MS-CHAP authentication failure: E=691 R=0 ÿ òàê ïîíèìàþ, âîò âðîäå íå MS-CHAP à ïðîñòî CHAP, èáî êîãäà íà ÏÊ íàñòðàèâàþ, îòêëþ÷àþ øèôðîâàíèå, è óáèðàþ ãàëêè íà âñåõ MS-CHAPàõ, îñòàâëÿþ òîëüêî íà ïðîâåðêå ïàðîëÿ CHAP.

Code:

02:22 kernel: vlan1: Setting MAC address to 00 50 56 c0 00 01. 02:22 udhcpc[162]: udhcpc (v0.9.9-pre) started 02:22 dhcp client: deconfig: lease is lost 02:22 udhcpc[162]: Lease of 172.16.65.21 obtained, lease time 86400 02:22 dnsmasq[69]: read /etc/hosts - 5 addresses 02:22 dnsmasq[69]: reading /tmp/resolv.conf 02:22 dnsmasq[69]: using nameserver 86.110.161.242#53 02:22 dhcp client: bound IP : 172.16.65.21 from 172.16.65.1 02:22 pppd[172]: pppd 2.4.2 started by admin, uid 0 02:23 pppd[172]: Using interface ppp0 02:23 pppd[172]: local IP address 10.64.64.64 02:23 pppd[172]: remote IP address 10.112.112.112 02:29 pppd[172]: Starting link 02:29 pppd[172]: Serial connection established. 02:29 pppd[172]: Connect: ppp0 <--> /dev/pts/0 02:33 pppd[172]: Unknown MS-CHAP authentication failure: E=691 R=0 02:33 pppd[172]: Modem hangup 02:33 pppd[172]: Connection terminated. 02:49 login[184]: root login on `pts/0' 03:09 pppd[172]: Starting link 03:09 pppd[172]: Serial connection established. 03:09 pppd[172]: Connect: ppp0 <--> /dev/pts/1 03:09 pptp[195]: route_add: not adding existing route 03:13 pppd[172]: Unknown MS-CHAP authentication failure: E=691 R=0 03:13 pppd[172]: Modem hangup pppd[172]: Connection terminated.
07-06-2008, 08:57
avk

:confused: Ñåòåâàÿ ìàñêà: àíàëîãè÷íàÿ êàê â ëîãàõ
Òàê ÿ íå ïîíèìàþ! Íåóæåëè íåëüçÿ ïðîñòî óêàçàòü êàêàÿ? Â êàêèõ ëîãàõ?

:confused: MTU: ïóñòî
:confused: MRU: ïóñòî
Ïî÷åìó "ïóñòî"?

Êàêîé ïðîâàéäåð, êàêàå ïàðàìåòðû âûäàë?
07-06-2008, 09:29
Davis2k3

Ñîððè, íå äîñìîòðåë, èáî îòâëåêàþò ïîñòîÿííî:
MAC àäðåñ: 005056C00001

Íå ïóñòî âñå æå, à òèïà ïî óìîë÷àíèþ
MTU: 1492
MRU: 1492
Îíè íå ðåäàêòèðóþòñÿ.

Ïðîâàéäåð: Ñïàðê-êîì Ìîñêâà(êîòîðûå ÷åðåç ðîçåòêè èíåò ðàçäàþò)

Íàñòðîéêè íà ñåòåâîé èíòåðôåéñ ðàçäàþòñÿ àâòîìàòè÷åñêè ÷åðåç DHCP, ñîåäåíåíèå VPN-PPTP(IP òàê æå âûäàþòñÿ àâòîìàòè÷åñêè) â íàñòðîéêàõ VPN ñîåäåíåíèÿ îòêëþ÷èòü øèôðîâàíèå, ïîäêëþ÷àòüñÿ áåç øèôðîâàíèå MS-CHAP v2, ïîñòàâèòü ãàëî÷êó íà ïðîâåðêè ïàðîëÿ ïî CHAP, âáèòü ëîãèí è ïàðîëü è âñå. Íàñòðîéêè ÿ óêàçàë ïîñòîì âûøå.
09-06-2008, 11:18
Davis2k3

Âîáùåì óçíàë òî÷íî.
Âñå íàñòðîéêè âûäàþòñÿ àâòîìàòè÷åñêè ïî DHCP.
Ñîçäàåì VPN ïîäêëþ÷åíèå, âáèâàåì IP ñåðâåðà 172.16.254.50.
Ëîãèí è ïàðîëü, âî âêëàäêå áåçîïàñíîñòü, îòêëþ÷àåì øèôðîâàíèå, â òîì ÷èñëå è !!MS-CHAP!!, è âêëþ÷àåì ïðîâåðêó ïàðîëÿ ïî CHAP.
Â ðîóòåðå âñå ïðàâèëüíî íàñòðîåíî, íî â ëîãàõ ïèøåò ýòî:

Code:

Jan 1 00:06:09 pppd[176]: Starting link Jan 1 00:06:09 pppd[176]: Serial connection established. Jan 1 00:06:09 pppd[176]: Connect: ppp0 <--> /dev/pts/0 Jan 1 00:06:09 pptp[247]: route_add: not adding existing route Jan 1 00:06:19 pppd[176]: Unknown MS-CHAP authentication failure: E=691 R=0 Jan 1 00:06:19 pppd[176]: Modem hangup Jan 1 00:06:19 pppd[176]: Connection terminated.

Unknown MS-CHAP authentication failure: E=691 R=0
ß íå ïîíèìàþ îòêóäà ýòî, MS-CHAPa áûòü íå äîëæíî.

Òåïåðü ñàì âîïðîñ, êàê îòêëþ÷èòü MS-CHAP, è âîîáùå øèôðîâàíèå, åñëè òîëüêî îñòàâèòü ïðîâåðêó ïàðîëÿ ïî CHAP(ïðîñòîé CHAP, íè MS, íè MS v2)?
PPTP Options: ïóñòî
Additional pppd options: òàê æå ïóñòî.
Enable PPPoE Relay?: NO
09-06-2008, 14:50
avk

Ïîèñê!
Âîò åñëè åñòü íåìíîãî æåëàíèÿ, òî è ðåçóëüòàò áóäåò:

Quote:

Originally Posted by Oleg

Ïîçâîíèòü ïðîâàéäåðó è ñêàçàòü, ÷òîáû çàïðåòèëè MS-CHAP, ðàç îíè åãî íå ïîääåðæèâàþò.

Íà ñâîåé ñòîðîíå ìîæåòå âïèñàòü

-mschap-v2 -mschap

Â Additional pppd options.

Quote:

Originally Posted by Oleg

Íó, åñëè Âèíäîóñ íå êîííåêòèòñÿ - áåéòå ïðîâàéäåðà. Îí, âèäèìî, MSCHAP v2 íå íàñòðîèë êàê íàäî. À Ä-ëèíê âèäèìî MSCHAP v2 ïðîñòî íå óìååò.

Ïîïðîáóéòå â Additional pppd options âáèòü

-mschap-v2 +mschap
09-06-2008, 16:10
Davis2k3

Äàæå íå çíàþ êàê îòáëàãîäàðèòü. Âñå ðàáîòàåò!!! :)
PPTP Options: None
Additional pppd options: -mschap-v2 -mschap

Îñòàëüíûå íàñòðîéêè êàê ÿ ïèñàë âûøå, ò.å âñå âûäàåòñÿ ïî DHCP, îñòàåòñÿ òîëüêî âáèòü àäðåñ ñåðâåðà, ëîãèí è ïàðîëü, è âñå ïàøåò.
Èçâèíÿþñü ÷òî òóïèë, ïðîñòî èíåòà íåáûëî ïîä ðóêîé, ïîñòîÿííî îòâëåêàëè, ïîòîìó òàêàÿ ëàæà âûøëà. Ñïàñèáî åùå ðàç!
P.S. Íå òàê èñêàë, þçàë ïî ñëîâó CHAP, õîòÿ ïî MS-SHAP òîæå ìíîãî âñåãî âûõîäèò ïî ïîèñêó, à ò.ê èíåòà ïîä ðóêîé êàê òàêîâîãî íåáûëî, íàéòè íå ìîã.
09-06-2008, 17:54
avk

Quote:

Originally Posted by Davis2k3

Äàæå íå çíàþ êàê îòáëàãîäàðèòü. Âñå ðàáîòàåò!!! :)

Ðåàëèçóéòå Âàøó áëàãîäàðíîñòü â âèäå ñîîòâåòñòâóþùåãî ñîîáùåíèÿ â òåìå Íàñòðîéêè äëÿ ñåòåé ðàçíûõ ïðîâàéäåðîâ - ýòîãî áóäåò äîñòàòî÷íî.

Quote:

Originally Posted by Davis2k3

P.S. Íå òàê èñêàë, þçàë ïî ñëîâó CHAP, õîòÿ ïî MS-SHAP òîæå ìíîãî âñåãî âûõîäèò ïî ïîèñêó, à ò.ê èíåòà ïîä ðóêîé êàê òàêîâîãî íåáûëî, íàéòè íå ìîã.

Ïîèñê ïî êëþ÷åâûì ñëîâàì: *CHAP*
Ïîèñê ïî èìåíè ïîëüçîâàòåëÿ: Oleg

Show 40 post(s) from this thread on one page