Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

RV110W drops PPTP connections from a Windows client (MS CHAP v2 and MPPE)

This might be a tough problem to diagnose. I am trying to setup an RV100W for an office gateway with VPN access using PPTP. The office is located in another state, so I'm trying to do a "dry run" from home by setting up the RV110W on the local network. That is, my home network is 192.168.0.0 and I have assigned the RV110W a static IP address of 192.168.0.120 on its WAN side and a DHCP NAT internal network of 192.168.1.0. Its LAN IP is 192.168.1.2 (because of legacy limitations, the 192.168.1.1 address will be reserved for another host on the actual office network) and I set up the PPTP server on 192.168.1.3 and clients in the 192.168.1.20 to 24 range. I have enabled MPPE encryption and NetBIOS over VPN (rather important to have).

At first, I couldn't login at all. I had an underscore (_) in the user names (of which I have setup all five) and after I changed that, I was able to connect from a Windows 7 x64 host on the home LAN (192.168.0.132). I don't know if that was the problem as I got disconnected and reconnecting was a hit-or-miss - sometimes it would work, sometimes - it wouldn't. Below is the log from the session, showing the reasons for the disconnection. When I try to connect and it gets rejected, otherwise, the reason is the same: protocol not available.

But, first - here's the kicker. I had the exact same experience earlier with a DD-WRT router. I thought the problem lied with the amateurish firmware and that's why I decided to get the Cisco, but it seems like this might not be the problem, after all. Here is that discussion for full details: http://www.dd-wrt.com/phpBB2/viewtopic.php?t=149951&highlight= (to see all of the attached images and logs, you'll need an account). Briefly, with the same setup, I can establish a stable VPN connection from four Windows XP clients and one Windows 7 client, but I get the problems with two other Windows 7 clients. The Win7 clients that give me trouble can connect just fine to other PPTP VPN servers (with the built-in Microsoft PPTP client) and all three Win7 machines are clones of each other (only the hardware is different). No software firewalls, anti-virus/malware, user-permission limitations (e.g., UAC), or anything that could hamper the connections, are present on either machine.

I don't see how the fact that the RV110W is on a LAN and not exposed to the Internet on its WAN side could cause any trouble, but even then - why some clients work fine and others - not? I would appreciate any help with this issue.

Kamen

This is the log from the session, showing the connection of the VPN client and then, not two minutes later, the disconnection.

2012-02-22 21:44:40 RV110W daemon.info pptpd[4582]: CTRL: Client 192.168.0.132 control connection started

2012-02-22 21:44:40 RV110W daemon.info pptpd[4582]: CTRL: Starting call (launching pppd, opening GRE)

2012-02-22 21:44:40 RV110W daemon.notice pppd[4583]: pppd 2.4.5 started by (unknown), uid 0

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: using channel 2

2012-02-22 21:44:40 RV110W daemon.info pppd[4583]: Using interface ppp0

2012-02-22 21:44:40 RV110W daemon.notice pppd[4583]: Connect: ppp0 <--> /dev/pts/0

2012-02-22 21:44:40 RV110W daemon.warning pppd[4583]: Warning - secret file /tmp/ppp/pap-secrets has world and/or group access

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [LCP ConfReq id=0x1 <auth chap MS-v2> <magic 0x4269dad6>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x5eec49d5> <pcomp> <accomp> <callback CBCP>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [LCP ConfRej id=0x0 <pcomp> <accomp> <callback CBCP>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [LCP ConfAck id=0x1 <auth chap MS-v2> <magic 0x4269dad6>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x5eec49d5>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [LCP ConfAck id=0x1 <mru 1400> <magic 0x5eec49d5>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [LCP EchoReq id=0x0 magic=0x4269dad6]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [CHAP Challenge id=0xfb <454ee20916a665999fdaa66778e1c4c5>, name = \"RV110W\"]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [LCP Ident id=0x2 magic=0x5eec49d5 \"MSRASV5.20\"]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [LCP Ident id=0x3 magic=0x5eec49d5 \"MSRAS-0-SOFTWAREONE64\"]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [LCP Ident id=0x4 magic=0x5eec49d5 \"H\\37777777772\\37777777612\\37777777633F\\177\\37777777752J\\37777777640[\\377777776451\\37777777610\\\\Ob\"]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [LCP EchoRep id=0x0 magic=0x5eec49d5]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [CHAP Response id=0xfb <2aeb8dac876cbec7c23036952cfc270c00000000000000006f4cafa17228047ac82f26e47ae69eda8fe8650d5866e44b00>, name = \"sakor001\"]

2012-02-22 21:44:40 RV110W daemon.warning pppd[4583]: Warning - secret file /tmp/ppp/chap-secrets has world and/or group access

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [CHAP Success id=0xfb \"S=ACBA0BE9B8A98DDB757B234A1C69E9508DE169DE M=Access granted\"]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/auth-up started (pid 4587)

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/auth-up finished (pid 4587), status = 0x16

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [CCP ConfReq id=0x5 <mppe +H -M +S -L -D -C>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [CCP ConfAck id=0x5 <mppe +H -M +S -L -D -C>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [IPCP ConfReq id=0x6 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns2 0.0.0.0> <ms-wins 0.0.0.0>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [IPCP TermAck id=0x6]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]

2012-02-22 21:44:40 RV110W daemon.notice pppd[4583]: MPPE 128-bit stateless compression enabled

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: sent [IPCP ConfReq id=0x1 <addr 192.168.1.3>]

2012-02-22 21:44:40 RV110W daemon.debug pppd[4583]: rcvd [IPCP ConfAck id=0x1 <addr 192.168.1.3>]

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: rcvd [IPCP ConfReq id=0x7 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns2 0.0.0.0> <ms-wins 0.0.0.0>]

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: sent [IPCP ConfRej id=0x7 <ms-wins 0.0.0.0> <ms-wins 0.0.0.0>]

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: rcvd [IPCP ConfReq id=0x8 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: sent [IPCP ConfNak id=0x8 <addr 192.168.1.20> <ms-dns1 216.165.129.157> <ms-dns2 216.170.153.146>]

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: rcvd [IPCP ConfReq id=0x9 <addr 192.168.1.20> <ms-dns1 216.165.129.157> <ms-dns2 216.170.153.146>]

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: sent [IPCP ConfAck id=0x9 <addr 192.168.1.20> <ms-dns1 216.165.129.157> <ms-dns2 216.170.153.146>]

2012-02-22 21:44:42 RV110W daemon.notice pppd[4583]: local  IP address 192.168.1.3

2012-02-22 21:44:42 RV110W daemon.notice pppd[4583]: remote IP address 192.168.1.20

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/ip-up started (pid 4661)

2012-02-22 21:44:42 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/ip-up finished (pid 4661), status = 0x0

2012-02-22 21:44:42 RV110W user.debug syslog: Nbsrelay start (pid= 4678)

2012-02-22 21:46:10 RV110W daemon.notice pppd[4583]: Modem hangup

2012-02-22 21:46:10 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/auth-down started (pid 4858)

2012-02-22 21:46:10 RV110W daemon.info pppd[4583]: Connect time 1.5 minutes.

2012-02-22 21:46:10 RV110W daemon.info pppd[4583]: Sent 10404 bytes, received 17264 bytes.

2012-02-22 21:46:10 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/ip-down started (pid 4861)

2012-02-22 21:46:10 RV110W daemon.err pppd[4583]: MPPE disabled

2012-02-22 21:46:10 RV110W daemon.debug pppd[4583]: sent [LCP TermReq id=0x2 \"MPPE disabled\"]

2012-02-22 21:46:10 RV110W daemon.notice pppd[4583]: Connection terminated.

2012-02-22 21:46:10 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/auth-down finished (pid 4858), status = 0x16

2012-02-22 21:46:10 RV110W daemon.debug pppd[4583]: Waiting for 1 child processes...

2012-02-22 21:46:10 RV110W daemon.debug pppd[4583]:   script /tmp/ppp/ip-down, pid 4861

2012-02-22 21:46:10 RV110W daemon.debug pppd[4583]: Script /tmp/ppp/ip-down finished (pid 4861), status = 0x0

2012-02-22 21:46:10 RV110W daemon.info pppd[4583]: Exit.

2012-02-22 21:46:10 RV110W daemon.err pptpd[4582]: GRE: read(fd=11,buffer=449be4,len=8260) from network failed: status = -1 error = Protocol not available

2012-02-22 21:46:10 RV110W daemon.err pptpd[4582]: CTRL: GRE read or PTY write failed (gre,pty)=(11,10)

2012-02-22 21:46:10 RV110W daemon.debug pptpd[4582]: CTRL: Reaping child PPP[4583]

2012-02-22 21:46:10 RV110W daemon.info pptpd[4582]: CTRL: Client 192.168.0.132 control connection finished

Everyone's tags (7)
5 REPLIES
New Member

RV110W drops PPTP connections from a Windows client (MS CHAP v2

Update: things are getting even weirder. In short - it seems to be working now (on the next day) without anything changing. First thing I did was just try another desperate tweak - I disabled the LCP extensions on the Windows client, which I've done before. It connected and stayed that way. Then, I reverted that setting back to exactly how it was before and connected again - no problems: it stayed connected for an hour (before I disconnected so I can connect to the real VPN), I could access a test-PC on the private network (a single machine just for the test) and do different tasks (resolve host names, browse UNC paths, copy files, Remote Desktop to it, etc.)

I hate it when things happen, for which there is no explanation. I couldn't be confident sending this to the main office to replace the existing router (hardware) and VPN server (implemented in software on a Windows 2003 server). Any thoughts?

Kamen

P.S. I'm attaching the logs from the successful session in case someone wants to compare them, but they seems quite identical (some different ConfAck / ConfNak  sequences, but that doesn't seem to make much difference).

2012-02-23 10:01:26 RV110W daemon.info pptpd[944]: CTRL: Client 192.168.0.132 control connection started

2012-02-23 10:01:26 RV110W daemon.info pptpd[944]: CTRL: Starting call (launching pppd, opening GRE)

2012-02-23 10:01:26 RV110W daemon.notice pppd[946]: pppd 2.4.5 started by (unknown), uid 0

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: using channel 5

2012-02-23 10:01:26 RV110W daemon.info pppd[946]: Using interface ppp0

2012-02-23 10:01:26 RV110W daemon.notice pppd[946]: Connect: ppp0 <--> /dev/pts/0

2012-02-23 10:01:26 RV110W daemon.warning pppd[946]: Warning - secret file /tmp/ppp/pap-secrets has world and/or group access

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [LCP ConfReq id=0x1 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [LCP ConfReq id=0x0 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [LCP ConfRej id=0x0 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [LCP ConfAck id=0x1 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [LCP ConfReq id=0x1 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [LCP ConfAck id=0x1 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [LCP EchoReq id=0x0 magic=0x11372b0b]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [CHAP Challenge id=0x66 <74f93b7b6de315aaaac930f984c219e4>, name = \"RV110W\"]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [LCP Ident id=0x2 magic=0x67c80cba \"MSRASV5.20\"]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [LCP Ident id=0x3 magic=0x67c80cba \"MSRAS-0-SOFTWAREONE64\"]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [LCP Ident id=0x4 magic=0x67c80cba \"

\\37777777675\\027\\37777777665\\004\\37777777635\\37777777677@H\\37777777633~\\37777777775\\021\\tFQ(\

"]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [LCP EchoRep id=0x0 magic=0x67c80cba]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [CHAP Response id=0x66 <2f0330cb61ba1c8e29324410e0df24d3000000000000000025d1ef07d4cd82beaa93fe36ccc1e863b2652087eb02c39400>, name = \"sakor001\"]

2012-02-23 10:01:26 RV110W daemon.warning pppd[946]: Warning - secret file /tmp/ppp/chap-secrets has world and/or group access

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [CHAP Success id=0x66 \"S=9A5FB4C8B7C633FD6DEB868E150D0511BD93E0B4 M=Access granted\"]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: Script /tmp/ppp/auth-up started (pid 949)

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [CCP ConfReq id=0x1 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: Script /tmp/ppp/auth-up finished (pid 949), status = 0x16

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [CCP ConfReq id=0x5 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [CCP ConfNak id=0x5 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [IPCP ConfReq id=0x6 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [IPCP TermAck id=0x6]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [CCP ConfNak id=0x1 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [CCP ConfReq id=0x2 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [CCP ConfReq id=0x7 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [CCP ConfAck id=0x7 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [CCP ConfAck id=0x2 ]

2012-02-23 10:01:26 RV110W daemon.notice pppd[946]: MPPE 128-bit stateless compression enabled

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: sent [IPCP ConfReq id=0x1 ]

2012-02-23 10:01:26 RV110W daemon.debug pppd[946]: rcvd [IPCP ConfAck id=0x1 ]

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: rcvd [IPCP ConfReq id=0x8 ]

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: sent [IPCP ConfRej id=0x8 ]

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: rcvd [IPCP ConfReq id=0x9 ]

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: sent [IPCP ConfNak id=0x9 ]

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: rcvd [IPCP ConfReq id=0xa ]

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: sent [IPCP ConfAck id=0xa ]

2012-02-23 10:01:28 RV110W daemon.notice pppd[946]: local  IP address 192.168.1.3

2012-02-23 10:01:28 RV110W daemon.notice pppd[946]: remote IP address 192.168.1.20

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: Script /tmp/ppp/ip-up started (pid 1028)

2012-02-23 10:01:28 RV110W daemon.debug pppd[946]: Script /tmp/ppp/ip-up finished (pid 1028), status = 0x0

2012-02-23 10:01:28 RV110W user.debug syslog: Nbsrelay start (pid= 1040)

2012-02-23 10:17:56 RV110W daemon.err pptpd[944]: GRE: Bad checksum from pppd.

2012-02-23 10:31:51 RV110W daemon.info udhcpd[807]: received INFORM from 00:13:46:E6:D3:FA

2012-02-23 10:48:20 RV110W daemon.info httpd[376]: Administrator session timeout.

2012-02-23 10:48:27 RV110W daemon.info httpd[376]: Administrator logined from 192.168.0.132

2012-02-23 10:52:50 RV110W daemon.info udhcpd[807]: received INFORM from 00:26:F2:B7:49:42

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]: rcvd [LCP TermReq id=0xb \"g\\37777777710\\014\\37777777672\\000<

\\37777777715t\\000\\000\\000\\000\

"]

2012-02-23 10:58:49 RV110W daemon.info pppd[946]: LCP terminated by peer (gM-H^LM-:^@

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]: Script /tmp/ppp/auth-down started (pid 6011)

2012-02-23 10:58:49 RV110W daemon.info pppd[946]: Connect time 57.4 minutes.

2012-02-23 10:58:49 RV110W daemon.info pppd[946]: Sent 272072987 bytes, received 6264878 bytes.

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]: Script /tmp/ppp/ip-down started (pid 6015)

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]: sent [LCP TermAck id=0xb]

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]: Script /tmp/ppp/auth-down finished (pid 6011), status = 0x16

2012-02-23 10:58:49 RV110W daemon.notice pppd[946]: Modem hangup

2012-02-23 10:58:49 RV110W daemon.notice pppd[946]: Connection terminated.

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]: Waiting for 1 child processes...

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]:   script /tmp/ppp/ip-down, pid 6015

2012-02-23 10:58:49 RV110W daemon.debug pppd[946]: Script /tmp/ppp/ip-down finished (pid 6015), status = 0x0

2012-02-23 10:58:49 RV110W daemon.info pppd[946]: Exit.

2012-02-23 10:58:49 RV110W daemon.debug pptpd[944]: CTRL: Reaping child PPP[946]

2012-02-23 10:58:49 RV110W daemon.info pptpd[944]: CTRL: Client 192.168.0.132 control connection finished

New Member

Re: RV110W drops PPTP connections from a Windows client (MS CHAP

Today I tried again and I got the same problems! But after doing some searching around (more extensive than before), I think I found the problem. I already suspected the Windows 7 client doing something wrong, but the fact that one of my Windows 7 clients appeared to be working fine threw me off track. But read on, this will be quite thrilling, even for those who will never encounter this situation.

First, guess what fixed it? Your first thought reading about this problem would be "some firewall is blocking GRE traffic, you need to make sure all traffic gets to the router" or something like that, but then you saw my statement that all firewalls are off, all paths are clear. Well, turning the Windows firewall back on took care of the problem!

Finding one factor that could explain all the oddities I'm observing (some clients work, others - don't; sometimes the connection is stable, at other times - it drops or cannot be established; this happens with two different VPN servers, yet it never happens with other VPN servers; thousands of users of Windows 7's PPTP client are not experiencing this problem, etc.) is pretty hard and even though I had it all floating in my mind, it didn't click together until I found this article: http://www.networksteve.com/windows/topic.php/PPTP_VPN_Client_issues_with_Windows_7_x64_-_Spurious_ICMP_Protoc/?TopicId=37878&Posts=0, where it is all explained rather clearly.

It turns out, the Windows 7 PPTP client is buggy and will sometimes, for no good reason, send a "ICMP Protocol Unreachable" packet to the VPN server. That will, obviously, cause it to drop the connection. In addition, the Win7 client will also sometimes get stuck, throwing off your attempts to figure out what is going wrong. Since most people leave their Windows Firewall on, the ICMP datagram is not getting out and no harm is done. Also, when going over the Internet, the datagram could get dropped by a router on the way, so it'd never get to the VPN server - this probably explains why I'm not experiencing this problem with my other VPN server (which is located remotely and behind a NAT firewall).

Now, on to the important part - the one you can help me with. Since I don't want to keep my firewall "on", and I don't know that the ICMP packets will necessarily get filtered out over the Internet when the router is deployed, I would like to be able to have the RV110W filter out those packets. I'm not very familiar with it (the manual is rather terse: "you set the retroencabulator depleneration splining function by checking the 'retroencabulator depleneration" box in the 'annular grillage'  tab", but no word on what it is and how it works), so my attempts so far have failed. I tried adding an ICMP service in "service management" and then I added an access rule trying to always block incoming packets of that service, but it insists on a specific "start address" ("single address"), an nothing there worked: the router LAN IP, the PPTP server IP, and some others. So, my question is: can I block ICMP Protocol Unreachable (Type 3, Code 2) packets on the RV110W, or maybe all ICMP traffic (is there any that is necessary?), and how?

Kamen

By the way, I do have "Block WAN request" enabled but that must be just for "ping" packets (ICMP type 8, code 0).

K.

Silver

RV110W drops PPTP connections from a Windows client (MS CHAP v2

Kamen,

Please give the Cisco Small Business Support Center a call and open a support case @ 1-866-606-1866

Support Numbers

Jasbryan

New Member

Re: RV110W drops PPTP connections from a Windows client (MS CHAP

Thank you, very much, Jasbryan. I already did open a support case: "SR 620830793 - RV110W-A-NA-K9 / Device is dropping the VPN connection". Unfortunately, there is not much that can be done, which I already knew - this is a problem with the Microsoft client. What I didn't expect is your colleague promised to bring this up to the developers, so that they can, hopefully, look into implementing some workaround in a future firmware release. I truly appreciate the concern and swift reaction of Cisco support on this matter, you guys are really great.

Kamen

New Member

Same problem here, MPPE

Same MPPE problem here: https://supportforums.cisco.com/discussion/13167781/rv110w-pptp-l2tp-critical-issue-mppe

5328
Views
0
Helpful
5
Replies