Trouble with PPTP & FreeRadius

Alan DeKok aland at deployingradius.com
Sat Mar 28 16:27:55 CET 2009


Mike Diggins wrote:
> I have a cisco vpn3030 concentrator with both IPSec and PPTP clients.
> IPSec clients can successfully connect using my FreeRadius 2.1.3 server.
> They use PAP, I believe. My PPTP clients are failing to connect. Every
> indication on the Radius server is they have authenticated successfully,
> although the client says no (both Macintosh and Windows XP clients).
> When I point my cisco vpn3030 back to the CiscoSecure Radius server they
> use now (what I'm migrating from), the clients work again. There must be
> something different about the reply from each server. Any idea what
> might be happening?

  The replies are different, and the VPN3030 doesn't like the replies.

  So... run "tcpdump", or "radsniff" on the packets from your old
server.  See what is in the packets, and then make FreeRADIUS respond
with the same content.  That's it.

  Alan DeKok.



More information about the Freeradius-Users mailing list