From owner-freebsd-hackers  Thu May  2 12:42:25 2002
Delivered-To: freebsd-hackers@freebsd.org
Received: from dignus.com (sdsl-64-32-254-102.dsl.iad.megapath.net [64.32.254.102])
	by hub.freebsd.org (Postfix) with ESMTP
	id B1A8937B417; Thu,  2 May 2002 12:42:09 -0700 (PDT)
Received: from lakes.dignus.com (lakes.dignus.com [10.0.0.3])
	by dignus.com (8.11.6/8.11.3) with ESMTP id g42JbfA48364;
	Thu, 2 May 2002 15:37:41 -0400 (EDT)
	(envelope-from rivers@dignus.com)
Received: (from rivers@localhost)
	by lakes.dignus.com (8.11.6/8.11.3) id g42JdEK49871;
	Thu, 2 May 2002 15:39:14 -0400 (EDT)
	(envelope-from rivers)
Date: Thu, 2 May 2002 15:39:14 -0400 (EDT)
From: Thomas David Rivers <rivers@dignus.com>
Message-Id: <200205021939.g42JdEK49871@lakes.dignus.com>
To: archie@dellroad.org, rivers@dignus.com
Subject: Re: Anyone using pptp?
Cc: freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG,
	K.J.Koster@kpn.com
In-Reply-To: <200205021922.g42JM8H97301@arch20m.dellroad.org>
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

> 
> Thomas David Rivers writes:
> >   If I add
> > 	enable MSChapV2
> >   in /etc/ppp/ppp.conf - then our ppp client requires that the
> >   peer (the Microsoft VPN server) authenticate using MSChapV2.  But,
> >   the Microsoft VPN peer refuses that (it's configured to not use
> >   MSChapV2.
> 
> Don't you want something like "allow MSChapV2" and "disable MSChapV2" ?
> 
> -Archie
> 

 Something like that...  but - that's the default setting.  With the
 default setting, it seems to pass through CHAP (0x80) Authentication.

 But - then, the MPPE encryption is not allowed - because MPPE 
 compression requires MSChapV2 (0x81) Authentication... and, the
 VPN server doesn't authenticate that way.

 I notice there is a line in the ppp man page:

	For now, ppp can only get encryption keys from CHAP 81 
	authentication.

 But - the (Microsoft Win2000) VPN server I'm trying to talk do doesn't 
 allow CHAP 81 authentication, but wants to use MPPE...  

	- Dave Rivers - 

--
rivers@dignus.com                        Work: (919) 676-0847
Get your mainframe programming tools at http://www.dignus.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message