[Prijker]

Back in Jaguar 10.2.8, i could use Internet Connect to make a VPN connection to my University VPN server, which runs Windows 2000.
Since i updated to Panther, i can't connect to VPN anymore, and i get CHAP authentication failures.
What does CHAP mean? And how can i have VPN back?

Here's part of my Internet Connect log file:

Tue Nov 4 22:02:03 2003 : PPTP connecting to server 'xxx.xxxxx.xxx' ...
Tue Nov 4 22:02:05 2003 : PPTP connection established.
Tue Nov 4 22:02:06 2003 : Using interface ppp0
Tue Nov 4 22:02:06 2003 : Connect: ppp0 <--> socket[34:17]
Tue Nov 4 22:02:06 2003 : Remote message: Unknown authentication failure: E=691 R=1 C=C78FA5C216142EF1E3A2EC5E67A3371E V=3
Tue Nov 4 22:02:06 2003 : CHAP authentication failed
Tue Nov 4 22:02:06 2003 : Connection terminated.
Tue Nov 4 22:02:06 2003 : PPTP disconnecting...
Tue Nov 4 22:02:06 2003 : PPTP disconnected

Thanks for your help

vic

[gorickey]

Chap = Challenge Handshake Authentication Protocol

Not sure if the method of authentication [Password Authenticationn Protocol (PAP), or Extensible Authentication Protocol (EAP)] was used back in Jaguar or not...

I know most running VPN prefer CHAP and that it requires the latest security patch for Windows 2000 Server in order to authenticate correctly...maybe that's a problem?

Other then that, not a clue....sorry!

[Brass]

Are you using Panther's built in VPN, or some third party VPN tool?

When I asked our network admin which of Panther's VPN settings to use, he said that none would work, and I would need to use Cisco's VPN tool (or some other 3rd party product).

So if your using Panther's, you might want to try another product. Otherwise, try the one built into Panther (in the Internet Connect application).

[C.J. Moof]

I have similar problems w/ Internet connect post-Panther upgrade. I used to connetct to the Netopia R 9100 at the office with no problems under Jag......

[motti]

Originally posted by Brass:
When I asked our network admin which of Panther's VPN settings to use, he said that none would work, and I would need to use Cisco's VPN tool (or some other 3rd party product).

The admin at our school gave us cisco's tool because the built-in vpn doesn't work (yet).

[jasong]

C.J., what problems are you having, I have had better reliability connecting to our R9100 under Panther. I think Panther requires MPPE encryption to be used on the router, so check that setting.

-- Jason

[LeeG]

Anyone hear of fix/cause for this?

I could connect fine to work from jaguar, but no go under panther...I am using the built-in VPN client in jag and pather.

Thanks in advance-

Lee

[C.J. Moof]

Originally posted by jasong:
C.J., what problems are you having, I have had better reliability connecting to our R9100 under Panther. I think Panther requires MPPE encryption to be used on the router, so check that setting.

-- Jason

Oh, just a little problem- it doesn't work at all.

When you used to hit connect, stand back and watch the authentication go on, and see connected, now it just bounces off with some type of error. Been so long since I tried that I couldn't tell you what it says.... I've managed to live without it by SSHing into my Xserve and going from that shell account to do the things I need to inside the firewall.

[Twilly Spree]

I've seen this problem as well with Panther. A VPN connection fails authentication with Panther VPN client but works with Jaguar VPN client. I've heard of no fix.

[C.J. Moof]

This is as close as I can get:

Wed Dec 17 13:49:53 2003 : PPTP connection established.
Wed Dec 17 13:49:53 2003 : Using interface ppp1
Wed Dec 17 13:49:53 2003 : Connect: ppp1 <--> socket[34:17]
Wed Dec 17 13:49:57 2003 : MPPE 128-bit stateless compression enabled
Wed Dec 17 13:49:57 2003 : acsp resetci called
Wed Dec 17 13:49:59 2003 : local IP address 192.168.6.24
Wed Dec 17 13:49:59 2003 : remote IP address 192.168.6.1
Wed Dec 17 13:49:59 2003 : primary DNS address 192.168.6.11
Wed Dec 17 13:49:59 2003 : secondary DNS address 64.73.0.21
Wed Dec 17 13:49:59 2003 : IPCP terminated by peer
Wed Dec 17 13:50:00 2003 : LCP terminated by peer
Wed Dec 17 13:50:00 2003 : Connection terminated.
Wed Dec 17 13:50:00 2003 : Connect time 0.1 minutes.
Wed Dec 17 13:50:00 2003 : Sent 0 bytes, received 0 bytes.
Wed Dec 17 13:50:01 2003 : PPTP disconnecting...
Wed Dec 17 13:50:01 2003 : PPTP disconnected

--

So it gets there, authenticates, and instantly gets booted. Beats me why.