Newsgroup: it.comp.os.linux.sys
Titolo: Non so più che pesci pigliare... (ppp + mppe)

Sto tentando di mettere su un sistema di accesso con rp-pppoe con supporto
mppe.
Uso debian unstable con kernel 2.6.15 e ppp 2.4.4b1-1
(ho provato anche su opensuse10 con kernel 2.6.13-15 e ppp 2.4.3 con gli
stessi problemi)
Il computer ha 2 schede di rete:
eth0 verso la rete esterna
eth1 tirata su senza ip
il file /etc/ppp/options è il seguente:
ms-dns 193.204.8.13
-chap
-pap
asyncmap 0
auth
crtscts
debug
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 4
lcp-echo-interval 30
local
lock
mru 1490
name PPPoE-R
nobsdcomp
nodetach
noipdefault
noipx
noipx
noreplacedefaultroute
proxyarp
refuse-chap
refuse-pap
require-mppe
require-mschap
require-mschap-v2
il file pppoe-server-options è il seguente:
mppe-stateful
refuse-chap
refuse-pap
require-mppe
require-mschap
require-mschap-v2
pppoe-server viene avviato con uno script:
BASE=10.67.7.1
MAX=250
MYIP=193.205.94.13
NAT=
10.67.7.0/24
iptables -t nat -A POSTROUTING -s $NAT -j SNAT --to-source $MYIP
pppoe-server -T 60 -I eth1 -N $MAX -C PPPoE7 -S PPPoE7 -R $BASE
L'utente di prova viene autenticato con il file chap-secret:
pippo * pippo *
Il client è un windows xp e la connessione pppoe viene creata con le
opzioni:
"richiedi password protetta"
"Richiedi crittografia dei dati"
La connessione viene instaurata con successo, ma pesco una sfilza di errori
Ecco il log:
Mar 10 12:21:47 debian pppoe-server[5836]: Session 3 created for client
00:11:2f:c4:cd:9c (10.67.7.3) on eth1 using Service-Name 'PPPoE7'
Mar 10 12:21:47 debian pppd[5836]: pppd 2.4.4b1 started by root, uid 0
Mar 10 12:21:47 debian pppd[5836]: using channel 7
Mar 10 12:21:47 debian pppd[5836]: Using interface ppp0
Mar 10 12:21:47 debian pppd[5836]: Connect: ppp0 <--> /dev/pts/1
Mar 10 12:21:48 debian pppd[5836]: sent [LCP ConfReq id=0x1 <mru 1490> <auth
chap MS-v2> <magic 0xeccd03cf>]
Mar 10 12:21:48 debian pppd[5836]: rcvd [LCP ConfAck id=0x1 <mru 1490> <auth
chap MS-v2> <magic 0xeccd03cf>]
Mar 10 12:21:49 debian pppd[5836]: rcvd [LCP ConfReq id=0x1 <mru 1480>
<magic 0x7ab74d84> <callback CBCP>]
Mar 10 12:21:49 debian pppd[5836]: sent [LCP ConfRej id=0x1 <callback CBCP>]
Mar 10 12:21:49 debian pppd[5836]: rcvd [LCP ConfReq id=0x2 <mru 1480>
<magic 0x7ab74d84>]
Mar 10 12:21:49 debian pppd[5836]: sent [LCP ConfAck id=0x2 <mru 1480>
<magic 0x7ab74d84>]
Mar 10 12:21:49 debian pppd[5836]: sent [LCP EchoReq id=0x0
magic=0xeccd03cf]
Mar 10 12:21:49 debian pppd[5836]: sent [CHAP Challenge id=0x52
<7920c9f7aefe86aa43404333d8d7bfeb>, name = "PPPoE-R"]
Mar 10 12:21:49 debian pppd[5836]: rcvd [LCP Ident id=0x3 magic=0x7ab74d84
"MSRASV5.10"]
Mar 10 12:21:49 debian pppd[5836]: rcvd [LCP Ident id=0x4 magic=0x7ab74d84
"MSRAS-1-UMB"]
Mar 10 12:21:49 debian pppd[5836]: rcvd [LCP EchoRep id=0x0
magic=0x7ab74d84]
Mar 10 12:21:49 debian pppd[5836]: rcvd [CHAP Response id=0x52
<8c7cd12592f963c745c3e748f2bf037c00000000000000007d765d8da8f5d54327efd133c62ad2e1612711b15ae9743700>,
name = "pippo"]
Mar 10 12:21:49 debian pppd[5836]: sent [CHAP Success id=0x52
"S=3FE7F97EF35A74BE300C12FEC5FBE5B7EB951D0C M=Access granted"]
Mar 10 12:21:49 debian pppd[5836]: sent [CCP ConfReq id=0x1 <mppe +H -M +S
+L -D -C>]
Mar 10 12:21:49 debian pppd[5836]: rcvd [CCP ConfReq id=0x5 <mppe -H +M +S
+L -D +C>]
Mar 10 12:21:49 debian pppd[5836]: sent [CCP ConfNak id=0x5 <mppe -H -M +S
-L -D -C>]
Mar 10 12:21:49 debian pppd[5836]: rcvd [IPCP ConfReq id=0x6 <addr 0.0.0.0>
<ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Mar 10 12:21:49 debian pppd[5836]: sent [IPCP TermAck id=0x6]
Mar 10 12:21:49 debian pppd[5836]: rcvd [CCP ConfNak id=0x1 <mppe -H -M +S
-L -D -C>]
Mar 10 12:21:49 debian pppd[5836]: sent [CCP ConfReq id=0x2 <mppe -H -M +S
-L -D -C>]
Mar 10 12:21:49 debian pppd[5836]: rcvd [CCP ConfReq id=0x7 <mppe -H -M +S
-L -D -C>]
Mar 10 12:21:49 debian pppd[5836]: sent [CCP ConfAck id=0x7 <mppe -H -M +S
-L -D -C>]
Mar 10 12:21:49 debian pppd[5836]: rcvd [CCP ConfAck id=0x2 <mppe -H -M +S
-L -D -C>]
Mar 10 12:21:49 debian pppd[5836]: MPPE 128-bit stateful compression enabled
Mar 10 12:21:49 debian pppd[5836]: sent [IPCP ConfReq id=0x1 <addr
10.0.0.1>]
Mar 10 12:21:49 debian pppd[5836]: rcvd [IPCP ConfAck id=0x1 <addr
10.0.0.1>]
Mar 10 12:21:52 debian pppd[5836]: rcvd [IPCP ConfReq id=0x8 <addr 0.0.0.0>
<ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Mar 10 12:21:52 debian pppd[5836]: sent [IPCP ConfRej id=0x8 <ms-wins
0.0.0.0> <ms-wins 0.0.0.0>]
Mar 10 12:21:52 debian pppd[5836]: sent [IPCP ConfReq id=0x1 <addr
10.0.0.1>]
Mar 10 12:21:52 debian pppd[5836]: rcvd [IPCP ConfReq id=0x9 <addr 0.0.0.0>
<ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Mar 10 12:21:52 debian pppd[5836]: sent [IPCP ConfNak id=0x9 <addr
10.67.7.3> <ms-dns1 193.204.8.13> <ms-dns3 193.204.8.13>]
Mar 10 12:21:52 debian pppd[5836]: rcvd [IPCP ConfAck id=0x1 <addr
10.0.0.1>]
Mar 10 12:21:52 debian pppd[5836]: rcvd [IPCP ConfReq id=0xa <addr
10.67.7.3> <ms-dns1 193.204.8.13> <ms-dns3 193.204.8.13>]
Mar 10 12:21:52 debian pppd[5836]: sent [IPCP ConfAck id=0xa <addr
10.67.7.3> <ms-dns1 193.204.8.13> <ms-dns3 193.204.8.13>]
Mar 10 12:21:52 debian pppd[5836]: Cannot determine ethernet address for
proxy ARP
Mar 10 12:21:52 debian pppd[5836]: local IP address 10.0.0.1
Mar 10 12:21:52 debian pppd[5836]: remote IP address 10.67.7.3
Mar 10 12:21:52 debian pppd[5836]: Script /etc/ppp/ip-up started (pid 5843)
Mar 10 12:21:52 debian pppd[5836]: Script /etc/ppp/ip-up finished (pid
5843), status = 0x0
Mar 10 12:21:52 debian pppd[5836]: rcvd [proto=0x3a68] 34 4f 56 a1 ec 4c 89
46 37 16 3f 34 fd c3 7a 5c 4a ac 8b 43 92 5d c2 d3 17 07 a7 3f 25 4f 9c 07
...
Mar 10 12:21:52 debian pppd[5836]: Unsupported protocol 0x3a68 received
Mar 10 12:21:52 debian pppd[5836]: sent [LCP ProtRej id=0x2 3a 68 34 4f 56
a1 ec 4c 89 46 37 16 3f 34 fd c3 7a 5c 4a ac 8b 43 92 5d c2 d3 17 07 a7 3f
25 4f ...]
Mar 10 12:21:52 debian pppd[5836]: rcvd [proto=0x4e2a] aa 67 af a1 2e 91 13
4a 54 bc 95 e4 00 5c 7a 18 c9 cc 77 bb 3f 51 cc 2e 2c 71 70 de 4d 4e 21 7b
...
Mar 10 12:21:52 debian pppd[5836]: Unsupported protocol 0x4e2a received
Mar 10 12:21:52 debian pppd[5836]: sent [LCP ProtRej id=0x3 4e 2a aa 67 af
a1 2e 91 13 4a 54 bc 95 e4 00 5c 7a 18 c9 cc 77 bb 3f 51 cc 2e 2c 71 70 de
4d 4e ...]
Mar 10 12:21:52 debian pppd[5836]: rcvd [proto=0x8cd7] eb c0 4e 2f d7 21 7e
31 07 a6 39 aa 00 d0 b1 6a 82 6d 81 8e f4 dc f1 75 0d 31 40 a3 2b 69 c3 2c
...
Mar 10 12:21:52 debian pppd[5836]: Unsupported protocol 0x8cd7 received
Mar 10 12:21:52 debian pppd[5836]: sent [LCP ProtRej id=0x4 8c d7 eb c0 4e
2f d7 21 7e 31 07 a6 39 aa 00 d0 b1 6a 82 6d 81 8e f4 dc f1 75 0d 31 40 a3
2b 69 ...]
Mar 10 12:21:52 debian pppd[5836]: rcvd [proto=0x8095] 5c 93 03 5d e2 37 e4
59 19 13 6e e9 65 0e 9f 06 c2 60 a7 7f 63 21 2c 06 5c 0c cc 4e d5 89 b2 48
...
Mar 10 12:21:52 debian pppd[5836]: Unsupported protocol 0x8095 received
Mar 10 12:21:52 debian pppd[5836]: sent [LCP ProtRej id=0x5 80 95 5c 93 03
5d e2 37 e4 59 19 13 6e e9 65 0e 9f 06 c2 60 a7 7f 63 21 2c 06 5c 0c cc 4e
d5 89 ...]
Mar 10 12:21:53 debian pppd[5836]: rcvd [proto=0x43] 12 e1 98 ca 22 81 fa 0c
82 0f cb 37 bf e4 76 a3 7e 08 3d da 1e 9a e7 a1 ec 58 8b 11 98 d9 e3 83 ...
Mar 10 12:21:53 debian pppd[5836]: Unsupported protocol 'Ascom Timeplex'
(0x43) received
Mar 10 12:21:53 debian pppd[5836]: sent [LCP ProtRej id=0x6 00 43 12 e1 98
ca 22 81 fa 0c 82 0f cb 37 bf e4 76 a3 7e 08 3d da 1e 9a e7 a1 ec 58 8b 11
98 d9 ...]
Mar 10 12:21:53 debian pppd[5836]: rcvd [proto=0xaf] 55 38 47 71 56 b4 49 36
3a 03 0a a1 fa 19 85 a2 d8 a5 3d 36 ff 60 ef 1b 00 11 41 00 ec ca e4 a6 ...
Mar 10 12:21:53 debian pppd[5836]: Unsupported protocol 0xaf received
Mar 10 12:21:53 debian pppd[5836]: sent [LCP ProtRej id=0x7 00 af 55 38 47
71 56 b4 49 36 3a 03 0a a1 fa 19 85 a2 d8 a5 3d 36 ff 60 ef 1b 00 11 41 00
ec ca ...]
Mar 10 12:21:54 debian pppd[5836]: rcvd [proto=0x97] 5e 03 58 fa 61 4e 3e 5b
82 c4 7e a0 68 68 dc 3e 66 80 70 f8 7f 23 0b 46 2a f9 77 02 9a 6f b6 7d ...
Mar 10 12:21:54 debian pppd[5836]: Unsupported protocol 0x97 received
Mar 10 12:21:54 debian pppd[5836]: sent [LCP ProtRej id=0x8 00 97 5e 03 58
fa 61 4e 3e 5b 82 c4 7e a0 68 68 dc 3e 66 80 70 f8 7f 23 0b 46 2a f9 77 02
9a 6f ...]
Mar 10 12:21:55 debian pppd[5836]: rcvd [proto=0x75] b8 b4 d6 97 43 5b e7 71
fe bc 5b be 68 86 ee 80 b8 64 17 f6 46 d2 b2 26 a9 d8 ce 53 ac b0 c7 c5 ...
Mar 10 12:21:55 debian pppd[5836]: Unsupported protocol 0x75 received
Non vi chiedo la soluzione, ma solo dei consigli su dove andare a cercare
l'inghippo.
Pensavo che il problema fosse il kernel, ma il supporto ppp_mppe
(ppp_compress_18) è abilitato (altrimenti niente connessione).
Suggerimenti?
Grazie in anticipo.
--------------------------------
Inviato via 
http://arianna.libero.it/usenet/

Ok, ho capito che il problema è del client.
Infatti con un client con ubuntu e kernel 2.6.12 mi sono connesso al primo
colpo.
Devo capire come settare meglio le opzioni di cifratura sul windows xp.
O devo lavorare sul pppd per non accettare la cifratura che lo manda in
crisi...
Sono comunque graditi opinioni, consigli e commenti.
