Community discussions

MikroTik App
 
lionspy
just joined
Topic Author
Posts: 17
Joined: Fri Jan 27, 2012 11:40 am

how can i disable MPPE on server side?

Sat Feb 04, 2012 8:55 pm

I want to disable MPPE encryption for client connections.
Under ppp profiles I've disabled encryption both in default profile & default-encryption profiles, but winbox shows that client connections are still encrypted. How can I solve my problem?
When client autheticates via mschapv2 - it have mppe encryption
When client autheticates via mschap - it hav'nt mppe encryption.
but i can't disable mschapv2 authentication on server side.
 
mcdebugger
Frequent Visitor
Frequent Visitor
Posts: 50
Joined: Mon Oct 03, 2011 11:10 am

Re: how can i disable MPPE on server side?

Fri Dec 14, 2012 9:40 pm

Same problem here. At least on RB750 box. Don't remember if this happened on my RB1200.
 
slawekk
just joined
Posts: 24
Joined: Sun Jan 02, 2011 3:48 pm

Re: how can i disable MPPE on server side?

Sat Dec 15, 2012 9:37 am

If you use a radius server then also disable mppe on it (by the attribute attached to user/group).
 
mcdebugger
Frequent Visitor
Frequent Visitor
Posts: 50
Joined: Mon Oct 03, 2011 11:10 am

Re: how can i disable MPPE on server side?

Tue Dec 18, 2012 6:56 pm

If you use a radius server then also disable mppe on it (by the attribute attached to user/group).
If I understand correctly I should pass the following attribute from RADIUS server to Mikrotik NAS:
MS-MPPE-Encryption-Types=0
Am I right?
 
slawekk
just joined
Posts: 24
Joined: Sun Jan 02, 2011 3:48 pm

Re: how can i disable MPPE on server side?

Wed Dec 19, 2012 1:40 am

Try this in reply table (i'm using FreeRadius@MySQL):
MS-MPPE-Recv-Key = 0x00000000
MS-MPPE-Send-Key = 0x00000000

Who is online

Users browsing this forum: Google [Bot], Kindis and 92 guests