From owner-freebsd-questions@FreeBSD.ORG Fri Nov 28 13:35:08 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 82EA316A4CE for ; Fri, 28 Nov 2003 13:35:08 -0800 (PST) Received: from ms-smtp-01-eri0.southeast.rr.com (ms-smtp-01-lbl.southeast.rr.com [24.25.9.100]) by mx1.FreeBSD.org (Postfix) with ESMTP id C15F443FE0 for ; Fri, 28 Nov 2003 13:35:06 -0800 (PST) (envelope-from marcus@marcuscom.com) Received: from creme-brulee.marcuscom.com (rdu74-159-108.nc.rr.com [24.74.159.108])hASLYxSq017573; Fri, 28 Nov 2003 16:34:59 -0500 (EST) Received: from [192.168.1.4] (shumai.marcuscom.com [192.168.1.4]) hASLXjuY025124; Fri, 28 Nov 2003 16:33:45 -0500 (EST) (envelope-from marcus@marcuscom.com) From: Joe Marcus Clarke To: Fernando Gleiser In-Reply-To: <20031128174904.A64171-100000@cactus.fi.uba.ar> References: <20031128174904.A64171-100000@cactus.fi.uba.ar> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-EuISLNr6UJLf6AvIUfVu" Organization: MarcusCom, Inc. Message-Id: <1070055297.54967.15.camel@shumai.marcuscom.com> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.5 Date: Fri, 28 Nov 2003 16:34:57 -0500 X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham version=2.60 X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on creme-brulee.marcuscom.com X-Virus-Scanned: Symantec AntiVirus Scan Engine cc: questions@freebsd.org Subject: Re: mpd as a VPN client to a Cisco Concentrator X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Nov 2003 21:35:08 -0000 --=-EuISLNr6UJLf6AvIUfVu Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Fri, 2003-11-28 at 15:53, Fernando Gleiser wrote: > I solved the former problem I was having to route to GRE packets > trhough the VPN. >=20 > But it still doesn't work :( >=20 > The tunel builds fine, I authenticate, I got an IP, the routing > is properly set up, but as soon as a try to send anything through > the tunnel, MPS starts to vive the folowing errors: >=20 > [mpd-vpn:vpn_bbk] [vpn_bbk] LCP: rec'd Protocol Reject #2 link 0 (Opened) > [vpn_bbk] LCP: protocol 0x366a was rejected > [vpn_bbk] LCP: rec'd Protocol Reject #3 link 0 (Opened) > [vpn_bbk] LCP: protocol 0xd24d was rejected > [vpn_bbk] LCP: rec'd Protocol Reject #4 link 0 (Opened) > [vpn_bbk] LCP: protocol 0x359a was rejected > [vpn_bbk] LCP: rec'd Protocol Reject #5 link 0 (Opened) > [vpn_bbk] LCP: protocol 0x875d was rejected > [vpn_bbk] LCP: rec'd Protocol Reject #6 link 0 (Opened) > [vpn_bbk] LCP: protocol 0x9ff6 was rejected > [vpn_bbk] LCP: rec'd Protocol Reject #7 link 0 (Opened) > [vpn_bbk] LCP: protocol 0x3771 was rejected > [vpn_bbk] LCP: rec'd Protocol Reject #8 link 0 (Opened) > [vpn_bbk] LCP: protocol 0xc168 was rejected > [vpn_bbk] LCP: rec'd Terminate Request #9 link 0 (Opened) >=20 > and after that it disconnects the VPN. >=20 > Any pointers, ideas, suggestions would be greatly welcome This was recently discussed on this list. There does not appear to be a working solution. The problem seems to be in the way the concentrator is decrypting the packets. If you disabled encryption, things work fine. Joe >=20 >=20 >=20 > Fer >=20 >=20 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" --=20 PGP Key : http://www.marcuscom.com/pgp.asc --=-EuISLNr6UJLf6AvIUfVu Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQA/x7+Bb2iPiv4Uz4cRAnCdAJsFpaXdyRfVDaZ0dFmCJzCJuEOSHACcCHHm jUIrF4vpvBBTEgBmdOFpjlE= =gYfX -----END PGP SIGNATURE----- --=-EuISLNr6UJLf6AvIUfVu--