PPTP VPN connection

KFoltz · 04-06-2020, 08:39 PM

I am running OpenSuse Leap 15.1 with KDE. I am trying to establish a PPTP VPN connection to my office with NetworkManager. I am not running a firewall. The logs show an initial client connection but there is no attempt to start CHAP authentication and eventually the connection times out.

Code:

Apr 06 20:10:55 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_rep:pptp_ctrl.c:258]: Sent control packet type is 1 'Start-Control-Connection-Request'
Apr 06 20:10:55 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_disp:pptp_ctrl.c:758]: Received Start Control Connection Reply
Apr 06 20:10:55 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_disp:pptp_ctrl.c:792]: Client connection established.
Apr 06 20:10:56 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_rep:pptp_ctrl.c:258]: Sent control packet type is 7 'Outgoing-Call-Request'
Apr 06 20:10:56 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_disp:pptp_ctrl.c:877]: Received Outgoing Call Reply.
Apr 06 20:10:56 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_disp:pptp_ctrl.c:916]: Outgoing call established (call ID 0, peer's call ID 61721).
Apr 06 20:11:32 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_disp:pptp_ctrl.c:931]: Received Call Clear Request.
Apr 06 20:11:55 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[logecho:pptp_ctrl.c:696]: Echo Request received.
Apr 06 20:11:55 linux-nogg.suse pptp[11496]: nm-pptp-service-11478 log[ctrlp_rep:pptp_ctrl.c:258]: Sent control packet type is 6 'Echo-Reply'
Apr 06 20:11:55 linux-nogg.suse nm-pptp-service[11478]: Connect timer expired, disconnecting.
Apr 06 20:11:55 linux-nogg.suse pppd[11482]: Terminating on signal 15
Apr 06 20:11:55 linux-nogg.suse NetworkManager[5564]: Terminating on signal 15
Apr 06 20:11:55 linux-nogg.suse NetworkManager[5564]: Modem hangup
Apr 06 20:11:55 linux-nogg.suse NetworkManager[5564]: Connection terminated.

Can anyone suggest how to fix this?

ferrari · 04-07-2020, 05:41 PM

I'm using openSUSE 15.1 and I can't replicate this issue you're describing. For me it is working.

FWIW, a similar thread reported here....

https://forums.opensuse.org/showthre...VPN-connection

ferrari · 04-07-2020, 06:09 PM

How is your PPTP VPN server implemented at your office? Appliance? Did you configure it, or IT-managed?

ferrari · 04-07-2020, 06:17 PM

Another word of caution - some cellular-based-ISPS actively block PPTP connectivity.

KFoltz · 04-07-2020, 06:45 PM

The server is configured by a different section of the IT department I work in. All I really know is the connection works fine from Windows.

ferrari · 04-07-2020, 06:48 PM

Quote:

All I really know is the connection works fine from Windows.

Ok,that's good comparative info. I assume this is also within your local network environment?

ferrari · 04-07-2020, 06:52 PM

Can you confirm 'NetworkManager' and 'NetworkManager-pptp' package versions (as per the openSUSE thread)?

ferrari · 04-07-2020, 06:59 PM

I have my VPN connections defined as 'system-connections' (using KDE 'All users may connect to this network'), and credentials stored in the root-owned '/etc/NetworkManager/system-connections/' connection file. How does yours compare?

For reference...

Code:

[connection]
id=VPN (PPTP)
uuid=f052500e-251a-4667-9935-160e4bb69c68
type=vpn
permissions=user:xxxx:;

[vpn]
gateway=xxx.xxx.xxx.xxx
password-flags=0
user=xxxx
service-type=org.freedesktop.NetworkManager.pptp

[vpn-secrets]
password=xxxxx

[ipv4]
dns-search=
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns-search=
method=auto

KFoltz · 04-08-2020, 08:08 PM

Quote:

Originally Posted by ferrari

Ok,that's good comparative info. I assume this is also within your local network environment?

Yes, both are connected to the same router.

KFoltz · 04-08-2020, 08:17 PM

Please let me delete this mistake.

KFoltz · 04-08-2020, 08:49 PM

Quote:

Originally Posted by ferrari

I have my VPN connections defined as 'system-connections' (using KDE 'All users may connect to this network'), and credentials stored in the root-owned '/etc/NetworkManager/system-connections/' connection file. How does yours compare?

For reference...

Code:

[connection]
id=VPN (PPTP)
uuid=f052500e-251a-4667-9935-160e4bb69c68
type=vpn
permissions=user:xxxx:;

[vpn]
gateway=xxx.xxx.xxx.xxx
password-flags=0
user=xxxx
service-type=org.freedesktop.NetworkManager.pptp

[vpn-secrets]
password=xxxxx

[ipv4]
dns-search=
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns-search=
method=auto

Saw one important difference between your configuration and mine in the permission parameter in the [connection] setting. Changed mine to match yours and it made a small difference. The log now includes a conn check to open.suse.org that wasn't present before.

My configuration file is at /ect/NetworkManager/connections/OESC-VPN.

Code:

[connection]
id=OESC_VPN
uuid=3a5f3e44-d233-415c-992b-8daf85009575
type=vpn
autoconnect=false
permissions=user:xxxx:;

[vpn]
gateway=204.xx.xxx.xxx
lcp-echo-failure=5
lcp-echo-interval=30
no-vj-comp=yes
nobsdcomp=yes
nodeflate=yes
password-flags=0
refuse-chap=yes
refuse-eap=yes
refuse-pap=yes
require-mppe=yes
user=xxxx
service-type=org.freedesktop.NetworkManager.pptp

[vpn-secrets]
password=xxxxxxxx

[ipv4]
dns-search=
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns-search=
method=auto

[proxy]

The log:

Code:

Apr 08 20:30:12 linux-nogg.suse pptp[27149]: nm-pptp-service-27131 log[ctrlp_rep:pptp_ctrl.c:258]: Sent control packet type is 1 'Start-Control-Connection-Request'
Apr 08 20:30:12 linux-nogg.suse pptp[27149]: nm-pptp-service-27131 log[ctrlp_disp:pptp_ctrl.c:758]: Received Start Control Connection Reply
Apr 08 20:30:12 linux-nogg.suse pptp[27149]: nm-pptp-service-27131 log[ctrlp_disp:pptp_ctrl.c:792]: Client connection established.
Apr 08 20:30:13 linux-nogg.suse pptp[27149]: nm-pptp-service-27131 log[ctrlp_rep:pptp_ctrl.c:258]: Sent control packet type is 7 'Outgoing-Call-Request'
Apr 08 20:30:13 linux-nogg.suse pptp[27149]: nm-pptp-service-27131 log[ctrlp_disp:pptp_ctrl.c:877]: Received Outgoing Call Reply.
Apr 08 20:30:13 linux-nogg.suse pptp[27149]: nm-pptp-service-27131 log[ctrlp_disp:pptp_ctrl.c:916]: Outgoing call established (call ID 0, peer's call ID 64711).
Apr 08 20:30:43 linux-nogg.suse NetworkManager[5564]: <debug> [1586395843.6633] connectivity: (eth0,IPv6,257) start request to 'http://conncheck.opensuse.org' (systemd-resolved not available)
Apr 08 20:30:43 linux-nogg.suse NetworkManager[5564]: <debug> [1586395843.6637] connectivity: (eth0,IPv6,257) check completed: LIMITED; check failed: (7) Couldn't connect to server
Apr 08 20:30:49 linux-nogg.suse pptp[27149]: nm-pptp-service-27131 log[ctrlp_disp:pptp_ctrl.c:931]: Received Call Clear Request.
Apr 08 20:31:12 linux-nogg.suse nm-pptp-service[27131]: Connect timer expired, disconnecting.
Apr 08 20:31:12 linux-nogg.suse NetworkManager[5564]: <warn>  [1586395872.1640] vpn-connection[0x56333d3c4320,3a5f3e44-d233-415c-992b-8daf85009575,"OESC_VPN",0]: VPN connection: connect timeout exceeded.

ferrari · 04-08-2020, 08:59 PM

Yeah, that's not needed, and serves only as a basic means to see if internet connectivity is present.

ferrari · 04-08-2020, 09:05 PM

I note, that you actively refuse PAP authentication in your configuration (and that generally is a good idea), but it also depends on what the server is configured to use. Maybe the server requires a different authentication mechanism than CHAP (or it's variants)?

KFoltz · 04-08-2020, 09:11 PM

Quote:

Originally Posted by ferrari

Yeah, that's not needed, and serves only as a basic means to see if internet connectivity is present.

I have a TorGuard VPN account. I am not using it while trying to get this connection to work. Is there any chance it has made a network change that might cause problems?

ferrari · 04-08-2020, 09:19 PM

No, if it's not active I don't see how it would impact here. For completeness, what does your current routing table look like?

Code:

ip r