From owner-freebsd-stable@FreeBSD.ORG  Thu Jul  8 14:11:35 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BC0E816A4CF
	for <freebsd-stable@freebsd.org>;
	Thu,  8 Jul 2004 14:11:35 +0000 (GMT)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id B6EAF43D1F; Thu,  8 Jul 2004 14:11:35 +0000 (GMT)
	(envelope-from bmilekic@FreeBSD.org)
Received: from freefall.freebsd.org (bmilekic@localhost [127.0.0.1])
	i68EBZMH035544;	Thu, 8 Jul 2004 14:11:35 GMT
	(envelope-from bmilekic@freefall.freebsd.org)
Received: (from bmilekic@localhost)
	by freefall.freebsd.org (8.12.11/8.12.11/Submit) id i68EBZPP035543;
	Thu, 8 Jul 2004 14:11:35 GMT
	(envelope-from bmilekic)
Date: Thu, 8 Jul 2004 14:11:35 +0000
From: Bosko Milekic <bmilekic@FreeBSD.org>
To: d.antunes@comcast.net, freebsd-stable@freebsd.org
Message-ID: <20040708141135.GA35357@freefall.freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.1i
Subject: Re: PPTP VPN question
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Jul 2004 14:11:35 -0000


>Hello All,
>I am running 4.9-RELEASE-p2 with poptop-1.1.4.b4_3 and am having trouble
>forcing MPPE of any strength. Windows cl
>ients will only connect successfully if encryption is not required of the
>connection. I have tried multiple entri
>es in ppp.conf (conflicting, I might add) found both while googling and
>in thesystem-provided sample ppp.conf fil
>e. Can anyone out there share with me a working ppp.conf? Is there
>anything else required to support MPPE?
>Thanks for your help.
>Dennis

 I have had similar 'problems' with setting up a PPPoE tunnel (doing MPPE)
 under FreeBSD 5.x with Windows clients.  Basically, attempting to force
 any particular encryption strength for MPPE resulted in problems with
 establishing the PPPoE tunnel.  Finally, I had to use this wildcard line
 for MPPE:

 set mppe * *

 (in ppp.conf)

 That finally worked, and Windows appears to negotiate 128-bit STATEFUL
 encryption only (which sucks for lossy links); it simply refuses to
 negotiate stateless MPPE, by the way.

-Bosko