Community discussions

MikroTik App
 
ghostman
just joined
Topic Author
Posts: 11
Joined: Wed Feb 18, 2015 12:48 am

PPTP And L2tP strange case

Mon Nov 07, 2016 11:42 am

router board hap lite when i try to make pptp from windows to mikrotik this is the print from log:

11:22:16 pptp,ppp,debug,packet <mru 1450>
11:22:16 pptp,ppp,debug,packet <magic 0x4e98063e>
11:22:16 pptp,ppp,debug,packet <auth mschap2>
11:22:17 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x6
11:22:17 pptp,ppp,debug,packet <mru 1400>
11:22:17 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:17 pptp,ppp,debug,packet <pcomp>
11:22:17 pptp,ppp,debug,packet <accomp>
11:22:17 pptp,ppp,debug,packet <callback 0x06>
11:22:17 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x6
11:22:17 pptp,ppp,debug,packet <pcomp>
11:22:17 pptp,ppp,debug,packet <accomp>
11:22:21 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x7
11:22:21 pptp,ppp,debug,packet <mru 1400>
11:22:21 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:21 pptp,ppp,debug,packet <pcomp>
11:22:21 pptp,ppp,debug,packet <accomp>
11:22:21 pptp,ppp,debug,packet <callback 0x06>
11:22:21 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x7
11:22:21 pptp,ppp,debug,packet <pcomp>
11:22:21 pptp,ppp,debug,packet <accomp>
11:22:25 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x8
11:22:25 pptp,ppp,debug,packet <mru 1400>
11:22:25 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:25 pptp,ppp,debug,packet <pcomp>
11:22:25 pptp,ppp,debug,packet <accomp>
11:22:25 pptp,ppp,debug,packet <callback 0x06>
11:22:25 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x8
11:22:25 pptp,ppp,debug,packet <pcomp>
11:22:25 pptp,ppp,debug,packet <accomp>
11:22:27 pptp,ppp,debug <4>: LCP timer
11:22:27 pptp,ppp,debug,packet <4>: sent LCP ConfReq id=0x8
11:22:27 pptp,ppp,debug,packet <mru 1450>
11:22:27 pptp,ppp,debug,packet <magic 0x4e98063e>
11:22:27 pptp,ppp,debug,packet <auth mschap2>
11:22:30 pptp,ppp,debug,packet <4>: rcvd LCP ConfReq id=0x9
11:22:30 pptp,ppp,debug,packet <mru 1400>
11:22:30 pptp,ppp,debug,packet <magic 0x2289001e>
11:22:30 pptp,ppp,debug,packet <pcomp>
11:22:30 pptp,ppp,debug,packet <accomp>
11:22:30 pptp,ppp,debug,packet <callback 0x06>
11:22:30 pptp,ppp,debug,packet <4>: sent LCP ConfRej id=0x9
11:22:30 pptp,ppp,debug,packet <pcomp>
11:22:30 pptp,ppp,debug,packet <accomp>
11:22:33 pptp,debug,packet rcvd Call-Clear-Request from (windows real ip)
11:22:33 pptp,debug,packet call-id=52746
11:22:33 pptp,ppp,debug <4>: LCP lowerdown
11:22:33 pptp,ppp,debug <4>: LCP lowerdown
11:22:33 pptp,ppp,debug <4>: LCP down event in starting state

and mikrotik config:


ppp profile print
Flags: * - default
0 * name="default" local-address=192.168.110.1 use-mpls=default use-compression=default use-encryption=no only-one=default change-tcp-mss=yes use-upnp=default address-list=""
on-up="" on-down=""

1 * name="default-encryption" use-mpls=default use-compression=default use-encryption=yes only-one=default change-tcp-mss=yes use-upnp=default address-list="" on-up="" on-down=""

interface l2tp-server server print
enabled: yes
max-mtu: 1450
max-mru: 1450
mrru: disabled
authentication: pap,chap,mschap1,mschap2
keepalive-timeout: 30
max-sessions: unlimited
default-profile: default-encryption
use-ipsec: no
ipsec-secret:
allow-fast-path: no
interface pptp-server server print
enabled: yes
max-mtu: 1450
max-mru: 1450
mrru: disabled
authentication: pap,chap,mschap1,mschap2
keepalive-timeout: 30
default-profile: default-encryption

ppp secret print
# NAME SERVICE CALLER-ID PASSWORD PROFILE REMOTE-ADDRESS
0 test any test default


So where is the problem ?
thanks for your help :)
 
ghostman
just joined
Topic Author
Posts: 11
Joined: Wed Feb 18, 2015 12:48 am

Re: PPTP And L2tP strange case

Tue Nov 08, 2016 10:46 am

any help ?
 
ghostman
just joined
Topic Author
Posts: 11
Joined: Wed Feb 18, 2015 12:48 am

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 10:01 am

any update ?
 
User avatar
cdiedrich
Forum Veteran
Forum Veteran
Posts: 997
Joined: Thu Feb 13, 2014 2:03 pm
Location: Basel, Switzerland // Bremen, Germany
Contact:

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 12:09 pm

Do you have an accept rule in the input chain for protocol 47 (GRE)?
-Chris
 
ghostman
just joined
Topic Author
Posts: 11
Joined: Wed Feb 18, 2015 12:48 am

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 1:02 pm

Do you have an accept rule in the input chain for protocol 47 (GRE)?
-Chris
NO showed i have ?
 
User avatar
cdiedrich
Forum Veteran
Forum Veteran
Posts: 997
Joined: Thu Feb 13, 2014 2:03 pm
Location: Basel, Switzerland // Bremen, Germany
Contact:

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 1:04 pm

Absolutely.
pptp uses tcp/1723 for control only - the actual traffic is encapsulated in GRE.
 
ghostman
just joined
Topic Author
Posts: 11
Joined: Wed Feb 18, 2015 12:48 am

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 1:21 pm

Absolutely.
pptp uses tcp/1723 for control only - the actual traffic is encapsulated in GRE.

i do it

chain=input action=accept protocol=gre log=no log-prefix=""


and this is the log


13:10:47 pptp,info TCP connection established from My real Ip
13:10:47 pptp,debug,packet rcvd Start-Control-Connection-Request from My Real Ip
13:10:47 pptp,debug,packet protocol-version=0x0100
13:10:47 pptp,debug,packet framing-capabilities=3
13:10:47 pptp,debug,packet bearer-capabilities=3
13:10:47 pptp,debug,packet maximum-channels=1
13:10:47 pptp,debug,packet firmware-revision=0
13:10:47 pptp,debug,packet host-name=anonymous
13:10:47 pptp,debug,packet vendor-name=
13:10:47 pptp,debug,packet sent Start-Control-Connection-Reply to My Real Ip
13:10:47 pptp,debug,packet protocol-version=0x0100
13:10:47 pptp,debug,packet result-code=1
13:10:47 pptp,debug,packet error-code=0
13:10:47 pptp,debug,packet framing-capabilities=2
13:10:47 pptp,debug,packet bearer-capabilities=0
13:10:47 pptp,debug,packet maximum-channels=0
13:10:47 pptp,debug,packet firmware-revision=1
13:10:47 pptp,debug,packet host-name=MikroTik
13:10:47 pptp,debug,packet vendor-name=MikroTik
13:10:47 pptp,debug,packet rcvd Outgoing-Call-Request from My Real Ip
13:10:47 pptp,debug,packet call-id=53934
13:10:47 pptp,debug,packet call-serial-number=8500
13:10:47 pptp,debug,packet minimum-bps=1000
13:10:47 pptp,debug,packet maximum-bps=100000000
13:10:47 pptp,debug,packet bearer-type=3
13:10:47 pptp,debug,packet framing-type=3
13:10:47 pptp,debug,packet packet-recv-window-size=8192
13:10:47 pptp,debug,packet packet-processing-delay=0
13:10:47 pptp,debug,packet phone-number-length=0
13:10:47 pptp,debug,packet phone-number=
13:10:47 pptp,debug,packet subaddress=
13:10:47 pptp,ppp,debug <0>: LCP lowerup
13:10:47 pptp,ppp,debug <0>: LCP open
13:10:47 pptp,debug,packet sent Outgoing-Call-Reply to My Real Ip
13:10:47 pptp,debug,packet call-id=0
13:10:47 pptp,debug,packet peers-call-id=53934
13:10:47 pptp,debug,packet result-code=1
13:10:47 pptp,debug,packet error-code=0
13:10:47 pptp,debug,packet cause-code=0
13:10:47 pptp,debug,packet connect-speed=100000
13:10:47 pptp,debug,packet packet-recv-window-size=100
13:10:47 pptp,debug,packet packet-processing-delay=0
13:10:47 pptp,debug,packet physical-channel-id=0
13:10:47 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:47 pptp,ppp,debug,packet <mru 1400>
13:10:47 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:47 pptp,ppp,debug,packet <magic 0x10580168>
13:10:47 pptp,ppp,debug,packet <pcomp>
13:10:47 pptp,ppp,debug,packet <accomp>
13:10:47 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x1
13:10:47 pptp,ppp,debug,packet <mru 1450>
13:10:47 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:47 pptp,ppp,debug,packet <auth mschap2>
13:10:47 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:47 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:47 pptp,ppp,debug,packet <pcomp>
13:10:47 pptp,ppp,debug,packet <accomp>
13:10:48 pptp,ppp,debug <0>: LCP timer
13:10:48 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x2
13:10:48 pptp,ppp,debug,packet <mru 1450>
13:10:48 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:48 pptp,ppp,debug,packet <auth mschap2>
13:10:50 pptp,ppp,debug <0>: LCP timer
13:10:50 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x3
13:10:50 pptp,ppp,debug,packet <mru 1450>
13:10:50 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:50 pptp,ppp,debug,packet <auth mschap2>
13:10:50 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:50 pptp,ppp,debug,packet <mru 1400>
13:10:50 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:50 pptp,ppp,debug,packet <magic 0x10580168>
13:10:50 pptp,ppp,debug,packet <pcomp>
13:10:50 pptp,ppp,debug,packet <accomp>
13:10:50 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:50 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:50 pptp,ppp,debug,packet <pcomp>
13:10:50 pptp,ppp,debug,packet <accomp>

13:10:52 pptp,ppp,debug <0>: LCP timer
13:10:52 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x4
13:10:52 pptp,ppp,debug,packet <mru 1450>
13:10:52 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:52 pptp,ppp,debug,packet <auth mschap2>
13:10:53 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:53 pptp,ppp,debug,packet <mru 1400>
13:10:53 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:53 pptp,ppp,debug,packet <magic 0x10580168>
13:10:53 pptp,ppp,debug,packet <pcomp>
13:10:53 pptp,ppp,debug,packet <accomp>
13:10:53 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:53 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:53 pptp,ppp,debug,packet <pcomp>
13:10:53 pptp,ppp,debug,packet <accomp>
13:10:56 pptp,ppp,debug <0>: LCP timer
13:10:56 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x5
13:10:56 pptp,ppp,debug,packet <mru 1450>
13:10:56 pptp,ppp,debug,packet <magic 0xfd4586e>
13:10:56 pptp,ppp,debug,packet <auth mschap2>
13:10:56 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:56 pptp,ppp,debug,packet <mru 1400>
13:10:56 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:56 pptp,ppp,debug,packet <magic 0x10580168>
13:10:56 pptp,ppp,debug,packet <pcomp>
13:10:56 pptp,ppp,debug,packet <accomp>
13:10:56 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:56 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:56 pptp,ppp,debug,packet <pcomp>
13:10:56 pptp,ppp,debug,packet <accomp>
13:10:59 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:10:59 pptp,ppp,debug,packet <mru 1400>
13:10:59 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:59 pptp,ppp,debug,packet <magic 0x10580168>
13:10:59 pptp,ppp,debug,packet <pcomp>
13:10:59 pptp,ppp,debug,packet <accomp>
13:10:59 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:10:59 pptp,ppp,debug,packet <asyncmap 0x0>
13:10:59 pptp,ppp,debug,packet <pcomp>
13:10:59 pptp,ppp,debug,packet <accomp>
13:11:01 pptp,ppp,debug <0>: LCP timer
13:11:01 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x6
13:11:01 pptp,ppp,debug,packet <mru 1450>
13:11:01 pptp,ppp,debug,packet <magic 0xfd4586e>
13:11:01 pptp,ppp,debug,packet <auth mschap2>
13:11:02 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:02 pptp,ppp,debug,packet <mru 1400>
13:11:02 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:02 pptp,ppp,debug,packet <magic 0x10580168>
13:11:02 pptp,ppp,debug,packet <pcomp>
13:11:02 pptp,ppp,debug,packet <accomp>
13:11:02 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:02 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:02 pptp,ppp,debug,packet <pcomp>
13:11:02 pptp,ppp,debug,packet <accomp>

13:11:05 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:05 pptp,ppp,debug,packet <mru 1400>
13:11:05 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:05 pptp,ppp,debug,packet <magic 0x10580168>
13:11:05 pptp,ppp,debug,packet <pcomp>
13:11:05 pptp,ppp,debug,packet <accomp>
13:11:05 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:05 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:05 pptp,ppp,debug,packet <pcomp>
13:11:05 pptp,ppp,debug,packet <accomp>
13:11:08 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:08 pptp,ppp,debug,packet <mru 1400>
13:11:08 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:08 pptp,ppp,debug,packet <magic 0x10580168>
13:11:08 pptp,ppp,debug,packet <pcomp>
13:11:08 pptp,ppp,debug,packet <accomp>
13:11:08 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:08 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:08 pptp,ppp,debug,packet <pcomp>
13:11:08 pptp,ppp,debug,packet <accomp>
13:11:09 pptp,ppp,debug <0>: LCP timer
13:11:09 pptp,ppp,debug,packet <0>: sent LCP ConfReq id=0x7
13:11:09 pptp,ppp,debug,packet <mru 1450>
13:11:09 pptp,ppp,debug,packet <magic 0xfd4586e>
13:11:09 pptp,ppp,debug,packet <auth mschap2>
13:11:11 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:11 pptp,ppp,debug,packet <mru 1400>
13:11:11 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:11 pptp,ppp,debug,packet <magic 0x10580168>
13:11:11 pptp,ppp,debug,packet <pcomp>
13:11:11 pptp,ppp,debug,packet <accomp>
13:11:11 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:11 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:11 pptp,ppp,debug,packet <pcomp>
13:11:11 pptp,ppp,debug,packet <accomp>
13:11:14 pptp,ppp,debug,packet <0>: rcvd LCP ConfReq id=0x1
13:11:14 pptp,ppp,debug,packet <mru 1400>
13:11:14 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:14 pptp,ppp,debug,packet <magic 0x10580168>
13:11:14 pptp,ppp,debug,packet <pcomp>
13:11:14 pptp,ppp,debug,packet <accomp>
13:11:14 pptp,ppp,debug,packet <0>: sent LCP ConfRej id=0x1
13:11:14 pptp,ppp,debug,packet <asyncmap 0x0>
13:11:14 pptp,ppp,debug,packet <pcomp>
13:11:14 pptp,ppp,debug,packet <accomp>
13:11:17 pptp,ppp,debug <0>: LCP lowerdown
13:11:17 pptp,ppp,debug <0>: LCP lowerdown
13:11:17 pptp,ppp,debug <0>: LCP down event in starting state
13
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 1:29 pm

Are you trying to connect via l2tp a windows device? If I recall it correctly, windows does not support l2tp without ipsec.
 
ghostman
just joined
Topic Author
Posts: 11
Joined: Wed Feb 18, 2015 12:48 am

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 1:33 pm

Are you trying to connect via l2tp a windows device? If I recall it correctly, windows does not support l2tp without ipsec.
No with Android but as i know windows support l2tp
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 2:04 pm

as i know windows support l2tp
Windows does support l2tp, but only with ipsec. You have to change something in windows register to be able to connect to a l2tp server without ipsec. Maybe the same goes for android.
 
User avatar
cdiedrich
Forum Veteran
Forum Veteran
Posts: 997
Joined: Thu Feb 13, 2014 2:03 pm
Location: Basel, Switzerland // Bremen, Germany
Contact:

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 2:44 pm

Just not to get confused:
The logs you're posting are showing pptp debug packets, not l2tp.

And, is there a reason why you don't specify a remote-address (ideally from a seperate pool) and have encryption explicitly disabled in the used profile?

-Chris
 
ghostman
just joined
Topic Author
Posts: 11
Joined: Wed Feb 18, 2015 12:48 am

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 3:43 pm

Just not to get confused:
The logs you're posting are showing pptp debug packets, not l2tp.

And, is there a reason why you don't specify a remote-address (ideally from a seperate pool) and have encryption explicitly disabled in the used profile?

-Chris
i test with remote address and with encryption and the last i test to downgrade to 6.35.4 becuse i have another router work fine with 3.35.4 but with another kind the work router with the same config and 3.35.4 but its rb951ui-h2nd and the other type hap lite
 
User avatar
cdiedrich
Forum Veteran
Forum Veteran
Posts: 997
Joined: Thu Feb 13, 2014 2:03 pm
Location: Basel, Switzerland // Bremen, Germany
Contact:

Re: PPTP And L2tP strange case

Thu Nov 10, 2016 3:50 pm

Luckily, the model doesn't matter in this case.
It can't be the same config - one is working, the other isn't.

post an export of both routers and we can compare.
-Chris
 
User avatar
Valdis
just joined
Posts: 21
Joined: Thu Apr 16, 2009 1:48 pm
Location: Riga
Contact:

Re: PPTP And L2tP strange case

Fri Aug 30, 2019 3:06 pm

Hello.
I have similar situation, but I cant understand why one windows machine can log with same VPN username but other machine can not connect?
Log from MikroTik is at attachment.
What could be wrong at Windows machine? Both machines are Win10 with up to date updates...
You do not have the required permissions to view the files attached to this post.
 
User avatar
Valdis
just joined
Posts: 21
Joined: Thu Apr 16, 2009 1:48 pm
Location: Riga
Contact:

Re: PPTP And L2tP strange case

Fri Sep 06, 2019 3:07 pm

Hello.
I have similar situation, but I cant understand why one windows machine can log with same VPN username but other machine can not connect?
Log from MikroTik is at attachment.
What could be wrong at Windows machine? Both machines are Win10 with up to date updates...
Hello again, following tutorial solved the problem with MSchap2 on windows machine:
https://superuser.com/questions/1298513 ... ine-on-ios

Who is online

Users browsing this forum: AshuGite, etm7469, garyjduk, sindy, vingjfg and 21 guests