Windows Server 2012 R2 PPPoE broke in RRAS (Network Steve Forum)

Windows Server 2012 R2 PPPoE broke in RRAS

Hi All,

It seems PPPoE in Windows Server 2012 R2 has broken. I have used PPPoE in Windows Server 2008R2 for a couple of years with my DSL device with no real issues (this has been running in a VM recently on WS2012 R2 RTM). I recently spun up a Windows Server 2012R2 (again RTM) VM to replace my 2008R2 VM. Windows Server 2012 R2 will not connect and I have tried all the settings. If logging is enabled a message is returned in the PPP log which states 'PROTOCOL_MSG_Stop recvd'. If I start my old VM backup it works straight away. I have also tried it on a physical box with no difference.

In event viewer there should be 5 events created with eventid numbers 20221, 20222,20223,20224,20225. EventID 20225 never arrives...

The strange thing is, if you setup a client PPPoE connection for the Network sharing place it works....

Any suggestions out there?

Thank you,

Paul

October 9th, 2013 1:51pm

Hi Paul,

Im not quite understand, can you make it clear?

The strange thing is, if you setup a client PPPoE connection for the Network sharing place it works....

What does this mean?

Also I think you should double check the logs. Actually, I didnt anything available for PROTOCOL_MSG_Stop recvd.

Free Windows Admin Tool Kit Click here and download it now

October 12th, 2013 2:57am

First.

PPPoE in RRAS has been broken as described. However if you use the Network and Sharing Center as you would do to setup a client connection for a VPN or to connect to the Internet this will allow a PPPoE client connection to be established.

I do not need to double check the logs I starred at them for 3 days, so I know what it has in it.

Regards,

Paul

October 16th, 2013 5:12pm

I have the same problem with my server 2012 R2 RTM.

windows starts the PPPOE stage(PADI, PADO, PADR, PADS)

followed by the LCP stage(Compression, PAP auth metho, MTU)

then the PAP stage(this stage is finished successfully)

then the IPCP/IPV6CP stage(this stage is also finished without any error, windows DOES get the ip/dns, we can see an IGMPv3 multicast packet sent with the NEW ip address)

after the IPCP stage windows will terminate the PPP session immediately.

AND, again, PPPoE connection in the Network sharing place works without problem.

Free Windows Admin Tool Kit Click here and download it now

October 19th, 2013 7:15pm

In mprddm.dll's RasPortConnected function, here is a call to RasGetPortUserData with tag=0x0d which means tunnel endpoint info, VPN connection has a valid data but PPPoE does not, so this call will failed with error code 1168(item not found), then RasPortConnected closes the port, connection drops.

In windows server 2012, even if RasGetPortUserData failed, mprddm.dll just prints a debug message via TracePrintfEx, and ignores the error.

Just patching the je after RasGetPortUserData to jmp (0x74 -> 0xeb)

00007FFE4C739129 mov         eax,dword ptr [rsi+30h]
00007FFE4C73912C mov         ecx,1
00007FFE4C739131 lea         r8,[rdi+51Ch]
00007FFE4C739138 lea         edx,[rcx+7Fh]
00007FFE4C73913B cmp         ax,0Fh
00007FFE4C73913F lea         r9,[rsp+30h]
00007FFE4C739144 cmove       ecx,edx
00007FFE4C739147 mov         edx,0Dh
00007FFE4C73914C mov         dword ptr [rdi+20h],ecx
00007FFE4C73914F mov         rax,qword ptr [rsi+8]
00007FFE4C739153 mov         qword ptr [rdi+10h],rax
00007FFE4C739157 mov         rcx,qword ptr [rsi+8]
00007FFE4C73915B mov         dword ptr [rsp+30h],14h
00007FFE4C739163 call        qword ptr [__imp_RasGetPortUserData ]
00007FFE4C739169 mov         ebx,eax
00007FFE4C73916B test        eax,eax
00007FFE4C73916D je          RasPortConnected+308h <-----{here, change 0x74, 0x3d to 0xeb, 0x3d}

Proposed as answer by vitamin C Sunday, August 31, 2014 3:13 PM

October 25th, 2013 7:43am

In windows server 2012, even if RasGetPortUserData failed, mprddm.dll just prints a debug message via TracePrintfEx, and ignores the error.

Just patching the je after RasGetPortUserData to jmp (0x74 -> 0xeb)

Proposed as answer by vitamin C Sunday, August 31, 2014 3:13 PM

Free Windows Admin Tool Kit Click here and download it now

October 25th, 2013 7:43am

I have same problem.

For test install 2 server (2012R2 and 2008R2) on HyperV. Use identical settings for configure PPPoE connection from RRAS. In 2008R2 works fine.

In 2012R2 error on connect (An error occurred during connection of the interface. The connection was closed by the remote computer). But when I try connect PPPoE from "Sharing Center" - No problem, it works.

Eventlog: Error 20111

C:\Windows\Tracing\PPP.txt (Full Log file: http://sdrv.ms/1c6ydmf )

[1244] 10-26 15:41:34:410: RemoveFromTimerQ called portid=80,Id=9,Protocol=8021,EventType=0,fAuth=0
[1244] 10-26 15:41:34:410: <PPP packet sent at 10/26/2013 11:41:34:410
[1244] 10-26 15:41:34:410: <Protocol = IPCP, Type = Configure-Req, Length = 0x18, Id = 0xa, Port = 0
[1244] 15:41:34:410: <80 21 01 0A 00 16 03 06 D5 8D 9D 8F 81 06 D4 01 |.!..............|
[1244] 15:41:34:410: <E0 06 83 06 D4 01 F4 06 00 00 00 00 00 00 00 00 |................|
[1244] 10-26 15:41:34:410:  
[1244] 10-26 15:41:34:411: InsertInTimerQ called portid=80,Id=10,Protocol=8021,EventType=0,fAuth=0,Timeout=1
[2316] 10-26 15:41:34:412: Packet received (40 bytes) for hPort 0
[1244] 10-26 15:41:34:412: >PPP packet received at 10/26/2013 11:41:34:412
[1244] 10-26 15:41:34:412: >Protocol = IPCP, Type = Configure-Ack, Length = 0x28, Id = 0xa, Port = 0
[1244] 15:41:34:412: >80 21 02 0A 00 16 03 06 D5 8D 9D 8F 81 06 D4 01 |.!..............|
[1244] 15:41:34:412: >E0 06 83 06 D4 01 F4 06 00 00 00 00 00 00 00 00 |................|
[1244] 15:41:34:412: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1244] 10-26 15:41:34:412:  
[1244] 10-26 15:41:34:412: RemoveFromTimerQ called portid=80,Id=10,Protocol=8021,EventType=0,fAuth=0
[1244] 10-26 15:41:34:412: FsmThisLayerUp called for protocol = 8021, port = 0
[1244] 10-26 15:41:34:412: RemoveFromTimerQ called portid=80,Id=10,Protocol=8021,EventType=8,fAuth=0
[1244] 10-26 15:41:34:474: Notifying IPCP of projection notification
[1244] 10-26 15:41:34:474: Client: Ipv4 successful for Guid {C469370D-F406-4D22-9CC0-4FDA33BAA29B}
[1244] 10-26 15:41:34:474: RemoveFromTimerQ called portid=80,Id=0,Protocol=0,EventType=3,fAuth=0
[1244] 10-26 15:41:34:474: NotifyCaller(hPort=0, dwMsgId=4)
[1244] 10-26 15:41:34:474: NotifyCaller(hPort=0, dwMsgId=0)
[1244] 10-26 15:41:34:474: Inserting autodisconnect in timer q for port=0, sec=300
[1244] 10-26 15:41:34:474: RemoveFromTimerQ called portid=80,Id=0,Protocol=0,EventType=1,fAuth=0
[1244] 10-26 15:41:34:474: InsertInTimerQ called portid=80,Id=0,Protocol=0,EventType=1,fAuth=0,Timeout=300
[1244] 10-26 15:41:34:474: LCPEchoTimeout = 300
[1244] 10-26 15:41:34:474: InsertInTimerQ called portid=80,Id=0,Protocol=0,EventType=7,fAuth=0,Timeout=300
[3292] 10-26 15:41:34:484: PROTOCOL_MSG_Stop recvd

[1244] 10-26 15:41:34:484: FsmClose event received for protocol c021 on port 0
[1244] 10-26 15:41:34:484: RemoveFromTimerQ called portid=80,Id=3,Protocol=c021,EventType=0,fAuth=0
[1244] 10-26 15:41:34:484: FsmThisLayerDown called for protocol = c021, port = 0
[1244] 10-26 15:41:34:484: FsmDown event received for protocol 80fd on port 0
[1244] 10-26 15:41:34:484: RemoveFromTimerQ called portid=80,Id=7,Protocol=80fd,EventType=0,fAuth=0
[1244] 10-26 15:41:34:484: FsmThisLayerStarted called for protocol = 80fd, port = 0
[1244] 10-26 15:41:34:484: FsmReset called for protocol = 80fd, port = 0
[1244] 10-26 15:41:34:484: FsmDown event received for protocol 8021 on port 0
[1244] 10-26 15:41:34:484: RemoveFromTimerQ called portid=80,Id=10,Protocol=8021,EventType=0,fAuth=0
[1244] 10-26 15:41:34:484: FsmThisLayerDown called for protocol = 8021, port = 0
[1244] 10-26 15:41:34:484: RemoveFromTimerQ called portid=80,Id=10,Protocol=8021,EventType=8,fAuth=0
[1244] 10-26 15:41:34:484: FsmReset called for protocol = 8021, port = 0
[1244] 10-26 15:41:34:484: RemoveFromTimerQ called portid=80,Id=1,Protocol=c223,EventType=0,fAuth=0
[1244] 10-26 15:41:34:484: RemoveFromTimerQ called portid=80,Id=0,Protocol=c029,EventType=0,fAuth=0
[1244] 10-26 15:41:34:484: <PPP packet sent at 10/26/2013 11:41:34:484
[1244] 10-26 15:41:34:484: <Protocol = LCP, Type = Terminate-Req, Length = 0x12, Id = 0xb, Port = 0
[1244] 15:41:34:484: <C0 21 05 0B 00 10 55 DB 4C BE 00 3C CD 74 00 00 |.!....U.L..<.t..|
[1244] 15:41:34:484: <00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1244] 10-26 15:41:34:484:  
[1244] 10-26 15:41:34:484: InsertInTimerQ called portid=80,Id=11,Protocol=c021,EventType=0,fAuth=0,Timeout=1
[2316] 10-26 15:41:34:491: Packet received (40 bytes) for hPort 0
[1244] 10-26 15:41:34:492: >PPP packet received at 10/26/2013 11:41:34:492
[1244] 10-26 15:41:34:492: >Protocol = LCP, Type = Terminate-Ack, Length = 0x28, Id = 0xb, Port = 0
[1244] 15:41:34:492: >C0 21 06 0B 00 04 00 00 00 00 00 00 00 00 00 00 |.!..............|
[1244] 15:41:34:492: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1244] 15:41:34:492: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
[1244] 10-26 15:41:34:492:  
[1244] 10-26 15:41:34:492: RemoveFromTimerQ called portid=80,Id=11,Protocol=c021,EventType=0,fAuth=0
[1244] 10-26 15:41:34:492: FsmThisLayerFinished called for protocol = c021, port = 0
[1244] 10-26 15:41:34:492: FsmThisLayerFinished called for protocol = 80fd, port = 0: 0
[1244] 10-26 15:41:34:512: FsmThisLayerFinished called for protocol = 8021, port = 0: 0
[1244] 10-26 15:41:34:512: NotifyCaller(hPort=0, dwMsgId=10)
[2316] 10-26 15:41:34:512: PROTOCOL_MSG_LineDown recvd, hPort=0

[1244] 10-26 15:41:34:512: Line down event occurred on port 0
[1244] 10-26 15:41:34:512: FsmDown event received for protocol c021 on port 0
[1244] 10-26 15:41:34:512: RemoveFromTimerQ called portid=80,Id=11,Protocol=c021,EventType=0,fAuth=0
[1244] 10-26 15:41:34:512: FsmReset called for protocol = c021, port = 0
[1244] 10-26 15:41:34:512: RemoveFromTimerQ called portid=80,Id=0,Protocol=0,EventType=3,fAuth=0
[1244] 10-26 15:41:34:512: RemoveFromTimerQ called portid=80,Id=0,Protocol=0,EventType=7,fAuth=0
[1244] 10-26 15:41:34:512: RemoveFromTimerQ called portid=80,Id=0,Protocol=0,EventType=2,fAuth=0
[1244] 10-26 15:41:34:512: RemoveFromTimerQ called portid=80,Id=0,Protocol=0,EventType=1,fAuth=0
[1244] 10-26 15:41:34:512: RemoveFromTimerQ called portid=80,Id=0,Protocol=c029,EventType=0,fAuth=0
[1244] 10-26 15:41:34:512: LcpEnd
[1244] 10-26 15:41:34:512: Post line down event occurred on port 0
[1244] 10-26 15:41:34:512: NotifyCaller(hPort=0, dwMsgId=26)

Update:
Windows 2012 (not R2) - Work Fine, no problem with PPPoE connect.

October 26th, 2013 12:03pm

I have the same problem.

On a fresh install of Windows Server 2012 R2 (Dreamspark version), after establishing PPPoE DSL Internet connection, the first try to connect after booting up will always fail (no response from modem ...). Click on the back arrow, click the same broadband connect again and it will go through successfully. After that, manual disconnect/reconnect will all function normally. Same situation for each and every restart of the computer.

The same scenario applies for both on-board Realtek and standalone Intel Ethernet adapters and different xDSL modems, while on the same facilities there's no such issue for Server 2012/2008 R2 and Win7. And my Windows Update is up to October 30, 2013.

It must be something wrong or improperly configured for Windows Server 2012 R2. Anyway we get MS to be acknowledged of this issue and get it fixed?

Free Windows Admin Tool Kit Click here and download it now

October 30th, 2013 3:17am

I have the same problem. Here is the log C:\Windows\tracing\ppp.Log

[2456] 11-06 20:24:42:122: PROTOCOL_MSG_Start recvd, d=, hPort=0,flags=4,mask=9830208,IfType=2 [2644] 11-06 20:24:42:122: Line up event occurred on port 0 [2644] 11-06 20:24:42:122: Local identification = MSRAS-0-WIN-T30OEFTJKRE [2644] 11-06 20:24:42:122: PortName: PPPoE4-0 [2644] 11-06 20:24:42:122: Starting PPP on link with IfType=0x2,IPIf=0x9,IPv6If=0xffffffff [2644] 11-06 20:24:42:122: RasGetBuffer returned aa2b7b40 for SendBuf [2644] 11-06 20:24:42:122: FsmInit called for protocol = c021, port = 0 [2644] 11-06 20:24:42:122: FsmInit for protocol = c021 Configuration 0x9830208 [2644] 11-06 20:24:42:122: PPP ConfigMask 0x9830208 [2644] 11-06 20:24:42:122: PPP ConfigMask = 9830208 [2644] 11-06 20:24:42:122: PPP ConfigMask = 9830208 [2644] 11-06 20:24:42:122: APs available = e [2644] 11-06 20:24:42:122: FsmReset called for protocol = c021, port = 0 [2644] 11-06 20:24:42:122: Inserting port in bucket # 0 [2644] 11-06 20:24:42:122: Inserting bundle in bucket # 14 [2644] 11-06 20:24:42:122: FsmOpen event received for protocol c021 on port 0 [2644] 11-06 20:24:42:122: FsmThisLayerStarted called for protocol = c021, port = 0 [2644] 11-06 20:24:42:122: FsmUp event received for protocol c021 on port 0 [2644] 11-06 20:24:42:122: <PPP packet sent at 11/06/2013 12:24:42:122 [2644] 11-06 20:24:42:122: <Protocol = LCP, Type = Configure-Req, Length = 0x17, Id = 0x0, Port = 0 [2644] 20:24:42:122: <C0 21 01 00 00 15 01 04 05 C8 05 06 0A 07 5A 46 |.!............ZF| [2644] 20:24:42:122: <07 02 08 02 0D 03 06 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:122: [2644] 11-06 20:24:42:122: InsertInTimerQ called portid=26,Id=0,Protocol=c021,EventType=0,fAuth=0,Timeout=1 [2644] 11-06 20:24:42:122: InsertInTimerQ called portid=26,Id=0,Protocol=0,EventType=3,fAuth=0,Timeout=150 [2580] 11-06 20:24:42:186: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:186: >PPP packet received at 11/06/2013 12:24:42:186 [2644] 11-06 20:24:42:186: >Protocol = LCP, Type = Configure-Req, Length = 0x28, Id = 0xfb, Port = 0 [2644] 20:24:42:186: >C0 21 01 FB 00 12 01 04 05 D4 03 04 C0 23 05 06 |.!...........#..| [2644] 20:24:42:186: >61 30 7D BC 00 00 00 00 00 00 00 00 00 00 00 00 |a0}.............| [2644] 20:24:42:186: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:186: [2644] 11-06 20:24:42:186: CheckOption: Negotiated Options 2 [2644] 11-06 20:24:42:186: CheckOption: Negotiated Options a [2644] 11-06 20:24:42:186: CheckOption: Negotiated Options 2a [2644] 11-06 20:24:42:186: <PPP packet sent at 11/06/2013 12:24:42:186 [2644] 11-06 20:24:42:186: <Protocol = LCP, Type = Configure-Ack, Length = 0x14, Id = 0xfb, Port = 0 [2644] 20:24:42:186: <C0 21 02 FB 00 12 01 04 05 D4 03 04 C0 23 05 06 |.!...........#..| [2644] 20:24:42:186: <61 30 7D BC 00 00 00 00 00 00 00 00 00 00 00 00 |a0}.............| [2644] 11-06 20:24:42:186: [2580] 11-06 20:24:42:186: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:186: >PPP packet received at 11/06/2013 12:24:42:186 [2644] 11-06 20:24:42:186: >Protocol = LCP, Type = Configure-Reject, Length = 0x28, Id = 0x0, Port = 0 [2644] 20:24:42:186: >C0 21 04 00 00 07 0D 03 06 00 00 00 00 00 00 00 |.!..............| [2644] 20:24:42:186: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 20:24:42:186: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:186: [2644] 11-06 20:24:42:186: RemoveFromTimerQ called portid=26,Id=0,Protocol=c021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:186: <PPP packet sent at 11/06/2013 12:24:42:186 [2644] 11-06 20:24:42:186: <Protocol = LCP, Type = Configure-Req, Length = 0x14, Id = 0x1, Port = 0 [2644] 20:24:42:186: <C0 21 01 01 00 12 01 04 05 C8 05 06 0A 07 5A 46 |.!............ZF| [2644] 20:24:42:186: <07 02 08 02 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:186: [2644] 11-06 20:24:42:186: InsertInTimerQ called portid=26,Id=1,Protocol=c021,EventType=0,fAuth=0,Timeout=1 [2580] 11-06 20:24:42:202: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:202: >PPP packet received at 11/06/2013 12:24:42:202 [2644] 11-06 20:24:42:202: >Protocol = LCP, Type = Configure-Ack, Length = 0x28, Id = 0x1, Port = 0 [2644] 20:24:42:202: >C0 21 02 01 00 12 01 04 05 C8 05 06 0A 07 5A 46 |.!............ZF| [2644] 20:24:42:202: >07 02 08 02 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 20:24:42:202: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:202: [2644] 11-06 20:24:42:202: RemoveFromTimerQ called portid=26,Id=1,Protocol=c021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:202: FsmThisLayerUp called for protocol = c021, port = 0 [2644] 11-06 20:24:42:202: LCP Local Options------------- [2644] 11-06 20:24:42:202: MRU=1480,ACCM=-1,Auth=0,MagicNumber=168254022,PFC=ON,ACFC=ON [2644] 11-06 20:24:42:202: Recv Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=0 [2644] 11-06 20:24:42:202: LCP Remote Options------------- [2644] 11-06 20:24:42:202: MRU=1492,ACCM=-1,Auth=c023,MagicNumber=1630567868,PFC=OFF,ACFC=OFF [2644] 11-06 20:24:42:202: Send Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=0 [2644] 11-06 20:24:42:202: LCP Configured successfully [2644] 11-06 20:24:42:202: Sending Version Identification MSRASV5.20 [2644] 11-06 20:24:42:202: <PPP packet sent at 11/06/2013 12:24:42:202 [2644] 11-06 20:24:42:202: <Protocol = LCP, Type = Identification, Length = 0x14, Id = 0x2, Port = 0 [2644] 20:24:42:202: <C0 21 0C 02 00 12 0A 07 5A 46 4D 53 52 41 53 56 |.!......ZFMSRASV| [2644] 20:24:42:202: <35 2E 32 30 00 00 00 00 00 00 00 00 00 00 00 00 |5.20............| [2644] 11-06 20:24:42:202: [2644] 11-06 20:24:42:202: Sending ComputerName Identification MSRAS-0-WIN-T30OEFTJKRE [2644] 11-06 20:24:42:202: <PPP packet sent at 11/06/2013 12:24:42:202 [2644] 11-06 20:24:42:202: <Protocol = LCP, Type = Identification, Length = 0x21, Id = 0x3, Port = 0 [2644] 20:24:42:202: <C0 21 0C 03 00 1F 0A 07 5A 46 4D 53 52 41 53 2D |.!......ZFMSRAS-| [2644] 20:24:42:202: <30 2D 57 49 4E 2D 54 33 30 4F 45 46 54 4A 4B 52 |0-WIN-T30OEFTJKR| [2644] 20:24:42:202: <45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |E...............| [2644] 11-06 20:24:42:202: [2644] 11-06 20:24:42:202: Client: LCP Configured successfully for Guid {BA33411D-ECDC-41F2-9F73-396BBD3D5DD2} [2644] 11-06 20:24:42:202: Sending Correlation Guid {BA33411D-ECDC-41F2-9F73-396BBD3D5DD2} [2644] 11-06 20:24:42:202: <PPP packet sent at 11/06/2013 12:24:42:202 [2644] 11-06 20:24:42:202: <Protocol = LCP, Type = Identification, Length = 0x1a, Id = 0x4, Port = 0 [2644] 20:24:42:202: <C0 21 0C 04 00 18 0A 07 5A 46 1D 41 33 BA DC EC |.!......ZF.A3...| [2644] 20:24:42:202: <F2 41 9F 73 39 6B BD 3D 5D D2 00 00 00 00 00 00 |.A.s9k.=].......| [2644] 11-06 20:24:42:202: [2644] 11-06 20:24:42:202: Authenticating phase started [2644] 11-06 20:24:42:202: Calling APWork in APStart [2644] 11-06 20:24:42:202: <PPP packet sent at 11/06/2013 12:24:42:202 [2644] 11-06 20:24:42:202: <Protocol = PAP, Type = Protocol specific, Length = 0x1a, Id = 0xd, Port = 0 [2644] 11-06 20:24:42:202: [2644] 11-06 20:24:42:202: InsertInTimerQ called portid=26,Id=13,Protocol=c023,EventType=0,fAuth=0,Timeout=1 [2580] 11-06 20:24:42:386: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:386: >PPP packet received at 11/06/2013 12:24:42:386 [2644] 11-06 20:24:42:386: >Protocol = PAP, Type = Protocol specific, Length = 0x28, Id = 0xd, Port = 0 [2644] 11-06 20:24:42:386: [2644] 11-06 20:24:42:386: RemoveFromTimerQ called portid=26,Id=13,Protocol=c023,EventType=0,fAuth=0 [2644] 11-06 20:24:42:386: FsmThisLayerUp called for protocol = c023, port = 0 [2644] 11-06 20:24:42:386: NotifyCaller(hPort=0, dwMsgId=21) [2644] 11-06 20:24:42:386: NotifyCaller(hPort=0, dwMsgId=3) [2644] 11-06 20:24:42:386: FsmInit called for protocol = 80fd, port = 0 [2644] 11-06 20:24:42:386: FsmInit for protocol = 80fd Configuration 0x9830208 [2644] 11-06 20:24:42:386: FsmInit for protocol = 80fd failed with error 731 [2644] 11-06 20:24:42:386: FsmInit called for protocol = 8021, port = 0 [2644] 11-06 20:24:42:386: FsmInit for protocol = 8021 Configuration 0x9830208 [2644] 11-06 20:24:42:386: InsertInTimerQ called portid=26,Id=0,Protocol=8021,EventType=8,fAuth=0,Timeout=9 [2644] 11-06 20:24:42:386: FsmReset called for protocol = 8021, port = 0 [2644] 11-06 20:24:42:386: FsmOpen event received for protocol 8021 on port 0 [2644] 11-06 20:24:42:386: FsmThisLayerStarted called for protocol = 8021, port = 0 [2644] 11-06 20:24:42:386: FsmUp event received for protocol 8021 on port 0 [2644] 11-06 20:24:42:386: <PPP packet sent at 11/06/2013 12:24:42:386 [2644] 11-06 20:24:42:386: <Protocol = IPCP, Type = Configure-Req, Length = 0x24, Id = 0x5, Port = 0 [2644] 20:24:42:386: <80 21 01 05 00 22 03 06 00 00 00 00 81 06 00 00 |.!..."..........| [2644] 20:24:42:386: <00 00 82 06 00 00 00 00 83 06 00 00 00 00 84 06 |................| [2644] 20:24:42:386: <00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:386: [2644] 11-06 20:24:42:386: InsertInTimerQ called portid=26,Id=5,Protocol=8021,EventType=0,fAuth=0,Timeout=1 [2580] 11-06 20:24:42:402: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:402: >PPP packet received at 11/06/2013 12:24:42:402 [2644] 11-06 20:24:42:402: >Protocol = IPCP, Type = Configure-Reject, Length = 0x28, Id = 0x5, Port = 0 [2644] 20:24:42:402: >80 21 04 05 00 10 82 06 00 00 00 00 84 06 00 00 |.!..............| [2644] 20:24:42:402: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 20:24:42:402: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:402: [2644] 11-06 20:24:42:402: RemoveFromTimerQ called portid=26,Id=5,Protocol=8021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:402: <PPP packet sent at 11/06/2013 12:24:42:402 [2644] 11-06 20:24:42:402: <Protocol = IPCP, Type = Configure-Req, Length = 0x18, Id = 0x6, Port = 0 [2644] 20:24:42:402: <80 21 01 06 00 16 03 06 00 00 00 00 81 06 00 00 |.!..............| [2644] 20:24:42:402: <00 00 83 06 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:402: [2644] 11-06 20:24:42:402: InsertInTimerQ called portid=26,Id=6,Protocol=8021,EventType=0,fAuth=0,Timeout=1 [2580] 11-06 20:24:42:402: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:402: >PPP packet received at 11/06/2013 12:24:42:402 [2644] 11-06 20:24:42:402: >Protocol = IPCP, Type = Configure-Nak, Length = 0x28, Id = 0x6, Port = 0 [2644] 20:24:42:402: >80 21 03 06 00 16 03 06 7C 4F EC 3C 81 06 B4 A8 |.!......|O.<....| [2644] 20:24:42:402: >FF 76 83 06 74 E4 6F 12 00 00 00 00 00 00 00 00 |.v..t.o.........| [2644] 20:24:42:402: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:402: [2644] 11-06 20:24:42:402: RemoveFromTimerQ called portid=26,Id=6,Protocol=8021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:402: <PPP packet sent at 11/06/2013 12:24:42:402 [2644] 11-06 20:24:42:402: <Protocol = IPCP, Type = Configure-Req, Length = 0x18, Id = 0x7, Port = 0 [2644] 20:24:42:402: <80 21 01 07 00 16 03 06 7C 4F EC 3C 81 06 B4 A8 |.!......|O.<....| [2644] 20:24:42:402: <FF 76 83 06 74 E4 6F 12 00 00 00 00 00 00 00 00 |.v..t.o.........| [2644] 11-06 20:24:42:402: [2644] 11-06 20:24:42:402: InsertInTimerQ called portid=26,Id=7,Protocol=8021,EventType=0,fAuth=0,Timeout=1 [2580] 11-06 20:24:42:402: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:402: >PPP packet received at 11/06/2013 12:24:42:402 [2644] 11-06 20:24:42:402: >Protocol = IPCP, Type = Configure-Ack, Length = 0x28, Id = 0x7, Port = 0 [2644] 20:24:42:402: >80 21 02 07 00 16 03 06 7C 4F EC 3C 81 06 B4 A8 |.!......|O.<....| [2644] 20:24:42:402: >FF 76 83 06 74 E4 6F 12 00 00 00 00 00 00 00 00 |.v..t.o.........| [2644] 20:24:42:402: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:402: [2644] 11-06 20:24:42:402: RemoveFromTimerQ called portid=26,Id=7,Protocol=8021,EventType=0,fAuth=0 [2580] 11-06 20:24:42:483: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:483: >PPP packet received at 11/06/2013 12:24:42:483 [2644] 11-06 20:24:42:483: >Protocol = IPCP, Type = Configure-Req, Length = 0x28, Id = 0x4c, Port = 0 [2644] 20:24:42:483: >80 21 01 4C 00 0A 03 06 7C 4A 00 F4 00 00 00 00 |.!.L....|J......| [2644] 20:24:42:483: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 20:24:42:483: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:483: [2644] 11-06 20:24:42:483: <PPP packet sent at 11/06/2013 12:24:42:483 [2644] 11-06 20:24:42:483: <Protocol = IPCP, Type = Configure-Ack, Length = 0xc, Id = 0x4c, Port = 0 [2644] 20:24:42:483: <80 21 02 4C 00 0A 03 06 7C 4A 00 F4 00 00 00 00 |.!.L....|J......| [2644] 11-06 20:24:42:483: [2644] 11-06 20:24:42:483: FsmThisLayerUp called for protocol = 8021, port = 0 [2644] 11-06 20:24:42:483: RemoveFromTimerQ called portid=26,Id=7,Protocol=8021,EventType=8,fAuth=0 [2644] 11-06 20:24:42:605: Notifying IPCP of projection notification [2644] 11-06 20:24:42:605: Client: Ipv4 successful for Guid {BA33411D-ECDC-41F2-9F73-396BBD3D5DD2} [2644] 11-06 20:24:42:605: RemoveFromTimerQ called portid=26,Id=0,Protocol=0,EventType=3,fAuth=0 [2644] 11-06 20:24:42:605: NotifyCaller(hPort=0, dwMsgId=4) [2644] 11-06 20:24:42:605: NotifyCaller(hPort=0, dwMsgId=0) [2644] 11-06 20:24:42:605: Inserting autodisconnect in timer q for port=0, sec=300 [2644] 11-06 20:24:42:605: RemoveFromTimerQ called portid=26,Id=0,Protocol=0,EventType=1,fAuth=0 [2644] 11-06 20:24:42:605: InsertInTimerQ called portid=26,Id=0,Protocol=0,EventType=1,fAuth=0,Timeout=300 [2644] 11-06 20:24:42:605: LCPEchoTimeout = 300 [2644] 11-06 20:24:42:605: InsertInTimerQ called portid=26,Id=0,Protocol=0,EventType=7,fAuth=0,Timeout=300 [2456] 11-06 20:24:42:621: PROTOCOL_MSG_Stop recvd [2644] 11-06 20:24:42:621: FsmClose event received for protocol c021 on port 0 [2644] 11-06 20:24:42:621: RemoveFromTimerQ called portid=26,Id=1,Protocol=c021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:621: FsmThisLayerDown called for protocol = c021, port = 0 [2644] 11-06 20:24:42:621: FsmDown event received for protocol 8021 on port 0 [2644] 11-06 20:24:42:621: RemoveFromTimerQ called portid=26,Id=7,Protocol=8021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:621: FsmThisLayerDown called for protocol = 8021, port = 0 [2644] 11-06 20:24:42:621: RemoveFromTimerQ called portid=26,Id=7,Protocol=8021,EventType=8,fAuth=0 [2644] 11-06 20:24:42:621: FsmReset called for protocol = 8021, port = 0 [2644] 11-06 20:24:42:621: RemoveFromTimerQ called portid=26,Id=13,Protocol=c023,EventType=0,fAuth=0 [2644] 11-06 20:24:42:621: RemoveFromTimerQ called portid=26,Id=0,Protocol=c029,EventType=0,fAuth=0 [2644] 11-06 20:24:42:621: <PPP packet sent at 11/06/2013 12:24:42:621 [2644] 11-06 20:24:42:621: <Protocol = LCP, Type = Terminate-Req, Length = 0x12, Id = 0x8, Port = 0 [2644] 20:24:42:621: <C0 21 05 08 00 10 0A 07 5A 46 00 3C CD 74 00 00 |.!......ZF.<.t..| [2644] 20:24:42:621: <00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:621: [2644] 11-06 20:24:42:621: InsertInTimerQ called portid=26,Id=8,Protocol=c021,EventType=0,fAuth=0,Timeout=1 [2580] 11-06 20:24:42:621: Packet received (40 bytes) for hPort 0 [2644] 11-06 20:24:42:621: >PPP packet received at 11/06/2013 12:24:42:621 [2644] 11-06 20:24:42:621: >Protocol = LCP, Type = Terminate-Ack, Length = 0x28, Id = 0x8, Port = 0 [2644] 20:24:42:621: >C0 21 06 08 00 04 00 00 00 00 00 00 00 00 00 00 |.!..............| [2644] 20:24:42:621: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 20:24:42:621: >00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [2644] 11-06 20:24:42:621: [2644] 11-06 20:24:42:621: RemoveFromTimerQ called portid=26,Id=8,Protocol=c021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:621: FsmThisLayerFinished called for protocol = c021, port = 0 [2644] 11-06 20:24:42:652: FsmThisLayerFinished called for protocol = 8021, port = 0: 0 [2644] 11-06 20:24:42:652: NotifyCaller(hPort=0, dwMsgId=10) [2580] 11-06 20:24:42:652: PROTOCOL_MSG_LineDown recvd, hPort=0 [2644] 11-06 20:24:42:652: Line down event occurred on port 0 [2644] 11-06 20:24:42:652: FsmDown event received for protocol c021 on port 0 [2644] 11-06 20:24:42:652: RemoveFromTimerQ called portid=26,Id=8,Protocol=c021,EventType=0,fAuth=0 [2644] 11-06 20:24:42:652: FsmReset called for protocol = c021, port = 0 [2644] 11-06 20:24:42:652: RemoveFromTimerQ called portid=26,Id=0,Protocol=0,EventType=3,fAuth=0 [2644] 11-06 20:24:42:652: RemoveFromTimerQ called portid=26,Id=0,Protocol=0,EventType=7,fAuth=0 [2644] 11-06 20:24:42:652: RemoveFromTimerQ called portid=26,Id=0,Protocol=0,EventType=2,fAuth=0 [2644] 11-06 20:24:42:652: RemoveFromTimerQ called portid=26,Id=0,Protocol=0,EventType=1,fAuth=0 [2644] 11-06 20:24:42:652: RemoveFromTimerQ called portid=26,Id=0,Protocol=c029,EventType=0,fAuth=0 [2644] 11-06 20:24:42:652: LcpEnd [2644] 11-06 20:24:42:652: Post line down event occurred on port 0 [2644] 11-06 20:24:42:652: NotifyCaller(hPort=0, dwMsgId=26) [3992] 11-06 20:27:25:137: PppDdmDeInit: waiting for auth-acct providers

November 6th, 2013 12:54pm

Similar problem over here. Reinstalled a new VPN Server with 2012 R2 and everything works fine BUT some Windows 7 clients which are absolutely unable to connect to the vpn server. They stand there validating credentials and eventually time out. Sometimes I get error 718 ou 0x80092013 about a revocation server.

Tested from various networks with tons of machines and all work fine except those Win7 machines. Cannot identity the difference between a working Win7 and a non-working one.

My PPP log is looking quite similar with the PROTOCOL_MSG_LineDown recvd, hPort=130 line....

Will monitor this thread for help!

Free Windows Admin Tool Kit Click here and download it now

November 20th, 2013 9:07pm

Hi all,

same Problem with RRAS trying to setup a PPPoE connection to a secondary ISP in Hyper-V guest.

The host is running Windows Server 2012 R2 Datacenter with all available updates.

The connection worked in Windows Server 2012 (host and guest). It worked after upgrading the host to R2.
After upgrading the guest to R2 no more connections are made.

Are there any news about this problem?

To test, i brought up a new 2012 (not R2) guest and set up the connection successfully, so there is
no problem at the ISP or my network end.

Thanks in advance,

Jrg

December 9th, 2013 10:57am

has anyone found a fix for this?

Free Windows Admin Tool Kit Click here and download it now

March 29th, 2014 3:29pm

can anyone post the patched mprddm.dll (as above) or tell the most simple and quickest way to decompile and recompile mprddm.dll?

March 30th, 2014 6:46pm

It seems like this is still broken - does anyone have a work around or the modified mprddm.dll ? I feel like this is actually not going to be fixed (or not any time soon).

Free Windows Admin Tool Kit Click here and download it now

August 14th, 2014 9:53am

Nice research!

I confirm it fixed the problem. I was almost at the point of going back to 2008, but with this patch I need not.

The exact place to apply the patch is (for mprddm.dll version 6.3.9600.16384 as of mine) at offset 0x0001856d - replace byte 74 with EB, which corresponds to unconditional jump instruction replacing 'jump if equal' for those who are curious. Apparently only x64 version (at C:\Windows\System32) needs patching.

Thanks again, tiamo!

PS: Microsoft dev guys: please make this not that hard

August 31st, 2014 3:22pm

I am using 2012R2 EVAL, and have the same problem as the OP. SERVER nic1-LAN nic2-Router in Bridge mode CAN connect using a (user owned) PPPoE "Broadband connection" configured via ControlPanel\ConnectToTheInternet (xwizard.exe). CANNOT connect using RRAS demand-dial interface. Was just about to get my hands dirty with a hex editor when a quick version check shows my C:\Windows\System32\mprddm.dll as v 6.3.9600.17415. So again, on goes the handbrake. I have run this setup since 2003 server without issue. Internet caf (remember those?) would run 40 heavy users for months at a time without disconnection, whereas the SoHo routers fall over daily when put under that much load. Using the router as a 'media converter' and letting the more powerful PC do the routing. Memories aside, how am I going to sell the product if it is broken? Wasted a couple of days on this, ending up at this thread.

Free Windows Admin Tool Kit Click here and download it now

December 12th, 2014 9:33am

I am using 2012R2 , and have the same problem and receive this error in event Viewer: "RoutingDomainID- {00000000-0000-0000-0000-000000000000}: A Demand Dial connection to the remote interface RDS on port PPPoE4-0 was successfully initiated but failed to complete successfully because of the following error: The connection was closed by the remote computer."

windows is up to date.

January 29th, 2015 8:51pm

I am having exactly the same issues as what has already been mentioned in this thread. Has anyone successfully managed to patch the newest mprddm.dll in Windows Server 2012 R2? The offsets are different to what has been stated above, assumedly because there is now a newer mprddm.dll file of which the data within the library is now in different place. It is like looking for a needle in a haystack for the correct offset. It is becoming frustrating that I can't use PPPoE with Windows RRAS. It's pretty poor that Microsoft have not resolved this issue after all of this time.

Any suggestions on how to resolve this are most welcome.

Free Windows Admin Tool Kit Click here and download it now

May 12th, 2015 9:16pm

I managed to find the correct version of the dll and edit it successfully and it is working for me. This is only on my setup at home so use this in production at your own risk.

https://dl.dropboxusercontent.com/u/1461074/mprddm-patched.dll

May 21st, 2015 1:58am

tiamo and HBuckle - you're my heroes. This has fixed 3G modem via RRAS for me - symptoms were identical to the PPPoE problem. It's really odd the MS doesn't fix that, given that it is a simple fix and quite certainly has no ill side-effects.

Free Windows Admin Tool Kit Click here and download it now

August 8th, 2015 12:23pm

This topic is archived. No further replies will be accepted.
Other recent topics