Situation:
[clients in private network 192.168.1.0] - [192.168.1.1 Freebsd firewall with NAT] - internet - [1.2.3.4, 5.6.7.8. Windows servers]
Clients from private network needs establish Windows VPN connections to the Windows servers (more than one client to each server) through a FreeBSD firewall with NAT.
On the Freebsd there is Mpd5 installed as PPTP Access Concentrator (PAC). For this purpose the ip address of destination Windows server has to be changed to ip of PAC (192.168.1.1) in Windows VPN client's settings.
This is functional setting PPTP Acces Concentrator for arbitrary number of local clients and only one remote Windows server.
/usr/local/etc/mpd5/mpd.conf:
Simple_pac:
create link template L1 pptp
set link action forward L2
set link enable incoming
create link template L2 pptp
set pptp peer 1.2.3.4
My problem is a setting for more remote Windows servers.
/usr/local/etc/mpd5/mpd.conf:
Complete_pac:
create link template L1 pptp
set pptp self 192.168.1.1
set link no pap chap eap
set link enable chap
set link action forward L2 "user1"
set link action forward L2 "user2"
set link action forward L3 "user3"
set link enable incoming
create link template L2 pptp
set pptp peer 1.2.3.4
create link template L3 pptp
set pptp peer 5.6.7.8
Communication with Windows servers is separated by user names and by mpd.log report is OK. But VPN client ended with error 718.
/var/log/mpd.log:
Aug 24 15:43:53 mpd: process 16022 started, version 5.6
Aug 24 15:43:53 mpd: PPTP: waiting for connection on 192.168.1.1 1723
Aug 24 15:44:05 mpd: [L1-2] Accepting PPTP connection
Aug 24 15:44:05 mpd: [L1-2] Link: OPEN event
Aug 24 15:44:05 mpd: [L1-2] LCP: Open event
Aug 24 15:44:05 mpd: [L1-2] LCP: state change Initial --> Starting
Aug 24 15:44:05 mpd: [L1-2] LCP: LayerStart
Aug 24 15:44:05 mpd: [L1-2] PPTP: attaching to peer's outgoing call
Aug 24 15:44:05 mpd: [L1-2] Link: UP event
Aug 24 15:44:05 mpd: [L1-2] LCP: Up event
Aug 24 15:44:05 mpd: [L1-2] LCP: state change Starting --> Req-Sent
Aug 24 15:44:05 mpd: [L1-2] LCP: SendConfigReq #1
Aug 24 15:44:05 mpd: [L1-2] ACFCOMP
Aug 24 15:44:05 mpd: [L1-2] PROTOCOMP
Aug 24 15:44:05 mpd: [L1-2] MRU 1500
Aug 24 15:44:05 mpd: [L1-2] MAGICNUM 5fb72668
Aug 24 15:44:05 mpd: [L1-2] AUTHPROTO CHAP MSOFTv2
Aug 24 15:44:05 mpd: [L1-2] LCP: rec'd Configure Request #0 (Req-Sent)
Aug 24 15:44:05 mpd: [L1-2] MAGICNUM 13e25781
Aug 24 15:44:05 mpd: [L1-2] PROTOCOMP
Aug 24 15:44:05 mpd: [L1-2] ACFCOMP
Aug 24 15:44:05 mpd: [L1-2] CALLBACK 6
Aug 24 15:44:05 mpd: [L1-2] MP MRRU 1614
Aug 24 15:44:05 mpd: [L1-2] ENDPOINTDISC [LOCAL] f8 87 56 86 14 d4 40 9a a9 b5 00 98 d6 1e 58 c9 00 00 0
Aug 24 15:44:05 mpd: [L1-2] LCP: SendConfigRej #0
Aug 24 15:44:05 mpd: [L1-2] CALLBACK 6
Aug 24 15:44:05 mpd: [L1-2] MP MRRU 1614
Aug 24 15:44:05 mpd: [L1-2] LCP: rec'd Configure Request #1 (Req-Sent)
Aug 24 15:44:05 mpd: [L1-2] MAGICNUM 13e25781
Aug 24 15:44:05 mpd: [L1-2] PROTOCOMP
Aug 24 15:44:05 mpd: [L1-2] ACFCOMP
Aug 24 15:44:05 mpd: [L1-2] ENDPOINTDISC [LOCAL] f8 87 56 86 14 d4 40 9a a9 b5 00 98 d6 1e 58 c9 00 00 0
Aug 24 15:44:05 mpd: [L1-2] LCP: SendConfigAck #1
Aug 24 15:44:05 mpd: [L1-2] MAGICNUM 13e25781
Aug 24 15:44:05 mpd: [L1-2] PROTOCOMP
Aug 24 15:44:05 mpd: [L1-2] ACFCOMP
Aug 24 15:44:05 mpd: [L1-2] ENDPOINTDISC [LOCAL] f8 87 56 86 14 d4 40 9a a9 b5 00 98 d6 1e 58 c9 00 00 0
Aug 24 15:44:05 mpd: [L1-2] LCP: state change Req-Sent --> Ack-Sent
Aug 24 15:44:07 mpd: [L1-2] LCP: SendConfigReq #2
Aug 24 15:44:07 mpd: [L1-2] ACFCOMP
Aug 24 15:44:07 mpd: [L1-2] PROTOCOMP
Aug 24 15:44:07 mpd: [L1-2] MRU 1500
Aug 24 15:44:07 mpd: [L1-2] MAGICNUM 5fb72668
Aug 24 15:44:07 mpd: [L1-2] AUTHPROTO CHAP MSOFTv2
Aug 24 15:44:07 mpd: [L1-2] LCP: rec'd Configure Ack #2 (Ack-Sent)
Aug 24 15:44:07 mpd: [L1-2] ACFCOMP
Aug 24 15:44:07 mpd: [L1-2] PROTOCOMP
Aug 24 15:44:07 mpd: [L1-2] MRU 1500
Aug 24 15:44:07 mpd: [L1-2] MAGICNUM 5fb72668
Aug 24 15:44:07 mpd: [L1-2] AUTHPROTO CHAP MSOFTv2
Aug 24 15:44:07 mpd: [L1-2] LCP: state change Ack-Sent --> Opened
Aug 24 15:44:07 mpd: [L1-2] LCP: auth: peer wants nothing, I want CHAP
Aug 24 15:44:07 mpd: [L1-2] CHAP: sending CHALLENGE #1 len: 21
Aug 24 15:44:07 mpd: [L1-2] LCP: LayerUp
Aug 24 15:44:07 mpd: [L1-2] LCP: rec'd Ident #2 (Opened)
Aug 24 15:44:07 mpd: [L1-2] MESG: MSRASV5.00
Aug 24 15:44:07 mpd: [L1-2] LCP: rec'd Ident #3 (Opened)
Aug 24 15:44:07 mpd: [L1-2] MESG: MSRAS-1-NB_JM2
Aug 24 15:44:07 mpd: [L1-2] CHAP: rec'd RESPONSE #1 len: 59
Aug 24 15:44:07 mpd: [L1-2] Name: "test2"
Aug 24 15:44:07 mpd: [L1-2] Link: Matched action 'forward "L2" "test2"'
Aug 24 15:44:07 mpd: [R-L1-2] Rep: INCOMING event from L1-2 (0)
Aug 24 15:44:07 mpd: [L1-2] LCP: Down event
Aug 24 15:44:07 mpd: [L1-2] LCP: state change Opened --> Starting
Aug 24 15:44:07 mpd: [L1-2] LCP: LayerDown
Aug 24 15:44:07 mpd: [L1-2] LCP: Close event
Aug 24 15:44:07 mpd: [L1-2] LCP: state change Starting --> Initial
Aug 24 15:44:07 mpd: [L1-2] LCP: LayerFinish
Aug 24 15:44:07 mpd: [L2-3] PPTP call successful
Aug 24 15:44:07 mpd: [R-L1-2] Rep: UP event from L2-3 (1)
Aug 24 15:44:07 mpd: [R-L1-2] Rep: UP event from L1-2 (0)
Aug 24 15:44:26 mpd: [R-L1-2] Rep: SetAccm(0xffffffff, 0xffffffff) from L1-2 (0)
Aug 24 15:44:26 mpd: [L1-2] PPTP call terminated
Aug 24 15:44:26 mpd: [R-L1-2] Rep: DOWN event from L1-2 (0)
Aug 24 15:44:26 mpd: [L1-2] Link: SHUTDOWN event
Aug 24 15:44:26 mpd: [L1-2] Link: Shutdown
Does anyone know how to set MPD5 form multiple Windows servers (Complete_pac) please?
