vpn client for Linux via mppe ...

[K.C. Chan]

All,
I need to set up a vpn access from linux to microsoft vpn server which use mppe. I've searched around and gotten more confused; I am running redhat9 with an updated 2.4-20 and 2.4-22 kernel from kernel.org. It does not look like the stock kernel comes with the mppe modules. After googling for a while, I've found references to mppe and pptp, it appears that the mppe patche for the kernel from the planetmirror site supports a different pptp version. Could some one enlightenment me? Why do we not include the mppe version in the stock kernel, I am sure it's been out quite sometime and it's safe to say it's in used by a number of users out there. Thanks.

[Jerome Henry]

Well... NT4's been used a lot too, and is quite a mess, AFA security is concerned.

MPPE is Microsoft Point to point encryption protocol, so hoem made, and it has no reason to be natively in Linux, as codes are not free.
Besides, it uses the same key on both ways, which is risky : if you crypt, do it well, generating 2 keys wouldn't be harder (except for the decrypt admin stuff in m$ concept).

If you want to interconnect Linux and m$ with VPN, I think you shouldn't try to make linux a m$ like, because from my experience it won't work. You'd better think from both ends and search for what will work on both ends (I mean, I've no lesson to give to no-one, but eveytime I processed this way it worked better).

Whatesoever, there is ppp-mppe-version.rpm available, but make some cofee as there will be several things to rebuild thenafter.

Otherwise, there is also the PPTPO with CIPE solution, read at http://www.europe.redhat.com/documentation/rhl9/rhl-sg-en-9/ch-vpn.php3

Thanks to assign points if this is useful...

J

[K.C. Chan]

Here, here, I have tried to incorporate mppe modules for linux. Oh, yeah it's a mess. I gave up on it. No wonder the vendor did not support the cross over to Linux for vpn. I am using watchguard firewall, any suggestions on how to get vpn for linux? I was thinking of using a linux server behind the firewall as a vpn server, has any one done this?

Jerome, I will look into the url regarding cipe and linux vpn. This looks like an alternative solution.

[Stuart Browne]

mppe intergration into Linux is a pain (kernel module, modificatiosn to pppd), but I was able to get it to work (as a server) in about 15-20 minutes (on RH8) with little issue.

The poptop source (http://www.poptop.org) is good for that. I've not tried the actual client however (http://pptpclient.sourceforge.net/).

If you want compatability with windows, but better encryption, you could always look to use 'IPSec'. The 'Freeswan' distribution used to be the best, but I've not looked at it for a while.