From owner-freebsd-hackers  Thu May  2 13: 0:37 2002
Delivered-To: freebsd-hackers@freebsd.org
Received: from InterJet.dellroad.org (adsl-63-194-81-26.dsl.snfc21.pacbell.net [63.194.81.26])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8124237B416; Thu,  2 May 2002 13:00:31 -0700 (PDT)
Received: from arch20m.dellroad.org (arch20m.dellroad.org [10.1.1.20])
	by InterJet.dellroad.org (8.9.1a/8.9.1) with ESMTP id MAA78509;
	Thu, 2 May 2002 12:49:33 -0700 (PDT)
Received: (from archie@localhost)
	by arch20m.dellroad.org (8.11.6/8.11.6) id g42JnXq97404;
	Thu, 2 May 2002 12:49:33 -0700 (PDT)
	(envelope-from archie)
From: Archie Cobbs <archie@dellroad.org>
Message-Id: <200205021949.g42JnXq97404@arch20m.dellroad.org>
Subject: Re: Anyone using pptp?
In-Reply-To: <200205021939.g42JdEK49871@lakes.dignus.com> "from Thomas David
 Rivers at May 2, 2002 03:39:14 pm"
To: Thomas David Rivers <rivers@dignus.com>
Date: Thu, 2 May 2002 12:49:33 -0700 (PDT)
Cc: archie@dellroad.org, freebsd-hackers@FreeBSD.ORG,
	freebsd-net@FreeBSD.ORG, K.J.Koster@kpn.com
X-Mailer: ELM [version 2.4ME+ PL88 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

Thomas David Rivers writes:
> > > 	enable MSChapV2
> > >   in /etc/ppp/ppp.conf - then our ppp client requires that the
> > >   peer (the Microsoft VPN server) authenticate using MSChapV2.  But,
> > >   the Microsoft VPN peer refuses that (it's configured to not use
> > >   MSChapV2.
> > 
> > Don't you want something like "allow MSChapV2" and "disable MSChapV2" ?
> 
>  Something like that...  but - that's the default setting.  With the
>  default setting, it seems to pass through CHAP (0x80) Authentication.
> 
>  But - then, the MPPE encryption is not allowed - because MPPE 
>  compression requires MSChapV2 (0x81) Authentication... and, the
>  VPN server doesn't authenticate that way.
> 
>  I notice there is a line in the ppp man page:
> 
> 	For now, ppp can only get encryption keys from CHAP 81 
> 	authentication.
> 
>  But - the (Microsoft Win2000) VPN server I'm trying to talk do doesn't 
>  allow CHAP 81 authentication, but wants to use MPPE...  

In that case you need to use mpd I guess.

-Archie

__________________________________________________________________________
Archie Cobbs     *     Packet Design     *     http://www.packetdesign.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message