Problems accessing PPTP VPN from Windows 11 client

Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking
Goto page 1, 2  Next
Author Message
itm1960
DD-WRT Novice


Joined: 13 Apr 2024
Posts: 33

PostPosted: Wed Oct 09, 2024 11:18    Post subject: Problems accessing PPTP VPN from Windows 11 client Reply with quote
I am trying to set up a PPTP VPN server on my Netgear R7800, as a backup to an existing OpenVPN server which I have running on a VM in my home LAN. The reason is that, on occasion, the machine running the OpenVPN server has crashed while I have been away from home and I have been unable to connect to rectify things.

I have my PPTP settings as follows:


I have set up a VPN client connection on a Windows 11 laptop as follows:












When I try to connect I get this message:
Code:
Connecting to mydomain.ddns.net


After about 20 seconds I get this error:
[code]The network connection between your computer and the VPN server was interrupted. This can be caused by a problem in the VPN transmission and is commonly the result of internet latency or simply that the VPN server has reached capacity. Please try to reconnect to the VPN server. If this problem persists, contact the VPN administrator and analyze the quality of network connectivity[/code

I am connecting over a 4G network which seems to be performing reasonably well for web browsing, etc.

Any idea why I'm unable to connect - is 4G simply not up to it?
Incidentally, if I connect my laptop to the home wifi I get exactly the same error when I try to connect to the VPN.
???



vpn2.png
 Description:
 Filesize:  23.7 KB
 Viewed:  203 Time(s)

vpn2.png



vpn1.png
 Description:
 Filesize:  29.84 KB
 Viewed:  203 Time(s)

vpn1.png



vpn settings PPTP.png
 Description:
 Filesize:  30.53 KB
 Viewed:  203 Time(s)

vpn settings PPTP.png


Sponsor
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13650
Location: Netherlands

PostPosted: Wed Oct 09, 2024 12:45    Post subject: Reply with quote
PPTP is highly insecure and not much used these days so the expertise is waning.
I hope you get an answer but otherwise consider using WireGuard or OpenVPN.
Guides are a sticky in this forum

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
itm1960
DD-WRT Novice


Joined: 13 Apr 2024
Posts: 33

PostPosted: Wed Oct 09, 2024 13:32    Post subject: Reply with quote
egc wrote:
PPTP is highly insecure and not much used these days so the expertise is waning.
I hope you get an answer but otherwise consider using WireGuard or OpenVPN.
Guides are a sticky in this forum


Thanks - yes that's understood. This is intended strictly as a backup option when my main OpenVPN server is unavailable for any reason. As the OpenVPN ports on the router are currently forwarded to that server I wanted to keep things simple by using a different VPN protocol for the backup server.

I will also take a look at Wireguard.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13650
Location: Netherlands

PostPosted: Wed Oct 09, 2024 13:38    Post subject: Reply with quote
My vpn server has both OpenVPN and WireGuard.
I actually only use WireGuard as it is much faster.
OpenVPN is my backup

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 9357

PostPosted: Wed Oct 09, 2024 15:28    Post subject: Reply with quote
Since you have IPv6 enabled, I'd try disabling it (on the connection). I don't think the router supports PPTP over IPv6. TBH, it's been ages since I've used the PPTP server (and it's a rare usage by users too), so I'm just guessing.

P.S. As a backup, perhaps SSH w/ local port forwarding might be a better option, at least compared to PPTP. In my own case, I don't enable the SSH server on the WAN, but instead access it via the LAN side using Cloudflare tunnels.

_________________
ddwrt-bind-static-routes-to-wan.sh (UPDATED! 11/12/24) * ddwrt-blacklist-domains.sh * ddwrt-dns-monitor.sh * ddwrt-ovpn-client-backup.sh * ddwrt-ovpn-client-killswitch.sh * ddwrt-ovpn-client-watchdog.sh * ddwrt-ovpn-server-watchdog.sh * ddwrt-ovpn-split-advanced.sh * ddwrt-ovpn-split-basic.sh * ddwrt-mount-usb-drives.sh * ddwrt-wol-port-forward.sh
itm1960
DD-WRT Novice


Joined: 13 Apr 2024
Posts: 33

PostPosted: Wed Oct 09, 2024 15:44    Post subject: Reply with quote
eibgrad wrote:
Since you have IPv6 enabled, I'd try disabling it (on the connection). I don't think the router supports PPTP over IPv6. TBH, it's been ages since I've used the PPTP server (and it's a rare usage by users too), so I'm just guessing.

P.S. As a backup, perhaps SSH w/ local port forwarding might be a better option, at least compared to PPTP. In my own case, I don't enable the SSH server on the WAN, but instead access it via the LAN side using Cloudflare tunnels.


Thanks. I just tried disabling IPv6 on the connection but I got the same error :0(
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 9357

PostPosted: Wed Oct 09, 2024 15:48    Post subject: Reply with quote
One of the real annoyances w/ PPTP is that it's incredibly stingy when it comes to error messages, esp. on the client side (unlike OpenVPN, which is chatty in the extreme, on both sides of the connection). But there should be at least something in the PPTP server-side syslog that indicates the problem. Quite often it has to do w/ a mismatch between the negotiated options.

Code:
grep -i pptp /var/log/messages

_________________
ddwrt-bind-static-routes-to-wan.sh (UPDATED! 11/12/24) * ddwrt-blacklist-domains.sh * ddwrt-dns-monitor.sh * ddwrt-ovpn-client-backup.sh * ddwrt-ovpn-client-killswitch.sh * ddwrt-ovpn-client-watchdog.sh * ddwrt-ovpn-server-watchdog.sh * ddwrt-ovpn-split-advanced.sh * ddwrt-ovpn-split-basic.sh * ddwrt-mount-usb-drives.sh * ddwrt-wol-port-forward.sh
eibgrad
DD-WRT Guru


Joined: 18 Sep 2010
Posts: 9357

PostPosted: Wed Oct 09, 2024 15:56    Post subject: Reply with quote
Might be an issue on the client side router too. It has to support GRE and PPTP passthrough. Given that PPTP is considered insecure, it might be disabled by default, or perhaps not even supported anymore.

Can you use the Windows 11 PPTP client successfully to any other PPTP server besides the remote router?

_________________
ddwrt-bind-static-routes-to-wan.sh (UPDATED! 11/12/24) * ddwrt-blacklist-domains.sh * ddwrt-dns-monitor.sh * ddwrt-ovpn-client-backup.sh * ddwrt-ovpn-client-killswitch.sh * ddwrt-ovpn-client-watchdog.sh * ddwrt-ovpn-server-watchdog.sh * ddwrt-ovpn-split-advanced.sh * ddwrt-ovpn-split-basic.sh * ddwrt-mount-usb-drives.sh * ddwrt-wol-port-forward.sh
itm1960
DD-WRT Novice


Joined: 13 Apr 2024
Posts: 33

PostPosted: Wed Oct 09, 2024 16:05    Post subject: Reply with quote
I'm looking into Wireguard as a parallel exercise, but haven't had any luck with that so far, either....I'll open another thread for my Wireguard issues...
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 16049
Location: Texas, USA

PostPosted: Wed Oct 09, 2024 16:12    Post subject: Reply with quote
OP edited. Please learn how to properly link images. K, thx.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13650
Location: Netherlands

PostPosted: Wed Oct 09, 2024 16:25    Post subject: Reply with quote
itm1960 wrote:
I'm looking into Wireguard as a parallel exercise, but haven't had any luck with that so far, either....I'll open another thread for my Wireguard issues...


WireGuard server setup guide is a sticky ( first few threads) in this forum

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
itm1960
DD-WRT Novice


Joined: 13 Apr 2024
Posts: 33

PostPosted: Wed Oct 09, 2024 16:34    Post subject: Reply with quote
kernel-panic69 wrote:
OP edited. Please learn how to properly link images. K, thx.


Thanks for that. I hunted around for guidance on that but didn't have any luck.
M
DD-WRT User


Joined: 29 Dec 2012
Posts: 192

PostPosted: Fri Jan 24, 2025 8:15    Post subject: Reply with quote
That is not a setup issue!

This forum admin identified that PPTP is insecure!
They did not update ppp protocol many many year! Version 2.4.8! Then, they always encourage the users using openvpn or wireguard etc.

The stable version is 2.4.7.
The unstable version is 2.4.8.
The last update version is 2.5.2.




01-24-2025_DD-WRT.jpg
 Description:
 Filesize:  86.47 KB
 Viewed:  140 Time(s)

01-24-2025_DD-WRT.jpg


kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 16049
Location: Texas, USA

PostPosted: Fri Jan 24, 2025 16:31    Post subject: Reply with quote
Quote:
Stable release 2.5.0 / April 4, 2023; 20 months ago


https://github.com/ppp-project/ppp

The only other anomaly/discrepancy I can see would be the accel-pp(t)p source code. I've forwarded your concerns to the headmaster.

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
M
DD-WRT User


Joined: 29 Dec 2012
Posts: 192

PostPosted: Sat Jan 25, 2025 15:57    Post subject: Reply with quote
PPP version 2.5.2
https://github.com/ppp-project/ppp/releases/tag/v2.5.2

01/22/2025 - r59302
Jan 24 17:04:55.014 WRT32X_3200 daemon.notice pppd[3561]: pppd 2.4.8 started by root, uid 0

Recommendation
Please update the version to 2.5.2
The reason is 2.4.8 have two major security issues! It causes the internet speed and connection!

kernel-panic69 wrote:
Quote:
Stable release 2.5.0 / April 4, 2023; 20 months ago


https://github.com/ppp-project/ppp

The only other anomaly/discrepancy I can see would be the accel-pp(t)p source code. I've forwarded your concerns to the headmaster.
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Advanced Networking All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum