PPTP And L2tP strange case

RouterOS General
1

router board hap lite when i try to make pptp from windows to mikrotik this is the print from log:

11:22:16 pptp,ppp,debug,packet <mru 1450>
11:22:16 pptp,ppp,debug,packet <magic 0x4e98063e>
11:22:16 pptp,ppp,debug,packet
11:22:17 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x6
11:22:17 pptp,ppp,debug,packet <mru 1400>
11:22:17 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:17 pptp,ppp,debug,packet
11:22:17 pptp,ppp,debug,packet
11:22:17 pptp,ppp,debug,packet <callback 0x06>
11:22:17 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x6
11:22:17 pptp,ppp,debug,packet
11:22:17 pptp,ppp,debug,packet
11:22:21 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x7
11:22:21 pptp,ppp,debug,packet <mru 1400>
11:22:21 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:21 pptp,ppp,debug,packet
11:22:21 pptp,ppp,debug,packet
11:22:21 pptp,ppp,debug,packet <callback 0x06>
11:22:21 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x7
11:22:21 pptp,ppp,debug,packet
11:22:21 pptp,ppp,debug,packet
11:22:25 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x8
11:22:25 pptp,ppp,debug,packet <mru 1400>
11:22:25 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:25 pptp,ppp,debug,packet
11:22:25 pptp,ppp,debug,packet
11:22:25 pptp,ppp,debug,packet <callback 0x06>
11:22:25 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x8
11:22:25 pptp,ppp,debug,packet
11:22:25 pptp,ppp,debug,packet
11:22:27 pptp,ppp,debug <4>: LCP timer
11:22:27 pptp,ppp,debug,packet <4>: sent LCP ConfReq id=0x8
11:22:27 pptp,ppp,debug,packet <mru 1450>
11:22:27 pptp,ppp,debug,packet <magic 0x4e98063e>
11:22:27 pptp,ppp,debug,packet
11:22:30 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x9
11:22:30 pptp,ppp,debug,packet <mru 1400>
11:22:30 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:30 pptp,ppp,debug,packet
11:22:30 pptp,ppp,debug,packet
11:22:30 pptp,ppp,debug,packet <callback 0x06>
11:22:30 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x9
11:22:30 pptp,ppp,debug,packet
11:22:30 pptp,ppp,debug,packet
11:22:33 pptp,debug,packet rcvd Call-Clear-Request from (windows real ip)
11:22:33 pptp,debug,packet call-id=52746
11:22:33 pptp,ppp,debug <4>: LCP lowerdown
11:22:33 pptp,ppp,debug <4>: LCP lowerdown
11:22:33 pptp,ppp,debug <4>: LCP down event in starting state

and mikrotik config:

ppp profile print
Flags: * - default
0 * name="default" local-address=192.168.110.1 use-mpls=default use-compression=default use-encryption=no only-one=default change-tcp-mss=yes use-upnp=default address-list=""
on-up="" on-down=""

1 * name="default-encryption" use-mpls=default use-compression=default use-encryption=yes only-one=default change-tcp-mss=yes use-upnp=default address-list="" on-up="" on-down=""

interface l2tp-server server print
enabled: yes
max-mtu: 1450
max-mru: 1450
mrru: disabled
authentication: pap,chap,mschap1,mschap2
keepalive-timeout: 30
max-sessions: unlimited
default-profile: default-encryption
use-ipsec: no
ipsec-secret:
allow-fast-path: no
interface pptp-server server print
enabled: yes
max-mtu: 1450
max-mru: 1450
mrru: disabled
authentication: pap,chap,mschap1,mschap2
keepalive-timeout: 30
default-profile: default-encryption

ppp secret print

NAME SERVICE CALLER-ID PASSWORD PROFILE REMOTE-ADDRESS

0 test any test default


So where is the problem ?
thanks for your help :slight_smile:

2

any help ?

3

any update ?

4

Do you have an accept rule in the input chain for protocol 47 (GRE)?
-Chris

5

NO showed i have ?

6

Absolutely.
pptp uses tcp/1723 for control only - the actual traffic is encapsulated in GRE.

7

i do it

chain=input action=accept protocol=gre log=no log-prefix=“”


and this is the log


13:10:47 pptp,info TCP connection established from My real Ip
13:10:47 pptp,debug,packet rcvd Start-Control-Connection-Request from My Real Ip
13:10:47 pptp,debug,packet protocol-version=0x0100
13:10:47 pptp,debug,packet framing-capabilities=3
13:10:47 pptp,debug,packet bearer-capabilities=3
13:10:47 pptp,debug,packet maximum-channels=1
13:10:47 pptp,debug,packet firmware-revision=0
13:10:47 pptp,debug,packet host-name=anonymous
13:10:47 pptp,debug,packet vendor-name=
13:10:47 pptp,debug,packet sent Start-Control-Connection-Reply to My Real Ip
13:10:47 pptp,debug,packet protocol-version=0x0100
13:10:47 pptp,debug,packet result-code=1
13:10:47 pptp,debug,packet error-code=0
13:10:47 pptp,debug,packet framing-capabilities=2
13:10:47 pptp,debug,packet bearer-capabilities=0
13:10:47 pptp,debug,packet maximum-channels=0
13:10:47 pptp,debug,packet firmware-revision=1
13:10:47 pptp,debug,packet host-name=MikroTik
13:10:47 pptp,debug,packet vendor-name=MikroTik
13:10:47 pptp,debug,packet rcvd Outgoing-Call-Request from My Real Ip
13:10:47 pptp,debug,packet call-id=53934
13:10:47 pptp,debug,packet call-serial-number=8500
13:10:47 pptp,debug,packet minimum-bps=1000
13:10:47 pptp,debug,packet maximum-bps=100000000
13:10:47 pptp,debug,packet bearer-type=3
13:10:47 pptp,debug,packet framing-type=3
13:10:47 pptp,debug,packet packet-recv-window-size=8192
13:10:47 pptp,debug,packet packet-processing-delay=0
13:10:47 pptp,debug,packet phone-number-length=0
13:10:47 pptp,debug,packet phone-number=
13:10:47 pptp,debug,packet subaddress=
13:10:47 pptp,ppp,debug <0>: LCP lowerup
13:10:47 pptp,ppp,debug <0>: LCP open
13:10:47 pptp,debug,packet sent Outgoing-Call-Reply to My Real Ip
13:10:47 pptp,debug,packet call-id=0
13:10:47 pptp,debug,packet peers-call-id=53934
13:10:47 pptp,debug,packet result-code=1
13:10:47 pptp,debug,packet error-code=0
13:10:47 pptp,debug,packet cause-code=0
13:10:47 pptp,debug,packet connect-speed=100000
13:10:47 pptp,debug,packet packet-recv-window-size=100
13:10:47 pptp,debug,packet packet-processing-delay=0
13:10:47 pptp,debug,packet physical-channel-id=0
13:10:47 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:47 pptp,ppp,debug,packet <mru 1400>
13:10:47 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:47 pptp,ppp,debug,packet <magic 0x10580168>
13:10:47 pptp,ppp,debug,packet
13:10:47 pptp,ppp,debug,packet
13:10:47 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x1
13:10:47 pptp,ppp,debug,packet <mru 1450>
13:10:47 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:47 pptp,ppp,debug,packet
13:10:47 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:47 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:47 pptp,ppp,debug,packet
13:10:47 pptp,ppp,debug,packet
13:10:48 pptp,ppp,debug <0>: LCP timer
13:10:48 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x2
13:10:48 pptp,ppp,debug,packet <mru 1450>
13:10:48 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:48 pptp,ppp,debug,packet
13:10:50 pptp,ppp,debug <0>: LCP timer
13:10:50 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x3
13:10:50 pptp,ppp,debug,packet <mru 1450>
13:10:50 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:50 pptp,ppp,debug,packet
13:10:50 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:50 pptp,ppp,debug,packet <mru 1400>
13:10:50 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:50 pptp,ppp,debug,packet <magic 0x10580168>
13:10:50 pptp,ppp,debug,packet
13:10:50 pptp,ppp,debug,packet
13:10:50 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:50 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:50 pptp,ppp,debug,packet
13:10:50 pptp,ppp,debug,packet

13:10:52 pptp,ppp,debug <0>: LCP timer
13:10:52 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x4
13:10:52 pptp,ppp,debug,packet <mru 1450>
13:10:52 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:52 pptp,ppp,debug,packet
13:10:53 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:53 pptp,ppp,debug,packet <mru 1400>
13:10:53 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:53 pptp,ppp,debug,packet <magic 0x10580168>
13:10:53 pptp,ppp,debug,packet
13:10:53 pptp,ppp,debug,packet
13:10:53 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:53 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:53 pptp,ppp,debug,packet
13:10:53 pptp,ppp,debug,packet
13:10:56 pptp,ppp,debug <0>: LCP timer
13:10:56 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x5
13:10:56 pptp,ppp,debug,packet <mru 1450>
13:10:56 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:56 pptp,ppp,debug,packet
13:10:56 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:56 pptp,ppp,debug,packet <mru 1400>
13:10:56 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:56 pptp,ppp,debug,packet <magic 0x10580168>
13:10:56 pptp,ppp,debug,packet
13:10:56 pptp,ppp,debug,packet
13:10:56 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:56 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:56 pptp,ppp,debug,packet
13:10:56 pptp,ppp,debug,packet
13:10:59 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:59 pptp,ppp,debug,packet <mru 1400>
13:10:59 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:59 pptp,ppp,debug,packet <magic 0x10580168>
13:10:59 pptp,ppp,debug,packet
13:10:59 pptp,ppp,debug,packet
13:10:59 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:59 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:59 pptp,ppp,debug,packet
13:10:59 pptp,ppp,debug,packet
13:11:01 pptp,ppp,debug <0>: LCP timer
13:11:01 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x6
13:11:01 pptp,ppp,debug,packet <mru 1450>
13:11:01 pptp,ppp,debug,packet <magic 0xfd4586e>
13:11:01 pptp,ppp,debug,packet
13:11:02 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:02 pptp,ppp,debug,packet <mru 1400>
13:11:02 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:02 pptp,ppp,debug,packet <magic 0x10580168>
13:11:02 pptp,ppp,debug,packet
13:11:02 pptp,ppp,debug,packet
13:11:02 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:02 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:02 pptp,ppp,debug,packet
13:11:02 pptp,ppp,debug,packet

13:11:05 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:05 pptp,ppp,debug,packet <mru 1400>
13:11:05 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:05 pptp,ppp,debug,packet <magic 0x10580168>
13:11:05 pptp,ppp,debug,packet
13:11:05 pptp,ppp,debug,packet
13:11:05 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:05 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:05 pptp,ppp,debug,packet
13:11:05 pptp,ppp,debug,packet
13:11:08 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:08 pptp,ppp,debug,packet <mru 1400>
13:11:08 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:08 pptp,ppp,debug,packet <magic 0x10580168>
13:11:08 pptp,ppp,debug,packet
13:11:08 pptp,ppp,debug,packet
13:11:08 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:08 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:08 pptp,ppp,debug,packet
13:11:08 pptp,ppp,debug,packet
13:11:09 pptp,ppp,debug <0>: LCP timer
13:11:09 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x7
13:11:09 pptp,ppp,debug,packet <mru 1450>
13:11:09 pptp,ppp,debug,packet <magic 0xfd4586e>
13:11:09 pptp,ppp,debug,packet
13:11:11 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:11 pptp,ppp,debug,packet <mru 1400>
13:11:11 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:11 pptp,ppp,debug,packet <magic 0x10580168>
13:11:11 pptp,ppp,debug,packet
13:11:11 pptp,ppp,debug,packet
13:11:11 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:11 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:11 pptp,ppp,debug,packet
13:11:11 pptp,ppp,debug,packet
13:11:14 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:14 pptp,ppp,debug,packet <mru 1400>
13:11:14 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:14 pptp,ppp,debug,packet <magic 0x10580168>
13:11:14 pptp,ppp,debug,packet
13:11:14 pptp,ppp,debug,packet
13:11:14 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:14 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:14 pptp,ppp,debug,packet
13:11:14 pptp,ppp,debug,packet
13:11:17 pptp,ppp,debug <0>: LCP lowerdown
13:11:17 pptp,ppp,debug <0>: LCP lowerdown
13:11:17 pptp,ppp,debug <0>: LCP down event in starting state
13

8

Are you trying to connect via l2tp a windows device? If I recall it correctly, windows does not support l2tp without ipsec.

9

No with Android but as i know windows support l2tp

10

Windows does support l2tp, but only with ipsec. You have to change something in windows register to be able to connect to a l2tp server without ipsec. Maybe the same goes for android.

11

Just not to get confused:
The logs you’re posting are showing pptp debug packets, not l2tp.

And, is there a reason why you don’t specify a remote-address (ideally from a seperate pool) and have encryption explicitly disabled in the used profile?

-Chris

12

i test with remote address and with encryption and the last i test to downgrade to 6.35.4 becuse i have another router work fine with 3.35.4 but with another kind the work router with the same config and 3.35.4 but its rb951ui-h2nd and the other type hap lite

13

Luckily, the model doesn’t matter in this case.
It can’t be the same config - one is working, the other isn’t.

post an export of both routers and we can compare.
-Chris

14

Hello.
I have similar situation, but I cant understand why one windows machine can log with same VPN username but other machine can not connect?
Log from MikroTik is at attachment.
What could be wrong at Windows machine? Both machines are Win10 with up to date updates…
VPN.png

15

Hello again, following tutorial solved the problem with MSchap2 on windows machine:
https://superuser.com/questions/1298513/l2tp-ipsec-vpn-fails-to-connect-on-windows-10-works-fine-on-ios