Page 1 of 1

L2TP VPN problem to connect from Windows 7

Posted: Tue Dec 29, 2015 8:25 pm
by MikroTikFan
Please help me to find a reason why my VPN L2TP connection is not running.
Because I have problem from outside my network to connect first I tried to connect I decided to run first from my LAN.

Mikrotik 192.168.29.254
Win7: 192.168.29.180

Firewall
 ;;; OpenVPN
chain=input action=accept protocol=tcp dst-port=1460 log=no log-prefix="" 
chain=input action=accept protocol=udp dst-port=500 log=no log-prefix="" 
chain=input action=accept protocol=udp dst-port=1701 log=no log-prefix="" 
chain=input action=accept protocol=udp dst-port=4500 log=no log-prefix="" 
chain=input action=accept protocol=ipsec-esp log=no log-prefix="" 
chain=input action=accept protocol=ipsec-ah log=no log-prefix="" 


After this I got logs :
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=0, session-id=0, ns=0, nr=0 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRQ 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Bearer-Capabilities=0x0 
19:11:27 l2tp,debug,packet VPN l2to:     Firmware-Revision=0xa00 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Host-Name="mainframe" 
19:11:27 l2tp,debug,packet VPN l2to:     Vendor-Name="Microsoft" 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=48 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=8 
19:11:27 l2tp,info VPN l2to: first L2TP UDP packet received from 192.168.29.180 
19:11:27 l2tp,debug VPN l2to: tunnel 104 entering state: wait-ctl-conn 
19:11:27 l2tp,debug,packet VPN l2to: sent control message to 192.168.29.180:1701 from 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=48, session-id=0, ns=0, nr=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRP 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Bearer-Capabilities=0x0 
19:11:27 l2tp,debug,packet VPN l2to:     Firmware-Revision=0x1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Host-Name="CoreRouter" 
19:11:27 l2tp,debug,packet VPN l2to:     Vendor-Name="MikroTik" 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=104 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=4 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Challenge=0x03:87:b6:c9:5c:d1:81:3b:a8:a6:10:4c:ed:69:0b:36 
19:11:27 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Response-Capability= 
19:11:27 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Forward-Capability= 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=1, nr=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCCN 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Response=0x1d:5f:96:ed:fc:b2:e1:67:b9:74:29:d7:82:77:89:a4 
19:11:27 l2tp,debug VPN l2to: tunnel 104 received bad auth. response, stopping  
19:11:27 l2tp,debug,packet VPN l2to: sent control message to 192.168.29.180:1701 from 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=48, session-id=0, ns=1, nr=2 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=StopCCN 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Result-Code=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=104 
19:11:27 l2tp,debug VPN l2to: tunnel 104 entering state: stopping 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message (ack) from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=3, nr=1 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=2, nr=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Message-Type=ICRQ 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Assigned-Session-ID=1 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Call-Serial-Number=0 
19:11:27 l2tp,debug,packet VPN l2to:     (M) Bearer-Type=0x2 
19:11:27 l2tp,debug,packet VPN l2to:     1(vendor-id=311)=0x3c:ed:fd:2a:9c:3b:dc:43:86:bc:99:82:33:d1:99:e1 
19:11:27 l2tp,debug VPN l2to: tunnel 104 received message in stopping state, dropping 
19:11:27 l2tp,debug,packet VPN l2to: rcvd control message (ack) from 192.168.29.180:1701 to 192.168.29.254:1701 
19:11:27 l2tp,debug,packet VPN l2to:     tunnel-id=104, session-id=0, ns=3, nr=2 
19:11:27 l2tp,debug VPN l2to: tunnel 104 entering state: dead 

Re: L2TP VPN problem to connect from Windows 7

Posted: Wed Dec 30, 2015 12:16 am
by MikroTikFan
I found small error in config and now I can establish l2tp vpn from inside of network.
Probably something is wrong in firewall config.
For this von I have :
;;; OpenVPN
chain=input action=accept protocol=tcp in-interface=ether1-gateway dst-port=1460 log=no log-prefix="" 

chain=input action=accept protocol=udp in-interface=ether1-gateway dst-port=500 log=no log-prefix="" 

chain=input action=accept protocol=udp in-interface=ether1-gateway dst-port=1701 log=no log-prefix="" 

chain=input action=accept protocol=udp dst-port=4500 log=no log-prefix=""
What I have to add to access from outside to the l2tp vpn?

Re: L2TP VPN problem to connect from Windows 7

Posted: Wed Dec 30, 2015 11:07 pm
by MikroTikFan
I hope than anybody can help me with this problem :D
Thanks in advance !

Re: L2TP VPN problem to connect from Windows 7

Posted: Thu Dec 31, 2015 1:17 am
by jebz
I hope than anybody can help me with this problem
.
19:11:27 l2tp,debug VPN l2to: tunnel 104 received bad auth. response, stopping  
I would check the PPP Secrets for matching username and password.

Re: L2TP VPN problem to connect from Windows 7

Posted: Thu Dec 31, 2015 2:11 am
by MikroTikFan
IP-CONN.png
After some config changes this L2TP VPN works in my LAN. Because of this I don't have any problems with secrets.;-)

Maybe there is problem in IPsec configuration and by default this works from inside of the network and from outside not

/ip ipsec policy> print
Flags: T - template, X - disabled, D - dynamic, I - inactive, * - default 
 0 T * group=default src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=all proposal=default template=yes 

 1  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=9553 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 2  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=10741 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 3  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=7773 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 4  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=2394 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 5  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=3083 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 6  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=18778 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 7  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=4454 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 8  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=20697 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 

 9  D  src-address=myip/32 src-port=1701 dst-address=37.47.44.146/32 dst-port=12489 protocol=udp action=encrypt level=require 
       ipsec-protocols=esp tunnel=no sa-src-address=myip sa-dst-address=37.47.44.146 priority=2 


07:41:55 l2tp,debug,packet VPN l2to: sent control message (ack) to 37.47.44.146:54358 from 192.168.1.1:1701 
07:41:55 l2tp,debug,packet VPN l2to:     tunnel-id=25, session-id=0, ns=1, nr=1 
07:41:57 l2tp,debug,packet VPN l2to: sent control message to 37.47.44.146:54358 from 192.168.1.1:1701 
07:41:57 l2tp,debug,packet VPN l2to:     tunnel-id=25, session-id=0, ns=0, nr=1 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRP 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x1 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Bearer-Capabilities=0x0 
07:41:57 l2tp,debug,packet VPN l2to:     Firmware-Revision=0x1 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Host-Name="CoreRouter" 
07:41:57 l2tp,debug,packet VPN l2to:     Vendor-Name="MikroTik" 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=32 
07:41:57 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=4 
07:41:57 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Response-Capability= 
07:41:57 l2tp,debug,packet VPN l2to:     PPPoE-Relay-Forward-Capability= 
07:41:59 l2tp,debug,packet VPN l2to: rcvd control message from 37.47.44.146:54358 to 192.168.1.1:1701 
07:41:59 l2tp,debug,packet VPN l2to:     tunnel-id=0, session-id=0, ns=0, nr=0 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Message-Type=SCCRQ 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Protocol-Version=0x01:00 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Framing-Capabilities=0x3 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Host-Name=0x4b:72:7a:79:73:7a:74:6f:66:73:2d:69:50:68:6f:6e 
07:41:59 l2tp,debug,packet VPN l2to:         65:00 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Assigned-Tunnel-ID=25 
07:41:59 l2tp,debug,packet VPN l2to:     (M) Receive-Window-Size=4 
07:41:59 l2tp,debug,packet VPN l2to: sent control message (ack) to 37.47.44.146:54358 from 192.168.1.1:1701 
07:41:59 l2tp,debug,packet VPN l2to:     tunnel-id=25, session-id=0, ns=1, nr=1 
07:41:59 l2tp,debug VPN l2to: tunnel 32 received no replies, disconnecting 
07:41:59 l2tp,debug VPN l2to: tunnel 32 entering state: dead 
I need support how to configure my IPsec or Firewall to get in to my L2TP VPN.

Re: L2TP VPN problem to connect from Windows 7

Posted: Sat Jan 02, 2016 2:03 pm
by MikroTikFan
Can I ask in New Year anybody for help ;-)

Thanks in advance!

Re: L2TP VPN problem to connect from Windows 7

Posted: Tue Jan 05, 2016 5:51 am
by jaytcsd
http://l2tp.patokatech.com/

This works for win 7, 8 and android phones.

Re: L2TP VPN problem to connect from Windows 7

Posted: Tue Jan 05, 2016 3:03 pm
by jebz
http://l2tp.patokatech.com/

This works for win 7, 8 and android phones.
http://l2tp.patokatech.com/input.gif
This shows no external VPN attempts.
Are you sure the first router is passing the ports to the 2nd Mikrotik router?

Re: L2TP VPN problem to connect from Windows 7

Posted: Tue Jan 05, 2016 6:14 pm
by MikroTikFan
I thing that I'm step ahead and don't have problems with firewal any more.

Still I can't establish pptp connection ;-(

17:09:38 pptp,info VPN pptp: TCP connection established from 37.47.
37.37 
17:09:38 pptp,info TCP connection established from 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp: rcvd Start-Control-Connection-
Request from 37.47.37.37 
17:09:38 pptp,debug,packet rcvd Start-Control-Connection-Request fr
om 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     protocol-version=0x0100 
17:09:38 pptp,debug,packet     protocol-version=0x0100 
17:09:38 pptp,debug,packet VPN pptp:     framing-capabilities=1 
17:09:38 pptp,debug,packet     framing-capabilities=1 
17:09:38 pptp,debug,packet VPN pptp:     bearer-capabilities=1 
17:09:38 pptp,debug,packet     bearer-capabilities=1 
17:09:38 pptp,debug,packet VPN pptp:     maximum-channels=0 
17:09:38 pptp,debug,packet     maximum-channels=0 
17:09:38 pptp,debug,packet VPN pptp:     firmware-revision=0 
17:09:38 pptp,debug,packet     firmware-revision=0 
17:09:38 pptp,debug,packet VPN pptp:     host-name= 
17:09:38 pptp,debug,packet     host-name= 
17:09:38 pptp,debug,packet VPN pptp:     vendor-name= 
17:09:38 pptp,debug,packet     vendor-name= 
17:09:38 pptp,debug,packet VPN pptp: sent Start-Control-Connection-
Reply to 37.47.37.37 
17:09:38 pptp,debug,packet sent Start-Control-Connection-Reply to 3
7.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     protocol-version=0x0100 
17:09:38 pptp,debug,packet     protocol-version=0x0100 
17:09:38 pptp,debug,packet VPN pptp:     result-code=1 
17:09:38 pptp,debug,packet     result-code=1 
17:09:38 pptp,debug,packet VPN pptp:     error-code=0 
17:09:38 pptp,debug,packet     error-code=0 
17:09:38 pptp,debug,packet VPN pptp:     framing-capabilities=2 
17:09:38 pptp,debug,packet     framing-capabilities=2 
17:09:38 pptp,debug,packet VPN pptp:     bearer-capabilities=0 
17:09:38 pptp,debug,packet     bearer-capabilities=0 
17:09:38 pptp,debug,packet VPN pptp:     maximum-channels=0 
17:09:38 pptp,debug,packet     maximum-channels=0 
17:09:38 pptp,debug,packet VPN pptp:     firmware-revision=1 
17:09:38 pptp,debug,packet     firmware-revision=1 
17:09:38 pptp,debug,packet VPN pptp:     host-name=CoreRouter 
17:09:38 pptp,debug,packet     host-name=CoreRouter 
17:09:38 pptp,debug,packet VPN pptp:     vendor-name=MikroTik 
17:09:38 pptp,debug,packet     vendor-name=MikroTik 
17:09:38 pptp,debug,packet VPN pptp: rcvd Outgoing-Call-Request fro
m 37.47.37.37 
17:09:38 pptp,debug,packet rcvd Outgoing-Call-Request from 37.47.37
.37 
17:09:38 pptp,debug,packet VPN pptp:     call-id=11404 
17:09:38 pptp,debug,packet     call-id=11404 
17:09:38 pptp,debug,packet VPN pptp:     call-serial-number=0 
17:09:38 pptp,debug,packet     call-serial-number=0 
17:09:38 pptp,debug,packet VPN pptp:     minimum-bps=300 
17:09:38 pptp,debug,packet     minimum-bps=300 
17:09:38 pptp,debug,packet VPN pptp:     maximum-bps=100000000 
17:09:38 pptp,debug,packet     maximum-bps=100000000 
17:09:38 pptp,debug,packet VPN pptp:     bearer-type=3 
17:09:38 pptp,debug,packet     bearer-type=3 
17:09:38 pptp,debug,packet VPN pptp:     framing-type=3 
17:09:38 pptp,debug,packet     framing-type=3 
17:09:38 pptp,debug,packet VPN pptp:     packet-recv-window-size=64
 
17:09:38 pptp,debug,packet     packet-recv-window-size=64 
17:09:38 pptp,debug,packet VPN pptp:     packet-processing-delay=0 
17:09:38 pptp,debug,packet     packet-processing-delay=0 
17:09:38 pptp,debug,packet VPN pptp:     phone-number-length=0 
17:09:38 pptp,debug,packet     phone-number-length=0 
17:09:38 pptp,debug,packet VPN pptp:     phone-number= 
17:09:38 pptp,debug,packet     phone-number= 
17:09:38 pptp,debug,packet VPN pptp:     subaddress= 
17:09:38 pptp,debug,packet     subaddress= 
17:09:38 pptp,ppp,debug VPN pptp: <64>: LCP lowerup 
17:09:38 pptp,ppp,debug <64>: LCP lowerup 
17:09:38 pptp,ppp,debug VPN pptp: <64>: LCP open 
17:09:38 pptp,ppp,debug <64>: LCP open 
17:09:38 pptp,debug,packet VPN pptp: sent Outgoing-Call-Reply to 37
.47.37.37 
17:09:38 pptp,debug,packet sent Outgoing-Call-Reply to 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     call-id=64 
17:09:38 pptp,debug,packet     call-id=64 
17:09:38 pptp,debug,packet VPN pptp:     peers-call-id=11404 
17:09:38 pptp,debug,packet     peers-call-id=11404 
17:09:38 pptp,debug,packet VPN pptp:     result-code=1 
17:09:38 pptp,debug,packet     result-code=1 
17:09:38 pptp,debug,packet VPN pptp:     error-code=0 
17:09:38 pptp,debug,packet     error-code=0 
17:09:38 pptp,debug,packet VPN pptp:     cause-code=0 
17:09:38 pptp,debug,packet     cause-code=0 
17:09:38 pptp,debug,packet VPN pptp:     connect-speed=100000 
17:09:38 pptp,debug,packet     connect-speed=100000 
17:09:38 pptp,debug,packet VPN pptp:     packet-recv-window-size=10
0 
17:09:38 pptp,debug,packet     packet-recv-window-size=100 
17:09:38 pptp,debug,packet VPN pptp:     packet-processing-delay=0 
17:09:38 pptp,debug,packet     packet-processing-delay=0 
17:09:38 pptp,debug,packet VPN pptp:     physical-channel-id=0 
17:09:38 pptp,debug,packet     physical-channel-id=0 
17:09:38 pptp,debug,packet VPN pptp: rcvd Set-Link-Info from 37.47.
37.37 
17:09:38 pptp,debug,packet rcvd Set-Link-Info from 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     peers-call-id=64 
17:09:38 pptp,debug,packet     peers-call-id=64 
17:09:38 pptp,debug,packet VPN pptp:     send-accm=0xffffffff 
17:09:38 pptp,debug,packet     send-accm=0xffffffff 
17:09:38 pptp,debug,packet VPN pptp:     receive-accm=0xffffffff 
17:09:38 pptp,debug,packet     receive-accm=0xffffffff 
17:09:38 pptp,debug,packet VPN pptp: sent Set-Link-Info to 37.47.37
.37 
17:09:38 pptp,debug,packet sent Set-Link-Info to 37.47.37.37 
17:09:38 pptp,debug,packet VPN pptp:     peers-call-id=11404 
17:09:38 pptp,debug,packet     peers-call-id=11404 
17:09:38 pptp,debug,packet VPN pptp:     send-accm=0xffffffff 
17:09:38 pptp,debug,packet     send-accm=0xffffffff 
17:09:38 pptp,debug,packet VPN pptp:     receive-accm=0xffffffff 
17:09:38 pptp,debug,packet     receive-accm=0xffffffff 
17:09:39 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:39 pptp,ppp,debug <64>: LCP timer 
17:09:39 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x1 
17:09:39 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x1 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:39 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:40 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:40 pptp,ppp,debug <64>: LCP timer 
17:09:40 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x2 
17:09:40 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x2 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:40 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:41 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:41 pptp,ppp,debug <64>: LCP timer 
17:09:41 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x3 
17:09:41 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x3 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:41 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:43 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:43 pptp,ppp,debug <64>: LCP timer 
17:09:43 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x4 
17:09:43 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x4 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:43 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:47 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:47 pptp,ppp,debug <64>: LCP timer 
17:09:47 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x5 
17:09:47 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x5 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:47 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:52 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:52 pptp,ppp,debug <64>: LCP timer 
17:09:52 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x6 
17:09:52 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x6 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:52 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:01 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:10:01 pptp,ppp,debug <64>: LCP timer 
17:10:01 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x7 
17:10:01 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x7 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:10:01 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP down event in starting 
state 
17:10:08 pptp,ppp,debug <64>: LCP down event in starting state

Re: L2TP VPN problem to connect from Windows 7

Posted: Wed Jan 06, 2016 8:11 pm
by mbahi
I have a similar problem like you , but in win 8.1 client. You can see me post with the question.

I suspect that this possible that the vpn clients of windows only speak well with windows vpn servers,but no with other vpn servers.

I am thinking in use alternative vpn clients like https://openvpn.net/index.php/open-source.html or https://www.softether.org/ and use Ovpn server in mikrotik side.

Re: L2TP VPN problem to connect from Windows 7

Posted: Thu Jan 07, 2016 1:20 pm
by MikroTikFan
I think that in my case Windows 7, 8.1, 10 VPN client is not problem.
I tried also to connect L2TP, PP2P from LAN and this is working fine, after I will switch client station to external network ie. 3G/4G I'm having problem ;-(

Something is wrong in Mikrotik Firewall.

I don't know what I have to change ?

Strange is that from logs I see that vpn tries to connect 7 times :
17:09:39 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:39 pptp,ppp,debug <64>: LCP timer 
17:09:39 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x1 
17:09:39 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x1 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:39 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:40 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:40 pptp,ppp,debug <64>: LCP timer 
17:09:40 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x2 
17:09:40 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x2 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:40 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:41 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:41 pptp,ppp,debug <64>: LCP timer 
17:09:41 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x3 
17:09:41 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x3 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:41 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:41 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:43 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:43 pptp,ppp,debug <64>: LCP timer 
17:09:43 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x4 
17:09:43 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x4 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:43 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:43 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:47 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:47 pptp,ppp,debug <64>: LCP timer 
17:09:47 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x5 
17:09:47 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x5 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:47 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:47 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:52 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:52 pptp,ppp,debug <64>: LCP timer 
17:09:52 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x6 
17:09:52 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x6 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:52 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:52 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:01 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:10:01 pptp,ppp,debug <64>: LCP timer 
17:10:01 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x7 
17:10:01 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x7 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet    <magic 0xf879954> 
17:10:01 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:10:01 pptp,ppp,debug,packet    <auth  mschap2> 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug <64>: LCP lowerdown 
17:10:08 pptp,ppp,debug VPN pptp: <64>: LCP down event in starting 
state 
17:10:08 pptp,ppp,debug <64>: LCP down event in starting state
Question is why this actions failed ;-(
17:09:39 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:39 pptp,ppp,debug <64>: LCP timer 
17:09:39 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x1 
17:09:39 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x1 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:39 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:39 pptp,ppp,debug,packet    <auth  mschap2> 
17:09:40 pptp,ppp,debug VPN pptp: <64>: LCP timer 
17:09:40 pptp,ppp,debug <64>: LCP timer 
17:09:40 pptp,ppp,debug,packet VPN pptp:  <64>: sent LCP ConfReq id
=0x2 
17:09:40 pptp,ppp,debug,packet  <64>: sent LCP ConfReq id=0x2 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet    <magic 0xf879954> 
17:09:40 pptp,ppp,debug,packet VPN pptp:    <auth  mschap2> 
17:09:40 pptp,ppp,debug,packet    <auth  mschap2> 

Re: L2TP VPN problem to connect from Windows 7

Posted: Fri Jan 08, 2016 9:26 pm
by MikroTikFan
Could I ask for help ;-)
Thanks in advance !