mpd, MS-vpn and growing confusion. (apparently solved)
Peter Cornelius
pcc at gmx.net
Thu Oct 9 09:27:20 PDT 2003
HEUREKA!
Hi,
> > set link yes chap
> if you are using mpd in client mode, then please don't use "yes" or
> "enable", just use accept:
> set link no pap chap
> set link accept chap
This apparently makes the difference. I can't check detailed now, but I
have an IP address and routing entries, so I believe that it
works. I'll check later as I have to leave now.
> > set ccp yes mpp-compress
> > set ccp yes stac
> I assume you removed already these two lines.
I now have:
vpn:
new -i ng0 vpn vpn0
set iface disable on-demand
set iface addrs 172.16.26.129 172.16.26.127
set iface idle 0
#### disconnect the client after 8 hours
set iface session 28800
set iface route 172.16.26.0/16
set bundle disable multilink
set bundle authname "nt-domain\\user"
set link yes acfcomp protocomp
set link no pap
# !!! MUST USE ACCEPT HERE IN CLIENT MODE !!!
#set link yes chap
set link accept chap
set link mtu 1460
#### If remote machine is NT you need this..
set link enable no-orig-auth
set link keep-alive 61 753
set ipcp yes vjcomp
set ipcp ranges 172.16.26.129/16 172.16.26.127/16
#### The five lines below enable Microsoft Point-to-Point encryption
#### (MPPE) using the ng_mppc(8) netgraph node type.
set bundle enable compression
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e56
set ccp yes mpp-e128
set bundle enable crypt-reqd
set ccp yes mpp-stateless
# !!! MUST NOT USE mpp-compress WITH NT SERVER HERE !!!
#set ccp yes mpp-compress
# stac is not recommended but neither compiled in nor effective.
#set ccp yes stac
open
Thanks a lot for the help,
All the best,
Peter.
--
NEU FÜR ALLE - GMX MediaCenter - für Fotos, Musik, Dateien...
Fotoalbum, File Sharing, MMS, Multimedia-Gruß, GMX FotoService
Jetzt kostenlos anmelden unter http://www.gmx.net
+++ GMX - die erste Adresse für Mail, Message, More! +++
More information about the freebsd-net
mailing list