Community discussions

MikroTik App
  4. RouterOS
  5. General

L2TP VPN problem to connect from Windows 7

Post Reply
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

L2TP VPN problem to connect from Windows 7

Tue Dec 29, 2015 8:25 pm

Please help me to find a reason why my VPN L2TP connection is not running.
Because I have problem from outside my network to connect first I tried to connect I decided to run first from my LAN.

Mikrotik 192.168.29.254
Win7: 192.168.29.180

Firewall
Code: Select all
 ;;; OpenVPN
chain=input action=accept protocol=tcp dst-port=1460 log=no log-prefix="" 
chain=input action=accept protocol=udp dst-port=500 log=no log-prefix="" 
chain=input action=accept protocol=udp dst-port=1701 log=no log-prefix="" 
chain=input action=accept protocol=udp dst-port=4500 log=no log-prefix="" 
chain=input action=accept protocol=ipsec-esp log=no log-prefix="" 
chain=input action=accept protocol=ipsec-ah log=no log-prefix=""


After this I got logs :
Code: Select all
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=0, session-id=0, ns=0, nr=0 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRQ 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Bearer-Capabilities=0x0 
19:11:27 l2tp,debug,packet VPN l2to:     Firmware-Revision=0xa00 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Host-Name="mainframe" 
19:11:27 l2tp,debug,packet VPN l2to:     Vendor-Name="Microsoft" 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=48 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=8 
19:11:27 l2tp,info VPN l2to: first L2TP UDP packet received from 192.168.29.180 
19:11:27 l2tp,debug VPN l2to: tunnel 104 entering state: wait-ctl-conn 
19:11:27 l2tp,debug,packet VPN l2to: sent control message to 192.168.29.180:1701 from 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=48, session-id=0, ns=0, nr=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRP 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Bearer-Capabilities=0x0 
19:11:27 l2tp,debug,packet VPN l2to:     Firmware-Revision=0x1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Host-Name="CoreRouter" 
19:11:27 l2tp,debug,packet VPN l2to:     Vendor-Name="MikroTik" 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=104 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=4 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Challenge=0x03:87:b6:c9:5c:d1:81:3b:a8:a6:10:4c:ed:69:0b:36 
19:11:27 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Response-Capability= 
19:11:27 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Forward-Capability= 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=1, nr=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCCN 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Response=0x1d:5f:96:ed:fc:b2:e1:67:b9:74:29:d7:82:77:89:a4 
19:11:27 l2tp,debug VPN l2to: tunnel 104 received bad auth. response, stopping  
19:11:27 l2tp,debug,packet VPN l2to: sent control message to 192.168.29.180:1701 from 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=48, session-id=0, ns=1, nr=2 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=StopCCN 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Result-Code=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=104 
19:11:27 l2tp,debug VPN l2to: tunnel 104 entering state: stopping 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message (ack) from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=3, nr=1 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=2, nr=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=ICRQ 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Session-ID=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Call-Serial-Number=0 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Bearer-Type=0x2 
19:11:27 l2tp,debug,packet VPN l2to:     1(vendor-id=311)=0x3c:ed:fd:2a:9c:3b:dc:43:86:bc:99:82:33:d1:99:e1 
19:11:27 l2tp,debug VPN l2to: tunnel 104 received message in stopping state, dropping 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message (ack) from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=3, nr=2 
19:11:27 l2tp,debug VPN l2to: tunnel 104 entering state: dead
Top
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

Re: L2TP VPN problem to connect from Windows 7

Wed Dec 30, 2015 12:16 am

I found small error in config and now I can establish l2tp vpn from inside of network.
Probably something is wrong in firewall config.
For this von I have :
Code: Select all
;;; OpenVPN
chain=input action=accept protocol=tcp in-interface=ether1-gateway dst-port=1460 log=no log-prefix="" 

chain=input action=accept protocol=udp in-interface=ether1-gateway dst-port=500 log=no log-prefix="" 

chain=input action=accept protocol=udp in-interface=ether1-gateway dst-port=1701 log=no log-prefix="" 

chain=input action=accept protocol=udp dst-port=4500 log=no log-prefix=""
What I have to add to access from outside to the l2tp vpn?
Top
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

Re: L2TP VPN problem to connect from Windows 7

Wed Dec 30, 2015 11:07 pm

I hope than anybody can help me with this problem :D
Thanks in advance !
Top
 
jebz
Member
Member
Posts: 367
Joined: Sun May 01, 2011 12:03 pm
Location: Australia

Re: L2TP VPN problem to connect from Windows 7

Thu Dec 31, 2015 1:17 am

I hope than anybody can help me with this problem
.
Code: Select all
19:11:27 l2tp,debug VPN l2to: tunnel 104 received bad auth. response, stopping
I would check the PPP Secrets for matching username and password.
Top
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

Re: L2TP VPN problem to connect from Windows 7

Thu Dec 31, 2015 2:11 am

IP-CONN.png
After some config changes this L2TP VPN works in my LAN. Because of this I don't have any problems with secrets.;-)

Maybe there is problem in IPsec configuration and by default this works from inside of the network and from outside not

Code: Select all
/ip ipsec policy> print
Flags: T - template, X - disabled, D - dynamic, I - inactive, * - default 
 0 T * group=default src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=all proposal=default template=yes 

 1  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=9553 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 2  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=10741 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 3  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=7773 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 4  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=2394 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 5  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=3083 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 6  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=18778 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 7  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=4454 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 8  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=20697 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 9  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=12489 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2

Code: Select all
07:41:55 l2tp,debug,packet VPN l2to: sent control message (ack) to 37.47.44.146:54358 from 192.168.1.1:1701 
07:41:55 l2tp,debug,packet VPN l2to:     tunnel-id=25, session-id=0, ns=1, nr=1 
07:41:57 l2tp,debug,packet VPN l2to: sent control message to 37.47.44.146:54358 from 192.168.1.1:1701 
07:41:57 l2tp,debug,packet VPN l2to:     tunnel-id=25, session-id=0, ns=0, nr=1 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRP 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x1 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Bearer-Capabilities=0x0 
07:41:57 l2tp,debug,packet VPN l2to:     Firmware-Revision=0x1 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Host-Name="CoreRouter" 
07:41:57 l2tp,debug,packet VPN l2to:     Vendor-Name="MikroTik" 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=32 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=4 
07:41:57 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Response-Capability= 
07:41:57 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Forward-Capability= 
07:41:59 l2tp,debug,packet VPN l2to: rcvd control message from 37.47.44.146:54358 to 192.168.1.1:1701 
07:41:59 l2tp,debug,packet VPN l2to:     tunnel-id=0, session-id=0, ns=0, nr=0 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRQ 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x3 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Host-Name=0x4b:72:7a:79:73:7a:74:6f:66:73:2d:69:50:68:6f:6e 
07:41:59 l2tp,debug,packet VPN l2to:         65:00 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=25 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=4 
07:41:59 l2tp,debug,packet VPN l2to: sent control message (ack) to 37.47.44.146:54358 from 192.168.1.1:1701 
07:41:59 l2tp,debug,packet VPN l2to:     tunnel-id=25, session-id=0, ns=1, nr=1 
07:41:59 l2tp,debug VPN l2to: tunnel 32 received no replies, disconnecting 
07:41:59 l2tp,debug VPN l2to: tunnel 32 entering state: dead
I need support how to configure my IPsec or Firewall to get in to my L2TP VPN.
You do not have the required permissions to view the files attached to this post.
Top
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

Re: L2TP VPN problem to connect from Windows 7

Sat Jan 02, 2016 2:03 pm

Can I ask in New Year anybody for help ;-)

Thanks in advance!
Top
 
jaytcsd
Member
Member
Posts: 332
Joined: Wed Dec 29, 2004 9:50 am
Location: Pittsboro IN
Contact:
Contact jaytcsd

Re: L2TP VPN problem to connect from Windows 7

Tue Jan 05, 2016 5:51 am

http://l2tp.patokatech.com/

This works for win 7, 8 and android phones.
Top
 
jebz
Member
Member
Posts: 367
Joined: Sun May 01, 2011 12:03 pm
Location: Australia

Re: L2TP VPN problem to connect from Windows 7

Tue Jan 05, 2016 3:03 pm

http://l2tp.patokatech.com/

This works for win 7, 8 and android phones.
http://l2tp.patokatech.com/input.gif
This shows no external VPN attempts.
Are you sure the first router is passing the ports to the 2nd Mikrotik router?
Top
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

Re: L2TP VPN problem to connect from Windows 7

Tue Jan 05, 2016 6:14 pm

I thing that I'm step ahead and don't have problems with firewal any more.

Still I can't establish pptp connection ;-(

Code: Select all
17:09:38 pptp,info VPN pptp: TCP connection established from 37.47.
37.37 
17:09:38 pptp,info TCP connection established from 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp: rcvd Start-Control-Connection-
Request from 37.47.37.37 
17:09:38 pptp,debug,packet rcvd Start-Control-Connection-Request fr
om 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     protocol-version=0x0100 
17:09:38 pptp,debug,packet     protocol-version=0x0100 
17:09:38 pptp,debug,packet VPN pptp:     framing-capabilities=1 
17:09:38 pptp,debug,packet     framing-capabilities=1 
17:09:38 pptp,debug,packet VPN pptp:     bearer-capabilities=1 
17:09:38 pptp,debug,packet     bearer-capabilities=1 
17:09:38 pptp,debug,packet VPN pptp:     maximum-channels=0 
17:09:38 pptp,debug,packet     maximum-channels=0 
17:09:38 pptp,debug,packet VPN pptp:     firmware-revision=0 
17:09:38 pptp,debug,packet     firmware-revision=0 
17:09:38 pptp,debug,packet VPN pptp:     host-name= 
17:09:38 pptp,debug,packet     host-name= 
17:09:38 pptp,debug,packet VPN pptp:     vendor-name= 
17:09:38 pptp,debug,packet     vendor-name= 
17:09:38 pptp,debug,packet VPN pptp: sent Start-Control-Connection-
Reply to 37.47.37.37 
17:09:38 pptp,debug,packet sent Start-Control-Connection-Reply to 3
7.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     protocol-version=0x0100 
17:09:38 pptp,debug,packet     protocol-version=0x0100 
17:09:38 pptp,debug,packet VPN pptp:     result-code=1 
17:09:38 pptp,debug,packet     result-code=1 
17:09:38 pptp,debug,packet VPN pptp:     error-code=0 
17:09:38 pptp,debug,packet     error-code=0 
17:09:38 pptp,debug,packet VPN pptp:     framing-capabilities=2 
17:09:38 pptp,debug,packet     framing-capabilities=2 
17:09:38 pptp,debug,packet VPN pptp:     bearer-capabilities=0 
17:09:38 pptp,debug,packet     bearer-capabilities=0 
17:09:38 pptp,debug,packet VPN pptp:     maximum-channels=0 
17:09:38 pptp,debug,packet     maximum-channels=0 
17:09:38 pptp,debug,packet VPN pptp:     firmware-revision=1 
17:09:38 pptp,debug,packet     firmware-revision=1 
17:09:38 pptp,debug,packet VPN pptp:     host-name=CoreRouter 
17:09:38 pptp,debug,packet     host-name=CoreRouter 
17:09:38 pptp,debug,packet VPN pptp:     vendor-name=MikroTik 
17:09:38 pptp,debug,packet     vendor-name=MikroTik 
17:09:38 pptp,debug,packet VPN pptp: rcvd Outgoing-Call-Request fro
m 37.47.37.37 
17:09:38 pptp,debug,packet rcvd Outgoing-Call-Request from 37.47.37
.37 
17:09:38 pptp,debug,packet VPN pptp:     call-id=11404 
17:09:38 pptp,debug,packet     call-id=11404 
17:09:38 pptp,debug,packet VPN pptp:     call-serial-number=0 
17:09:38 pptp,debug,packet     call-serial-number=0 
17:09:38 pptp,debug,packet VPN pptp:     minimum-bps=300 
17:09:38 pptp,debug,packet     minimum-bps=300 
17:09:38 pptp,debug,packet VPN pptp:     maximum-bps=100000000 
17:09:38 pptp,debug,packet     maximum-bps=100000000 
17:09:38 pptp,debug,packet VPN pptp:     bearer-type=3 
17:09:38 pptp,debug,packet     bearer-type=3 
17:09:38 pptp,debug,packet VPN pptp:     framing-type=3 
17:09:38 pptp,debug,packet     framing-type=3 
17:09:38 pptp,debug,packet VPN pptp:     packet-recv-window-size=64
 
17:09:38 pptp,debug,packet     packet-recv-window-size=64 
17:09:38 pptp,debug,packet VPN pptp:     packet-processing-delay=0 
17:09:38 pptp,debug,packet     packet-processing-delay=0 
17:09:38 pptp,debug,packet VPN pptp:     phone-number-length=0 
17:09:38 pptp,debug,packet     phone-number-length=0 
17:09:38 pptp,debug,packet VPN pptp:     phone-number= 
17:09:38 pptp,debug,packet     phone-number= 
17:09:38 pptp,debug,packet VPN pptp:     subaddress= 
17:09:38 pptp,debug,packet     subaddress= 
17:09:38 pptp,ppp,debug VPN pptp: <64>: LCP lowerup 
17:09:38 pptp,ppp,debug <64>: LCP lowerup 
17:09:38 pptp,ppp,debug VPN pptp: <64>: LCP open 
17:09:38 pptp,ppp,debug <64>: LCP open 
17:09:38 pptp,debug,packet VPN pptp: sent Outgoing-Call-Reply to 37
.47.37.37 
17:09:38 pptp,debug,packet sent Outgoing-Call-Reply to 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     call-id=64 
17:09:38 pptp,debug,packet     call-id=64 
17:09:38 pptp,debug,packet VPN pptp:     peers-call-id=11404 
17:09:38 pptp,debug,packet     peers-call-id=11404 
17:09:38 pptp,debug,packet VPN pptp:     result-code=1 
17:09:38 pptp,debug,packet     result-code=1 
17:09:38 pptp,debug,packet VPN pptp:     error-code=0 
17:09:38 pptp,debug,packet     error-code=0 
17:09:38 pptp,debug,packet VPN pptp:     cause-code=0 
17:09:38 pptp,debug,packet     cause-code=0 
17:09:38 pptp,debug,packet VPN pptp:     connect-speed=100000 
17:09:38 pptp,debug,packet     connect-speed=100000 
17:09:38 pptp,debug,packet VPN pptp:     packet-recv-window-size=10
0 
17:09:38 pptp,debug,packet     packet-recv-window-size=100 
17:09:38 pptp,debug,packet VPN pptp:     packet-processing-delay=0 
17:09:38 pptp,debug,packet     packet-processing-delay=0 
17:09:38 pptp,debug,packet VPN pptp:     physical-channel-id=0 
17:09:38 pptp,debug,packet     physical-channel-id=0 
17:09:38 pptp,debug,packet VPN pptp: rcvd Set-Link-Info from 37.47.
37.37 
17:09:38 pptp,debug,packet rcvd Set-Link-Info from 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     peers-call-id=64 
17:09:38 pptp,debug,packet     peers-call-id=64 
17:09:38 pptp,debug,packet VPN pptp:     send-accm=0xffffffff 
17:09:38 pptp,debug,packet     send-accm=0xffffffff 
17:09:38 pptp,debug,packet VPN pptp:     receive-accm=0xffffffff 
17:09:38 pptp,debug,packet     receive-accm=0xffffffff 
17:09:38 pptp,debug,packet VPN pptp: sent Set-Link-Info to 37.47.37
.37 
17:09:38 pptp,debug,packet sent Set-Link-Info to 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     peers-call-id=11404 
17:09:38 pptp,debug,packet     peers-call-id=11404 
17:09:38 pptp,debug,packet VPN pptp:     send-accm=0xffffffff 
17:09:38 pptp,debug,packet     send-accm=0xffffffff 
17:09:38 pptp,debug,packet VPN pptp:     receive-accm=0xffffffff 
17:09:38 pptp,debug,packet     receive-accm=0xffffffff 
17:09:39 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:39 pptp,ppp,debug <64>: LCP timer 
17:09:39 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x1 
17:09:39 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x1 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:39 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:40 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:40 pptp,ppp,debug <64>: LCP timer 
17:09:40 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x2 
17:09:40 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x2 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:40 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:41 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:41 pptp,ppp,debug <64>: LCP timer 
17:09:41 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x3 
17:09:41 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x3 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:41 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:43 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:43 pptp,ppp,debug <64>: LCP timer 
17:09:43 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x4 
17:09:43 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x4 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:43 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:47 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:47 pptp,ppp,debug <64>: LCP timer 
17:09:47 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x5 
17:09:47 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x5 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:47 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:52 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:52 pptp,ppp,debug <64>: LCP timer 
17:09:52 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x6 
17:09:52 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x6 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:52 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:01 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:10:01 pptp,ppp,debug <64>: LCP timer 
17:10:01 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x7 
17:10:01 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x7 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:10:01 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP down event in starting 
state 
17:10:08 pptp,ppp,debug <64>: LCP down event in starting state
Top
 
mbahi
just joined
Posts: 2
Joined: Tue Jan 05, 2016 5:49 pm

Re: L2TP VPN problem to connect from Windows 7

Wed Jan 06, 2016 8:11 pm

I have a similar problem like you , but in win 8.1 client. You can see me post with the question.

I suspect that this possible that the vpn clients of windows only speak well with windows vpn servers,but no with other vpn servers.

I am thinking in use alternative vpn clients like https://openvpn.net/index.php/open-source.html or https://www.softether.org/ and use Ovpn server in mikrotik side.
Top
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

Re: L2TP VPN problem to connect from Windows 7

Thu Jan 07, 2016 1:20 pm

I think that in my case Windows 7, 8.1, 10 VPN client is not problem.
I tried also to connect L2TP, PP2P from LAN and this is working fine, after I will switch client station to external network ie. 3G/4G I'm having problem ;-(

Something is wrong in Mikrotik Firewall.

I don't know what I have to change ?

Strange is that from logs I see that vpn tries to connect 7 times :
Code: Select all
17:09:39 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:39 pptp,ppp,debug <64>: LCP timer 
17:09:39 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x1 
17:09:39 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x1 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:39 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:40 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:40 pptp,ppp,debug <64>: LCP timer 
17:09:40 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x2 
17:09:40 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x2 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:40 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:41 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:41 pptp,ppp,debug <64>: LCP timer 
17:09:41 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x3 
17:09:41 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x3 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:41 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:43 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:43 pptp,ppp,debug <64>: LCP timer 
17:09:43 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x4 
17:09:43 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x4 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:43 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:47 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:47 pptp,ppp,debug <64>: LCP timer 
17:09:47 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x5 
17:09:47 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x5 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:47 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:52 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:52 pptp,ppp,debug <64>: LCP timer 
17:09:52 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x6 
17:09:52 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x6 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:52 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:01 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:10:01 pptp,ppp,debug <64>: LCP timer 
17:10:01 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x7 
17:10:01 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x7 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:10:01 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP down event in starting 
state 
17:10:08 pptp,ppp,debug <64>: LCP down event in starting state
Question is why this actions failed ;-(
Code: Select all
17:09:39 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:39 pptp,ppp,debug <64>: LCP timer 
17:09:39 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x1 
17:09:39 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x1 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:39 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:40 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:40 pptp,ppp,debug <64>: LCP timer 
17:09:40 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x2 
17:09:40 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x2 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:40 pptp,ppp,debug,packet    <auth  mschap2>
Top
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 203
Joined: Sat Aug 02, 2014 1:13 am

Re: L2TP VPN problem to connect from Windows 7

Fri Jan 08, 2016 9:26 pm

Could I ask for help ;-)
Thanks in advance !
Top
Post Reply

Who is online

Users browsing this forum: dawdler, Google [Bot], katongo360, maigonis, Philippe57 and 122 guests
  4. RouterOS
  5. General