Page 1 of 1
IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Thu Oct 10, 2019 2:04 pm
by Mrdude
Good day.
In RB2011 in the PPP profile I specify for L2TP I specify the Use Encryption parameter. But the connection is not encrypted, for what reason can this happen?
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 3:52 pm
by Zacharias
How can you tell its not encrypted?
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 4:07 pm
by Mrdude
How can you tell its not encrypted?
PPP - Active Conections - Column Encoding is empty when i disable IPsec.But there should be MPPE128 stateless.
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 4:10 pm
by r00t
Use packet sniffer to sniff start of the PPP connection, then load it into Wireshark. There you will see what protocols and features are negotiated and how (if it's turning of the MPPE128, you will see why, if it's client or server that does that).
But if your PPP profile requires encryption, link should be either encrypted or not connected at all (fails to connect).
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 5:22 pm
by Zacharias
Enable to your client to require encryption and see if it connects.. if not, then yes it does not use encryption...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 5:40 pm
by Mrdude
Enable to your client to require encryption and see if it connects.. if not, then yes it does not use encryption...
It is activated, why RB2011 do not use it?
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 6:35 pm
by Zacharias
If its activated and you can connect then obviously uses it...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 9:16 pm
by Mrdude
If its activated and you can connect then obviously uses it...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 9:22 pm
by r00t
That looks like a bug, that field should say something.
Also if you switch it to Required, it will not connect unless encrypted.
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 13, 2019 9:35 pm
by Zacharias
R00t is right.. is your client configured to connect only if encryption is used?
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 9:29 am
by Mrdude
R00t is right.. is your client configured to connect only if encryption is used?
Please explain what it means "right"? Its settings indicate the use of encryption.
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 11:19 am
by Zacharias
As i said in my previous post, if the client is configured to only connect if there is encryption, then since you can connect the encyprion is used...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 11:35 am
by Mrdude
As i said in my previous post, if the client is configured to only connect if there is encryption, then since you can connect the encyprion is used...
It is obvious. But, how do I find out why encryption is not turned on if its use is indicated in the profile?
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 11:38 am
by Zacharias
Are you sure your client device connects only if there is encryption?
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 11:41 am
by Mrdude
Are you sure your client device connects only if there is encryption?
Yes, without encryption, disconnection occurs.
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 12:10 pm
by Zacharias
Then maybe you should contact mikrotik support...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 9:28 pm
by McSee
its use is indicated in the profile?
Set it to
required.
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 11:10 pm
by Mrdude
its use is indicated in the profile?
Set it to
required.
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Sun Oct 20, 2019 11:58 pm
by Zacharias
Mrdude go to the active connections tab, double click the connected client and see if the encryption is mentioned there...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Mon Oct 21, 2019 12:16 am
by Mrdude
Mrdude go to the active connections tab, double click the connected client and see if the encryption is mentioned there...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Mon Oct 21, 2019 12:17 am
by Zacharias
So there it is...
Re: IN v6.45.6 L2TP not use MPPE 128 ?
Posted: Mon Oct 21, 2019 12:23 am
by Mrdude
So there it is...
This customer. which can connect, with mandatory encryption. Kopazany at first can not.
Re: IN v6.45.6 L2TP not use MPPE 128 ? [SOLVED]
Posted: Thu Oct 24, 2019 10:10 pm
by Mrdude
Thanks to everyone, the issue is resolved.