Траблы с mtu в mpd5

[hm]

Недавно столкнулся с траблой на ВПН серваке, бывает так, что у юзеров коннект остается а пакеты в тоннеле не ходят.
В логах

Код: Выделить всё

nd6_setmtu0: new link MTU on ng44 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng478 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng547 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng705 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng736 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng162 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng393 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng768 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng771 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng776 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng778 (1218) is too small for IPv6
ng_mppc_decompress: decomp returned 0x0
ng_mppc_decompress: decomp returned 0x0
nd6_setmtu0: new link MTU on ng584 (1218) is too small for IPv6
ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xd3f16e00!

Чес говоря ничего не наглулилось. Может кто сталкивался с траблой?

Код: Выделить всё

vpn# mpd5 -v
Version 5.4

Код: Выделить всё

vpn# uname -a
FreeBSD 7.2-RELEASE FreeBSD 7.2-RELEASE #2

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[FreeBSP]

в таких случаях принято показывать конфиги, почитайте хендбук о том как правильно задать вопрос

(телепатирую) если указан такй низкий MTU в конфиге, подумайте почему это сделано и стоит ли его менять
если подняли но ipv6 всеравно не бегает, то можно попытаться определить машину где он застревает и поругаться с ее админом

ну и самое простое - убрать из ядра

Код: Выделить всё

option IPV6
option SCTP

- нередко ipv6 просто не нужен
или ipv6 у вас для ipsec внутри pptp?

[hm]

Конфиг ядра

Код: Выделить всё

cpu             I686_CPU
ident           NAS

# To statically compile in device wiring instead of /boot/device.hints
#hints          "GENERIC.hints"         # Default places to look for devices.

makeoptions     DEBUG=-g                # Build kernel with gdb(1) debug symbols

options         SCHED_ULE               # ULE scheduler
options         PREEMPTION              # Enable kernel thread preemption
options         INET                    # InterNETworking
options         INET6                   # IPv6 communications protocols
options         SCTP                    # Stream Control Transmission Protocol
options         FFS                     # Berkeley Fast Filesystem
options         SOFTUPDATES             # Enable FFS soft updates support
options         UFS_ACL                 # Support for access control lists
options         UFS_DIRHASH             # Improve performance on big directories
options         UFS_GJOURNAL            # Enable gjournal-based UFS journaling
options         MD_ROOT                 # MD is a potential root device
options         CD9660                  # ISO 9660 Filesystem
options         PROCFS                  # Process filesystem (requires PSEUDOFS)
options         PSEUDOFS                # Pseudo-filesystem framework
options         GEOM_PART_GPT           # GUID Partition Tables.
options         GEOM_LABEL              # Provides labelization
options         COMPAT_43TTY            # BSD 4.3 TTY compat [KEEP THIS!]
options         COMPAT_FREEBSD4         # Compatible with FreeBSD4
options         COMPAT_FREEBSD5         # Compatible with FreeBSD5
options         COMPAT_FREEBSD6         # Compatible with FreeBSD6
options         SCSI_DELAY=5000         # Delay (in ms) before probing SCSI
options         KTRACE                  # ktrace(1) support
options         STACK                   # stack(9) support
options         SYSVSHM                 # SYSV-style shared memory
options         SYSVMSG                 # SYSV-style message queues
options         SYSVSEM                 # SYSV-style semaphores
options         _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options         KBD_INSTALL_CDEV        # install a CDEV entry in /dev
options         ADAPTIVE_GIANT          # Giant mutex is adaptive.
options         STOP_NMI                # Stop CPUS using NMI instead of IPI
options         AUDIT                   # Security event auditing
#options        KDTRACE_HOOKS           # Kernel DTrace hooks

# FIREWALL
options         IPFIREWALL              #firewall
options         IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
#options         IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by default
options         IPDIVERT
options         IPFIREWALL_FORWARD
options         DUMMYNET
options         IPFIREWALL_NAT          #ipfw kernel nat support
options         LIBALIAS

# netgraph(4).
options         NETGRAPH                # netgraph(4) system
#options         NETGRAPH_DEBUG          # enable extra debugging, this

# Node types
#options         NETGRAPH_ASYNC
#options         NETGRAPH_ATMLLC
#options         NETGRAPH_ATM_ATMPIF
#options         NETGRAPH_BLUETOOTH              # ng_bluetooth(4)
#options         NETGRAPH_BLUETOOTH_BT3C         # ng_bt3c(4)
#options         NETGRAPH_BLUETOOTH_H4           # ng_h4(4)
#options         NETGRAPH_BLUETOOTH_HCI          # ng_hci(4)
#options         NETGRAPH_BLUETOOTH_L2CAP        # ng_l2cap(4)
#options         NETGRAPH_BLUETOOTH_SOCKET       # ng_btsocket(4)
#options         NETGRAPH_BLUETOOTH_UBT          # ng_ubt(4)
#options         NETGRAPH_BLUETOOTH_UBTBCMFW     # ubtbcmfw(4)
options         NETGRAPH_BPF
options         NETGRAPH_BRIDGE
options         NETGRAPH_CAR
options         NETGRAPH_CISCO
options         NETGRAPH_DEFLATE
options         NETGRAPH_DEVICE
options         NETGRAPH_ECHO
options         NETGRAPH_EIFACE
options         NETGRAPH_ETHER
options         NETGRAPH_FEC
options         NETGRAPH_FRAME_RELAY
#options         NETGRAPH_GIF
#options         NETGRAPH_GIF_DEMUX
#options         NETGRAPH_HOLE
options         NETGRAPH_IFACE
options         NETGRAPH_IP_INPUT
options         NETGRAPH_IPFW
options         NETGRAPH_KSOCKET
options         NETGRAPH_L2TP
options         NETGRAPH_LMI
options         NETGRAPH_MPPC_ENCRYPTION
options         NETGRAPH_MPPC_COMPRESSION
options         NETGRAPH_NETFLOW
options         NETGRAPH_NAT
options         NETGRAPH_ONE2MANY
options         NETGRAPH_PPP
options         NETGRAPH_PPPOE
options         NETGRAPH_PPTPGRE
options         NETGRAPH_PRED1
options         NETGRAPH_RFC1490
options         NETGRAPH_SOCKET
options         NETGRAPH_SPLIT
options         NETGRAPH_SPPP
options         NETGRAPH_TAG
options         NETGRAPH_TCPMSS
options         NETGRAPH_TEE
options         NETGRAPH_TTY
options         NETGRAPH_UI
options         NETGRAPH_VJC
# To make an SMP kernel, the next two lines are needed
options         SMP                     # Symmetric MultiProcessor Kernel
options         PAE

device          apic                    # I/O APIC

# CPU frequency control
device          cpufreq

# Bus support.
device          eisa
device          pci

# ATA and ATAPI devices
device          ata
device          atadisk         # ATA disk drives
device          atapicd         # ATAPI CDROM drives
options         ATA_STATIC_ID   # Static device numbering

# atkbdc0 controls both the keyboard and the PS/2 mouse
device          atkbdc          # AT keyboard controller
device          atkbd           # AT keyboard

# syscons is the default console driver, resembling an SCO console
device          sc

device          agp             # support several AGP chipsets

device          vga

# Power management support (see NOTES for more options)
#device         apm
# Add suspend/resume support for the i8254.
device          pmtimer

# Serial (COM) ports
device          sio             # 8250, 16[45]50 based serial ports
device          uart            # Generic UART driver

# Parallel port
device          ppc
device          ppbus           # Parallel port bus (required)
device          lpt             # Printer
device          plip            # TCP/IP over parallel
device          ppi             # Parallel port interface device
#device         vpo             # Requires scbus and da

# If you've got a "dumb" serial or parallel PCI card that is
# supported by the puc(4) glue driver, uncomment the following
# line to enable it (connects to sio, uart and/or ppc drivers):
#device         puc

device          miibus
device          vr
device          em

# Pseudo devices.
device          loop            # Network loopback
device          random          # Entropy device
device          ether           # Ethernet support
device          sl              # Kernel SLIP
device          ppp             # Kernel PPP
device          tun             # Packet tunnel.
device          pty             # Pseudo-ttys (telnet etc)
device          md              # Memory "disks"
device          gif             # IPv6 and IPv4 tunneling
device          faith           # IPv6-to-IPv4 relaying (translation)
device          firmware        # firmware assist module

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device          bpf             # Berkeley packet filter

mpd.conf

Код: Выделить всё

startup:
        set console self 127.0.0.1 5005
        set console open
        set web self 10.10.0.22 8000
        set web open
        set user uzer porol admin
        set netflow peer 192.168.100.1 9996
        set netflow self 192.168.100.22 9990
        set netflow timeouts 5 5

default:
        load pptp_server
        log -console -ipcp -lcp -bund -link +auth -ecp -ipv6cp -iface -phys -ccp -fsm -chat -radius -rep

pptp_server:
        set ippool add pool1 172.16.0.50 172.16.0.254

        create bundle template B
#       set iface disable on-demand
        set iface enable proxy-arp
        set iface idle 0
        set iface enable tcpmssfix
        set iface enable netflow-out
        set iface enable netflow-in
        set iface enable tee
        set ipcp yes vjcomp

#       set ipcp ranges 172.16.0.1/32 ippool pool1
        set ipcp ranges 172.16.0.1/32 0.0.0.0/0
        set ipcp dns 81.24.87.22 81.24.83.2
        set ipcp yes req-pri-dns
        set ipcp yes req-sec-dns

# Enable Microsoft Point-to-Point encryption (MPPE)
        set bundle enable compression
        set ccp yes mppc
        set mppc yes compress e40 e128 stateless

        create link template L pptp
        set link enable multilink
        set link yes acfcomp protocomp
        set link yes crypt-reqd

        set link action bundle B
        set link no pap chap eap
        set link enable chap-msv1
        set link enable chap-msv2

        set link keep-alive 0 0
        set link mtu 1460
        set pptp self 10.10.0.22
        set link enable incoming
        load radius

radius:
# or specify the server directly here
        set radius server 192.168.100.1 sec-sec 1812 1813
        set radius retries 5
        set radius timeout 10
#       set radius me 192.168.100.1
        set auth acct-update 300
        set auth enable radius-auth
        set auth enable radius-acct
        set radius enable message-authentic
        set link enable peer-as-calling

[FreeBSP]

во первых, вы не ответили, нужен ли вам ipv6, так что повторю предложение убрать ipv6 из ядра(вот эти строчки)

Код: Выделить всё

options         INET6                   # IPv6 communications protocols
options         SCTP                    # Stream Control Transmission Protocol

судя по конфигам, он у вас не используется

во вторых, обновите систему, в ветке 7.2-RELEASE последний патч -p7, а в -p1 что то правили в ipv6:

Код: Выделить всё

  51 20090610:       p1      FreeBSD-SA-09:09.pipe, FreeBSD-SA-09:10.ipv6,
  52                         FreeBSD-SA-09:11.ntpd
  53         Prevent integer overflow in direct pipe write code from circumventing
  54         virtual-to-physical page lookups. [09:09]
  55
  56         Add missing permissions check for SIOCSIFINFO_IN6 ioctl. [09:10]
  57
  58         Fix buffer overflow in "autokey" negotiation in ntpd(8). [09:11]

может из-за этого у вас такие щи
также стоит заметить, что обычно советуют обновляться сразу до стейбла, который кстати уже в 7.3

[hm]

Извиняюсь, ipv6 не используется.
Попытаюсь обновить сиситему и mpd.

[FreeBSP]

уберите ipv6 и обновитесь хотя бы в рамках 7.2, думаю проблема решится

[hm]

Теперь в логах такое пишется

Код: Выделить всё

May 11 08:30:14 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xc9199a00!
May 11 08:30:14 subnet-vpn kernel: 
May 11 08:30:42 subnet-vpn kernel: ng_mppc_decompress: too many (4045) packets dropped, disabling node 0xd220a600!
May 11 08:30:42 subnet-vpn kernel: 
May 11 08:42:28 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xce524400!
May 11 08:42:28 subnet-vpn kernel: 
May 11 08:50:19 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xc8cda180!
May 11 08:50:19 subnet-vpn kernel: 
May 11 08:54:54 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xc947d580!
May 11 08:54:54 subnet-vpn kernel: 
May 11 09:06:45 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xcf974e80!
May 11 09:06:45 subnet-vpn kernel: 
May 11 09:34:05 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xd3ed6b00!
May 11 09:34:05 subnet-vpn kernel: 
May 11 09:38:38 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xcdfd7200!

[FreeBSP]

дропается скорее всего тот же самый ipv6
поищите откуда он берется

[hm]

хмм, странно. не я один похоже с этой страблой. У меня бывает так, что сервак зависает, в логах пусто.

[FreeBSP]

раскочегарь /var/log/all.log
то-бишь строчку с ним раскомменти в /etc/syslogd.conf
и ротацию настрой - у меня на ежедневная с хранением последних 35 bz2 логов, а то уж больно прожорливые они - метра за два может переваливать каждый

[hm]

Сервак стабильно зависает раз в неделю. В логи сыпется

Код: Выделить всё

ng_mppc_decompress: decomp returned 0x0

в огромных количествах. Я связываю эту проблему с зависанием.
Логи раскочегарил, и это сообщение появляется сразу после коннекта юзера.
Как же обойти эту проблему?

Код: Выделить всё

vpn# cat /usr/local/etc/mpd5/mpd.conf
startup:
	set console self 127.0.0.1 5005
	set console open
	set web self 10.10.0.22 8000
	set web open
	set user subnet secpass admin
	set netflow peer 192.168.100.1 9996
	set netflow self 192.168.100.22 9990
	set netflow timeouts 5 5

default:
	load pptp_server
	log -console -ipcp -lcp -bund -link +auth -ecp -ipv6cp -iface -phys -ccp -fsm -chat -radius -rep

pptp_server:
	set ippool add pool1 172.16.0.50 172.16.0.254

	create bundle template B
#	set iface disable on-demand
	set iface enable proxy-arp
	set iface idle 0
	set iface enable tcpmssfix
	set iface enable netflow-out
	set iface enable netflow-in
	set iface enable tee
	set ipcp yes vjcomp

#	set ipcp ranges 172.16.0.1/32 ippool pool1
	set ipcp ranges 172.16.0.1/32 0.0.0.0/0
	set ipcp dns 81.24.80.229 81.24.83.2
	set ipcp yes req-pri-dns
	set ipcp yes req-sec-dns

# Enable Microsoft Point-to-Point encryption (MPPE)
	set bundle enable compression
	set bundle disable encryption
	set bundle enable crypt-reqd
	set ccp yes mppc
	set mppc yes compress e40 e128 stateless

	create link template L pptp
	set link enable multilink
	set link yes acfcomp protocomp
	set link yes crypt-reqd

	set link action bundle B
	set link no pap chap eap
	set link enable chap-msv1
	set link enable chap-msv2

	set link keep-alive 0 0
	set link mtu 1460
	set pptp self 10.10.0.22
	set link enable incoming
	load radius

radius:
# or specify the server directly here
	set radius server 192.168.100.1 secpass 1812 1813
	set radius retries 5
	set radius timeout 10
#	set radius me 192.168.100.1
	set auth acct-update 300
	set auth enable radius-auth
	set auth enable radius-acct
	set radius enable message-authentic
	set link enable peer-as-calling

Код: Выделить всё

vpn# uname -a
FreeBSD subnet-vpn.dagtk.net 7.3-STABLE FreeBSD 7.3-STABLE #4: Wed May 26 03:17:52 VOLST 2010  /usr/obj/usr/src/sys/NAS  i386

Код: Выделить всё

subnet-vpn# kldstat 
Id Refs Address    Size     Name
 1    6 0xc0200000 447004   kernel
 2    1 0xc0648000 6a508    acpi.ko
 3    1 0xce44d000 5000     ng_mppc.ko
 4    1 0xce452000 2000     rc4.ko

ng_mppc вынес вмодуль,

Код: Выделить всё

subnet-vpn# cat /usr/src/sys/modules/netgraph/mppc/Makefile 
# $Whistle: Makefile,v 1.1 1999/12/08 20:20:39 archie Exp $
# $FreeBSD: src/sys/modules/netgraph/mppc/Makefile,v 1.14 2006/08/14 13:28:53 des Exp $

KMOD=	ng_mppc
SRCS= 	ng_mppc.c opt_netgraph.h

NETGRAPH_MPPC_COMPRESSION?=	1
NETGRAPH_MPPC_ENCRYPTION?=	1

.if ${NETGRAPH_MPPC_COMPRESSION} > 0
# XXX These files don't exist yet, but hopefully someday they will...
.PATH: ${.CURDIR}/../../../net
SRCS+=	mppcc.c mppcd.c
.endif

.if ${NETGRAPH_MPPC_ENCRYPTION} > 0
.PATH: ${.CURDIR}/../../../crypto
SRCS+= sha1.c
.endif

.if !defined(KERNBUILDDIR)
opt_netgraph.h:
	:> ${.TARGET}
.if ${NETGRAPH_MPPC_COMPRESSION} > 0
	echo "#define NETGRAPH_MPPC_COMPRESSION 1" >> ${.TARGET}
.endif
.if ${NETGRAPH_MPPC_ENCRYPTION} > 0
	echo "#define NETGRAPH_MPPC_ENCRYPTION 1" >> ${.TARGET}
.endif
.endif

.include <bsd.kmod.mk>

Решение проблемы могу оплатить.

[hm]

Код: Выделить всё

subnet-vpn# cat /sys/i386/conf/NAS 
#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the handbook section on
# Kernel Configuration Files:
#
#    http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#

cpu		I686_CPU
ident		NAS

# To statically compile in device wiring instead of /boot/device.hints
#hints		"GENERIC.hints"		# Default places to look for devices.

makeoptions	DEBUG=-g		# Build kernel with gdb(1) debug symbols

options 	SCHED_ULE		# ULE scheduler
options 	PREEMPTION		# Enable kernel thread preemption
options 	INET			# InterNETworking
#options 	INET6			# IPv6 communications protocols
#options 	SCTP			# Stream Control Transmission Protocol
options 	FFS			# Berkeley Fast Filesystem
options 	SOFTUPDATES		# Enable FFS soft updates support
options 	UFS_ACL			# Support for access control lists
options 	UFS_DIRHASH		# Improve performance on big directories
options 	UFS_GJOURNAL		# Enable gjournal-based UFS journaling
options 	MD_ROOT			# MD is a potential root device
options 	CD9660			# ISO 9660 Filesystem
options 	PROCFS			# Process filesystem (requires PSEUDOFS)
options 	PSEUDOFS		# Pseudo-filesystem framework
options 	GEOM_PART_GPT		# GUID Partition Tables.
options 	GEOM_LABEL		# Provides labelization
options 	COMPAT_43TTY		# BSD 4.3 TTY compat [KEEP THIS!]
options 	COMPAT_FREEBSD4		# Compatible with FreeBSD4
options 	COMPAT_FREEBSD5		# Compatible with FreeBSD5
options 	COMPAT_FREEBSD6		# Compatible with FreeBSD6
options 	SCSI_DELAY=5000		# Delay (in ms) before probing SCSI
options 	KTRACE			# ktrace(1) support
options 	STACK			# stack(9) support
options 	SYSVSHM			# SYSV-style shared memory
options 	SYSVMSG			# SYSV-style message queues
options 	SYSVSEM			# SYSV-style semaphores
options 	_KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
options 	ADAPTIVE_GIANT		# Giant mutex is adaptive.
options 	STOP_NMI		# Stop CPUS using NMI instead of IPI
options 	AUDIT			# Security event auditing
#options 	KDTRACE_HOOKS		# Kernel DTrace hooks

# FIREWALL
options         IPFIREWALL              #firewall
options         IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
#options         IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by default
options         IPDIVERT
options         IPFIREWALL_FORWARD
options         DUMMYNET
options         IPFIREWALL_NAT          #ipfw kernel nat support
options         LIBALIAS

# netgraph(4).
options         NETGRAPH                # netgraph(4) system 
#options         NETGRAPH_DEBUG          # enable extra debugging, this 

# Node types 
#options         NETGRAPH_ASYNC 
#options         NETGRAPH_ATMLLC 
#options         NETGRAPH_ATM_ATMPIF 
#options         NETGRAPH_BLUETOOTH              # ng_bluetooth(4) 
#options         NETGRAPH_BLUETOOTH_BT3C         # ng_bt3c(4) 
#options         NETGRAPH_BLUETOOTH_H4           # ng_h4(4) 
#options         NETGRAPH_BLUETOOTH_HCI          # ng_hci(4) 
#options         NETGRAPH_BLUETOOTH_L2CAP        # ng_l2cap(4) 
#options         NETGRAPH_BLUETOOTH_SOCKET       # ng_btsocket(4) 
#options         NETGRAPH_BLUETOOTH_UBT          # ng_ubt(4) 
#options         NETGRAPH_BLUETOOTH_UBTBCMFW     # ubtbcmfw(4) 
options         NETGRAPH_BPF 
options         NETGRAPH_BRIDGE 
options         NETGRAPH_CAR 
options         NETGRAPH_CISCO 
#options         NETGRAPH_DEFLATE 
#options         NETGRAPH_DEVICE 
#options         NETGRAPH_ECHO 
#options         NETGRAPH_EIFACE 
options         NETGRAPH_ETHER 
#options         NETGRAPH_FEC 
#options         NETGRAPH_FRAME_RELAY 
#options         NETGRAPH_GIF 
#options         NETGRAPH_GIF_DEMUX 
#options         NETGRAPH_HOLE 
options         NETGRAPH_IFACE 
#options         NETGRAPH_IP_INPUT 
options         NETGRAPH_IPFW 
options         NETGRAPH_KSOCKET 
#options         NETGRAPH_L2TP 
#options         NETGRAPH_LMI 
#options         NETGRAPH_MPPC_ENCRYPTION
#options         NETGRAPH_MPPC_COMPRESSION
options         NETGRAPH_NETFLOW 
options         NETGRAPH_NAT 
options         NETGRAPH_ONE2MANY 
options         NETGRAPH_PPP 
#options         NETGRAPH_PPPOE 
options         NETGRAPH_PPTPGRE 
#options         NETGRAPH_PRED1 
options         NETGRAPH_RFC1490 
options         NETGRAPH_SOCKET 
#options         NETGRAPH_SPLIT 
#options         NETGRAPH_SPPP 
#options         NETGRAPH_TAG 
options         NETGRAPH_TCPMSS 
options         NETGRAPH_TEE 
options         NETGRAPH_TTY 
options         NETGRAPH_UI 
options         NETGRAPH_VJC

# To make an SMP kernel, the next two lines are needed
options		SMP			# Symmetric MultiProcessor Kernel
options		PAE

options		HZ=1000

device		apic			# I/O APIC

# CPU frequency control
device		cpufreq

# Bus support.
device		eisa
device		pci

# ATA and ATAPI devices
device		ata
device		atadisk		# ATA disk drives
device		atapicd		# ATAPI CDROM drives
options 	ATA_STATIC_ID	# Static device numbering


# RAID controllers
device          mfi             # LSI MegaRAID SAS

# atkbdc0 controls both the keyboard and the PS/2 mouse
device		atkbdc		# AT keyboard controller
device		atkbd		# AT keyboard

# syscons is the default console driver, resembling an SCO console
device		sc

device		agp		# support several AGP chipsets

device          vga

# Power management support (see NOTES for more options)
#device		apm
# Add suspend/resume support for the i8254.
device		pmtimer

# Serial (COM) ports
device		sio		# 8250, 16[45]50 based serial ports
device		uart		# Generic UART driver

# Parallel port
device		ppc
device		ppbus		# Parallel port bus (required)
device		lpt		# Printer
device		plip		# TCP/IP over parallel
device		ppi		# Parallel port interface device
#device		vpo		# Requires scbus and da

# If you've got a "dumb" serial or parallel PCI card that is
# supported by the puc(4) glue driver, uncomment the following
# line to enable it (connects to sio, uart and/or ppc drivers):
#device		puc

device		miibus
device		bce

# Pseudo devices.
device		loop		# Network loopback
device		random		# Entropy device
device		ether		# Ethernet support
device		sl		# Kernel SLIP
device		ppp		# Kernel PPP
device		tun		# Packet tunnel.
device		pty		# Pseudo-ttys (telnet etc)
device		md		# Memory "disks"
device		gif		# IPv6 and IPv4 tunneling
device		faith		# IPv6-to-IPv4 relaying (translation)
device		firmware	# firmware assist module

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device		bpf		# Berkeley packet filter