我正在尝试使用 PPP 在 Win2008R2 PPTP 服务器和 Debian 8 客户端之间建立链接。
连接到 VPN 服务器时,身份验证成功。身份验证后,正在协商 MPPE 设置,但在发送第一个 ConfReq 消息后,服务器发回 TermReq 消息,因此连接断开。
我花了几个小时在 Google 上搜索并添加或更改选项,但找不到任何解决方案 :(
配置:
同行/办公室
pty "pptp <hostname> --nolaunchpppd"
lock
noauth
nobsdcomp
nodeflate
name <username as specified in secrets>
remotename omoffice
ipparam omoffice
file /etc/ppp/omoffice_options.pptp
omoffice/选项.pptp
lock
noauth
nobsdcomp
nodeflate
refuse-pap
refuse-eap
refuse-mschap
refuse-chap
require-mschap-v2
require-mppe-128
require-mppe
lcp-echo-failure 5
lcp-echo-interval 60
ipcp-accept-local
ipcp-accept-remote
noipdefault
mtu 1200
usepeerdns
调试日志
root@NWSS001:/etc/ppp# pppd call omoffice debug dump logfd 2 nodetach noauth
pppd options in effect:
debug # (from command line)
nodetach # (from command line)
logfd 2 # (from command line)
dump # (from command line)
noauth # (from command line)
refuse-pap # (from /etc/ppp/omoffice_options.pptp)
refuse-chap # (from /etc/ppp/omoffice_options.pptp)
refuse-mschap # (from /etc/ppp/omoffice_options.pptp)
refuse-eap # (from /etc/ppp/omoffice_options.pptp)
name <username> # (from /etc/ppp/peers/omoffice)
remotename omoffice # (from /etc/ppp/peers/omoffice)
# (from /etc/ppp/omoffice_options.pptp)
pty pptp <hostname> --nolaunchpppd # (from /etc/ppp/peers/omoffice)
crtscts # (from /etc/ppp/options)
# (from /etc/ppp/options)
asyncmap 0 # (from /etc/ppp/options)
mtu 1200 # (from /etc/ppp/omoffice_options.pptp)
lcp-echo-failure 5 # (from /etc/ppp/omoffice_options.pptp)
lcp-echo-interval 60 # (from /etc/ppp/omoffice_options.pptp)
hide-password # (from /etc/ppp/options)
ipcp-accept-local # (from /etc/ppp/omoffice_options.pptp)
ipcp-accept-remote # (from /etc/ppp/omoffice_options.pptp)
ipparam omoffice # (from /etc/ppp/peers/omoffice)
noipdefault # (from /etc/ppp/omoffice_options.pptp)
usepeerdns # (from /etc/ppp/omoffice_options.pptp)
nobsdcomp # (from /etc/ppp/omoffice_options.pptp)
nodeflate # (from /etc/ppp/omoffice_options.pptp)
require-mppe # (from /etc/ppp/omoffice_options.pptp)
require-mppe-128 # (from /etc/ppp/omoffice_options.pptp)
noipx # (from /etc/ppp/options)
using channel 17
Using interface ppp0
Connect: ppp0 <--> /dev/pts/1
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xec7eb53a> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x0 <mru 1400> <auth eap> <magic 0x10494137> <pcomp> <accomp> <callback CBCP> <mrru 1614> <endpoint [local:d4.6e.95.0f.3c.fa.4f.c4.91.60.3c.04.7f.a8.9a.ee.00.00.00.00]>]
sent [LCP ConfRej id=0x0 <callback CBCP> <mrru 1614>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0xec7eb53a> <pcomp> <accomp>]
rcvd [LCP ConfReq id=0x1 <mru 1400> <auth eap> <magic 0x10494137> <pcomp> <accomp> <endpoint [local:d4.6e.95.0f.3c.fa.4f.c4.91.60.3c.04.7f.a8.9a.ee.00.00.00.00]>]
sent [LCP ConfNak id=0x1 <auth chap MS-v2>]
rcvd [LCP ConfReq id=0x2 <mru 1400> <auth chap MS-v2> <magic 0x10494137> <pcomp> <accomp> <endpoint [local:d4.6e.95.0f.3c.fa.4f.c4.91.60.3c.04.7f.a8.9a.ee.00.00.00.00]>]
sent [LCP ConfAck id=0x2 <mru 1400> <auth chap MS-v2> <magic 0x10494137> <pcomp> <accomp> <endpoint [local:d4.6e.95.0f.3c.fa.4f.c4.91.60.3c.04.7f.a8.9a.ee.00.00.00.00]>]
sent [LCP EchoReq id=0x0 magic=0xec7eb53a]
rcvd [CHAP Challenge id=0x0 <df68f4d085f927160c84928c8864604c>, name = "SBS2011"]
added response cache entry 0
sent [CHAP Response id=0x0 <<redacted>>, name = "<redacted username>"]
rcvd [LCP EchoRep id=0x0 magic=0x10494137]
rcvd [CHAP Success id=0x0 "S=1017EFA7032050D6746BFF44A739A6E7B2F5D824"]
response found in cache (entry 0)
CHAP authentication succeeded
sent [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]
rcvd [LCP TermReq id=0x4 10 49 41 37 00 3c cd 74 00 00 08 9a]
LCP terminated by peer (^PIA7^@<M-Mt^@^@^HM-^Z)
sent [LCP TermAck id=0x4]
答案1
找到问题了。
如果您在用户名中的 chap-secrets 文件中指定域,则身份验证部分将会成功,但由于某种原因,您会得到乱码文本。
例如,如果您使用:
你会得到乱码文本,使用:
富
作为您的用户名