Forums

Resolved
0 votes
Hello,

I am unable to connect devices via the vpn server (pptp) I have try windows 10, 8, android without succes.

Incoming connection 1723 open in the firewall.
On android I have only failure message, on windows it's "error login or password"
Off course I have verify password, bad typping, try differents accounts, create special account for testing... always "error login or password".
The accounts have off course autorisation to utilise pptp service...

I don't understand where is the problem...
Wednesday, November 11 2015, 12:27 PM
Share this post:
Responses (8)
  • Accepted Answer

    Wednesday, November 11 2015, 01:02 PM - #Permalink
    Resolved
    0 votes
    Have you just opened incoming 1723 manually? If so, it won't work as you also need to open up for protocol 47 (not port 47). It is best just to open up the Standard Service PPTP as it does it all for you.

    [edit]
    BTW even Microsoft, creators of PPTP recommend you don't use it due to security issues. OpenVPN is probably a better way to go or a modern implementation of IPsec using ikev2. OpenVPN is easier to set up in ClearOS. IPsec would need to be set up manually as none of the interfaces cover the roadwarrior set up.
    [/edit]
    The reply is currently minimized Show
  • Accepted Answer

    Wednesday, November 11 2015, 01:30 PM - #Permalink
    Resolved
    0 votes
    Hello,

    The service pptp has himself configured the incoming firewall, port 1723 and I suppose protocol 47 (GRE+PPTP) is open.

    I can't use openvpn, I know it's better... but I have a fleet of 100 mobiles devices that use integrated pptp connection... (no time to reconfigure all and I can't ask to finals users to do it themself... they don't understand what I talk, it's only school teatchers :D ) I always use until now Synology pptp server or Draytek pptp server without problem.

    I test a clearOS as a possible alternative in the futur...
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, November 12 2015, 12:20 AM - #Permalink
    Resolved
    0 votes
    Hi Didier,

    Take a look in the /var/log/messages and /var/log/secure logs for clues. On another note, there's really no excuse for not having ClearOS L2TP ready.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, November 12 2015, 10:19 AM - #Permalink
    Resolved
    0 votes
    l2TP/IPsec has been pretty much obsoleted now by IPsec with ikev2. I believe most up to date O/S's now support this including iOS9+.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, November 12 2015, 03:50 PM - #Permalink
    Resolved
    0 votes
    Nick Howitt wrote:

    l2TP/IPsec has been pretty much obsoleted now by IPsec with ikev2. I believe most up to date O/S's now support this including iOS9+.


    Interesting. Is IPsec with ikev2 road warrior friendly?
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, November 12 2015, 04:38 PM - #Permalink
    Resolved
    0 votes
    Hello,

    I have test (for my personnal use) OpenVPN, and after the creation of the certificates... pptp is working now...
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, November 12 2015, 05:54 PM - #Permalink
    Resolved
    0 votes
    Hi Peter,
    Have a look at this from Libreswan. I don't know how much is applicable to Openswan. As you can see from the config, it is Libreswan itself which gives the remote device an IP address rather than handing off to something like xl2tpd.

    It is probably a bit premature to say l2tp is redundant as the O/S has to be pretty much up to date. I'm sure I read somewhere it was iOS9 or iOS9.1 which was the last major OS to come on board. I am a bit concerned that I don't see Android mentioned but this article does mention it (along with Strongswan configs).

    Nick
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, November 17 2015, 04:17 PM - #Permalink
    Resolved
    0 votes
    Many thanks Nick. I added a tracker item to make sure this gets some attention during our usual roadmap reviews.
    The reply is currently minimized Show
Your Reply