Community discussions

MikroTik App
 
djordjez
just joined
Topic Author
Posts: 7
Joined: Tue Apr 05, 2005 11:35 pm
Location: Serbia
Contact:

PPTP Need Help (twilight zone)

Tue Feb 27, 2007 9:34 am

Hi,
I have a stage problem with my PPTP server. Client are windows2003 and windows XP. When clent is not nated everything work nice. When client is nated somethimes some client can not connect. So I could not find any pattern or rule !.
After few days clent that could not connect to MT suddenly CAN. (this is a part where I start ripping my hair off).
Here is my conf:

Firewall input:
3   ;;; Dozvoli gre protokol
     chain=input protocol=gre action=accept 

 4   chain=input protocol=tcp dst-port=1723 action=accept 
Firewall output:
2   chain=output protocol=tcp src-port=1723 action=accept 

 4   ;;; Dozvoli GRE tunele
     chain=output src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=gre action=accept 
PPTP Server:
nabled: yes
            max-mtu: 1460
            max-mru: 1460
     authentication: chap,mschap2
  keepalive-timeout: 30
    default-profile: default-encryption
Ip firewall service-port:
5   gre                                                                                                                                                 
6 I pptp             1723 

Here is little debugging:
08:16:08 pptp,ppp,info <pptp-0>: waiting for call... 
08:16:08 pptp,debug,packet rcvd Start-Control-Connection-Request from 89.216.x.x 
08:16:08 pptp,debug,packet     protocol-version=0x0100 
08:16:08 pptp,debug,packet     framing-capabilities=1 
08:16:08 pptp,debug,packet     bearer-capabilities=1 
08:16:08 pptp,debug,packet     maximum-channels=0 
08:16:08 pptp,debug,packet     firmware-revision=3790 
08:16:08 pptp,debug,packet     host-name= 
08:16:08 pptp,debug,packet     vendor-name=Microsoft 
08:16:08 pptp,debug,packet sent Start-Control-Connection-Reply to 89.216.x.x 
08:16:08 pptp,debug,packet     protocol-version=0x0100 
08:16:08 pptp,debug,packet     result-code=1 
08:16:08 pptp,debug,packet     error-code=0 
08:16:08 pptp,debug,packet     framing-capabilities=2 
08:16:08 pptp,debug,packet     bearer-capabilities=0 
08:16:08 pptp,debug,packet     maximum-channels=0 
08:16:08 pptp,debug,packet     firmware-revision=1 
08:16:08 pptp,debug,packet     host-name=HAL9000 
08:16:08 pptp,debug,packet     vendor-name=MikroTik 
08:16:08 pptp,debug,packet rcvd Outgoing-Call-Request from 89.216.x.x 
08:16:08 pptp,debug,packet     call-id=28803 
08:16:08 pptp,debug,packet     call-serial-number=680 
08:16:08 pptp,debug,packet     minimum-bps=300 
08:16:08 pptp,debug,packet     maximum-bps=100000000 
08:16:08 pptp,debug,packet     bearer-type=3 
08:16:08 pptp,debug,packet     framing-type=3 
08:16:08 pptp,debug,packet     packet-recv-window-size=64 
08:16:08 pptp,debug,packet     packet-processing-delay=0 
08:16:08 pptp,debug,packet     phone-number-length=0 
08:16:08 pptp,debug,packet     phone-number= 
08:16:08 pptp,debug,packet     subaddress= 
08:16:08 pptp,ppp,debug <89.216.x.x>: PPP connected 
08:16:08 pptp,ppp,debug <89.216.x.x>: LCP lowerup 
08:16:08 pptp,ppp,debug <89.216.x.x>: LCP open 
08:16:08 pptp,debug,packet sent Outgoing-Call-Reply to 89.216.x.x 
08:16:08 pptp,debug,packet     call-id=114 
08:16:08 pptp,debug,packet     peers-call-id=28803 
08:16:08 pptp,debug,packet     result-code=1 
08:16:08 pptp,debug,packet     error-code=0 
08:16:08 pptp,debug,packet     cause-code=0 
08:16:08 pptp,debug,packet     connect-speed=100000 
08:16:08 pptp,debug,packet     packet-recv-window-size=100 
08:16:08 pptp,debug,packet     packet-processing-delay=0 
08:16:08 pptp,debug,packet     physical-channel-id=0 
08:16:08 pptp,debug,packet rcvd Set-Link-Info from 89.216.x.x 
08:16:08 pptp,debug,packet     peers-call-id=114 
08:16:08 pptp,debug,packet     send-accm=0xffffffff 
08:16:08 pptp,debug,packet     receive-accm=0xffffffff 
08:16:08 pptp,debug,packet sent Set-Link-Info to 89.216.x.x 
08:16:08 pptp,debug,packet     peers-call-id=28803 
08:16:08 pptp,debug,packet     send-accm=0xffffffff 
08:16:08 pptp,debug,packet     receive-accm=0xffffffff 
08:16:08 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: rcvd LCP ConfReq id=0x0 
08:16:08 pptp,ppp,debug,packet    <mru 1400> 
08:16:08 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:08 pptp,ppp,debug,packet    <pcomp> 
08:16:08 pptp,ppp,debug,packet    <accomp> 
08:16:08 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfReq id=0x1 
08:16:08 pptp,ppp,debug,packet    <mru 1460> 
08:16:08 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:08 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:08 pptp,ppp,debug,packet <89.216.x.x>: sent LCP ConfRej id=0x0 
08:16:08 pptp,ppp,debug,packet    <pcomp> 
08:16:08 pptp,ppp,debug,packet    <accomp> 
08:16:09 pptp,ppp,debug <89.216.x.x>: LCP timer 
08:16:09 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfReq id=0x2 
08:16:09 pptp,ppp,debug,packet    <mru 1460> 
08:16:09 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:09 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:11 pptp,ppp,debug <89.216.x.x>: LCP timer 
08:16:11 pptp,ppp,debug,packet <89.216.x.x>: sent LCP ConfReq id=0x3 
08:16:11 pptp,ppp,debug,packet    <mru 1460> 
08:16:11 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:11 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:11 pptp,ppp,debug,packet <89.216.x.x>: rcvd LCP ConfReq id=0x1 
08:16:11 pptp,ppp,debug,packet    <mru 1400> 
08:16:11 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:11 pptp,ppp,debug,packet    <pcomp> 
08:16:11 pptp,ppp,debug,packet    <accomp> 
08:16:11 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x1 
08:16:11 pptp,ppp,debug,packet    <pcomp> 
08:16:11 pptp,ppp,debug,packet    <accomp> 
08:16:13 pptp,ppp,debug <89.216.x.x>: LCP timer 
08:16:13 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfReq id=0x4 
08:16:13 pptp,ppp,debug,packet    <mru 1460> 
08:16:13 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:13 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:13 pptp,ppp,debug,packet <89.216.x.x>: rcvd LCP ConfReq id=0x2 
08:16:13 pptp,ppp,debug,packet    <mru 1400> 
08:16:13 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:13 pptp,ppp,debug,packet    <pcomp> 
08:16:13 pptp,ppp,debug,packet    <accomp> 
08:16:13 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x2 
08:16:13 pptp,ppp,debug,packet    <pcomp> 
08:16:13 pptp,ppp,debug,packet    <accomp> 
08:16:13 system,info,account user djole logged out from 192.168.0.20 via telnet 
08:16:17 pptp,ppp,debug <89.216.x.x>: LCP timer 
08:16:17 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfReq id=0x5 
08:16:17 pptp,ppp,debug,packet    <mru 1460> 
08:16:17 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:17 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:17 pptp,ppp,debug,packet <89.216.x.x>: rcvd LCP ConfReq id=0x3 
08:16:17 pptp,ppp,debug,packet    <mru 1400> 
08:16:17 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:17 pptp,ppp,debug,packet    <pcomp> 
08:16:17 pptp,ppp,debug,packet    <accomp> 
08:16:17 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x3 
08:16:17 pptp,ppp,debug,packet    <pcomp> 
08:16:17 pptp,ppp,debug,packet    <accomp> 
08:16:19 pptp,debug,packet rcvd Echo-Request from 195.252.94.37 
08:16:19 pptp,debug,packet     identifier=4144168960 
08:16:19 pptp,debug,packet sent Echo-Reply to 195.252.94.37 
08:16:19 pptp,debug,packet     identifier=4144168960 
08:16:19 pptp,debug,packet     result-code=1 
08:16:19 pptp,debug,packet     error-code=0 
08:16:21 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: rcvd LCP ConfReq id=0x4 
08:16:21 pptp,ppp,debug,packet    <mru 1400> 
08:16:21 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:21 pptp,ppp,debug,packet    <pcomp> 
08:16:21 pptp,ppp,debug,packet    <accomp> 
08:16:21 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x4 
08:16:21 pptp,ppp,debug,packet    <pcomp> 
08:16:21 pptp,ppp,debug,packet    <accomp> 
08:16:22 pptp,ppp,debug <89.216.x.x>: LCP timer 
08:16:22 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfReq id=0x6 
08:16:22 pptp,ppp,debug,packet    <mru 1460> 
08:16:22 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:22 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:25 pptp,ppp,debug,packet <89.216.x.x>: rcvd LCP ConfReq id=0x5 
08:16:25 pptp,ppp,debug,packet    <mru 1400> 
08:16:25 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:25 pptp,ppp,debug,packet    <pcomp> 
08:16:25 pptp,ppp,debug,packet    <accomp> 
08:16:25 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x5 
08:16:25 pptp,ppp,debug,packet    <pcomp> 
08:16:25 pptp,ppp,debug,packet    <accomp> 
08:16:29 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: rcvd LCP ConfReq id=0x6 
08:16:29 pptp,ppp,debug,packet    <mru 1400> 
08:16:29 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:29 pptp,ppp,debug,packet    <pcomp> 
08:16:29 pptp,ppp,debug,packet    <accomp> 
08:16:29 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x6 
08:16:29 pptp,ppp,debug,packet    <pcomp> 
08:16:29 pptp,ppp,debug,packet    <accomp> 
08:16:30 pptp,ppp,debug <89.216.x.x>: LCP timer 
08:16:30 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfReq id=0x7 
08:16:30 pptp,ppp,debug,packet    <mru 1460> 
08:16:30 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:30 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:33 pptp,ppp,debug,packet <89.216.x.x>: rcvd LCP ConfReq id=0x7 
08:16:33 pptp,ppp,debug,packet    <mru 1400> 
08:16:33 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:33 pptp,ppp,debug,packet    <pcomp> 
08:16:33 pptp,ppp,debug,packet    <accomp> 
08:16:33 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x7 
08:16:33 pptp,ppp,debug,packet    <pcomp> 
08:16:33 pptp,ppp,debug,packet    <accomp> 
08:16:37 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: rcvd LCP ConfReq id=0x8 
08:16:37 pptp,ppp,debug,packet    <mru 1400> 
08:16:37 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:37 pptp,ppp,debug,packet    <pcomp> 
08:16:37 pptp,ppp,debug,packet    <accomp> 
08:16:37 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x8 
08:16:37 pptp,ppp,debug,packet    <pcomp> 
08:16:37 pptp,ppp,debug,packet    <accomp> 
08:16:40 pptp,ppp,debug <89.216.x.x>: LCP timer 
08:16:40 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfReq id=0x8 
08:16:40 pptp,ppp,debug,packet    <mru 1460> 
08:16:40 pptp,ppp,debug,packet    <magic 0x7173bb22> 
08:16:40 pptp,ppp,debug,packet    <auth  mschap2> 
08:16:41 pptp,ppp,debug,packet <89.216.x.x>: rcvd LCP ConfReq id=0x9 
08:16:41 pptp,ppp,debug,packet    <mru 1400> 
08:16:41 pptp,ppp,debug,packet    <magic 0x6e013764> 
08:16:41 pptp,ppp,debug,packet    <pcomp> 
08:16:41 pptp,ppp,debug,packet    <accomp> 
08:16:41 pptp,ppp,debug,packet      <0x0d 03 06><89.216.x.x>: sent LCP ConfRej id=0x9 
08:16:41 pptp,ppp,debug,packet    <pcomp> 
08:16:41 pptp,ppp,debug,packet    <accomp> 
08:16:45 pptp,debug,packet rcvd Call-Clear-Request from 89.216.x.x 
08:16:45 pptp,debug,packet     call-id=512 
08:16:45 pptp,ppp,debug <89.216.x.x>: PPP disconnected <call cleared> 
08:16:45 pptp,ppp,debug <89.216.x.x>: LCP lowerdown 
08:16:45 pptp,ppp,info <pptp-0>: terminating... - call cleared 
08:16:45 pptp,ppp,info <pptp-0>: terminating... - call cleared 
08:16:45 pptp,ppp,debug <89.216.x.x>: PPP destroy 
08:16:45 pptp,ppp,debug <89.216.x.x>: PPP stopped 
08:16:45 pptp,ppp,info <pptp-0>: disconnected 
08:16:45 pptp,ppp,info <pptp-0>: disconnected 
08:16:45 pptp,ppp,debug <89.216.x.x>: CCP lowerdown 
08:16:45 pptp,ppp,debug <89.216.x.x>: CCP down event in initial state 
08:16:45 pptp,ppp,debug <89.216.x.x>: IPCP lowerdown 
08:16:45 pptp,ppp,debug <89.216.x.x>: IPCP down event in initial state


Any suggestions is most welcome.

Thanks
 
leonj
Frequent Visitor
Frequent Visitor
Posts: 76
Joined: Thu Jun 22, 2006 4:23 pm
Location: South Africa
Contact:

Wed Mar 14, 2007 12:04 am

Hi

I have similar issues with PPTP. It seems like the windows clients dont want to work behind a NAT. The best way to make sure it works is if the routing is set up completely BOTH ways ie. you can ping both sides (client <-> server).

If the NAT is on a MT, try enabling the PPTP helper in the firewall. I do know that at a MUM MikoTik stated that in 2.9 it does not always work, but in v3 it should be fixed.

Good Luck
 
meister
newbie
Posts: 48
Joined: Wed Jul 07, 2004 12:28 pm
Location: Canada

Wed May 02, 2007 6:22 am

I have the same problem.

Google 'lcp timeout'. Plenty of info there.

It seems that ppp-2.4.3 and ppp-2.4.4 conflicts with syslog where ppp-2.4.2 works fine.

Who is online

Users browsing this forum: Majestic-12 [Bot], roninxt, sindy and 40 guests