forum.lissyara.su

Код: Выделить всё

# uname -a
FreeBSD domain.net.ua 7.2-RELEASE-p6 FreeBSD 7.2-RELEASE-p6 #1: Sat Jan 23 18:38:22 EET 2010     eugene@serv:/usr/obj/usr/src/sys/GENERIC  i386

Код: Выделить всё

# pkg_info | grep mpd
mpd-5.4             Multi-link PPP daemon based on netgraph(4)

Код: Выделить всё

startup:
        # configure mpd users
        set user eugene ПАРОЛЬ
#       set user foo1 bar1
        # configure the console
        set console self 127.0.0.1 5005
        set console open
        # configure the web server
        set web self 0.0.0.0 5006
        set web open

default:
        load pptp_server

pptp_server:
        set ippool add pool1 10.0.0.1 10.0.0.253

# Create clonable bundle template named B
        create bundle template B
        set iface enable proxy-arp
        set iface idle 0
        set iface enable tcpmssfix
        set ipcp yes vjcomp
# Specify IP address pool for dynamic assigment.
        set ipcp ranges 10.0.0.254/32 ippool pool1
        set ipcp dns 192.168.10.100
#       set ipcp nbns 192.168.1.4
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
        set bundle enable compression
        set ccp yes mppc
        set mppc yes e40
        set mppc yes e128
        set mppc yes stateless
        set iface up-script /usr/local/etc/mpd5/up.sh
        set iface down-script /usr/local/etc/mpd5/down.sh

# Create clonable link template named L
        create link template L pptp
# Set bundle template to use
        set link action bundle B
# Multilink adds some overhead, but gives full 1500 MTU.
        set link enable multilink
        set link yes acfcomp protocomp
        set link no pap chap eap
        set link enable chap
# We can use use RADIUS authentication/accounting by including
# another config section with label 'radius'.
        load radius
        set link keep-alive 10 60
# We reducing link mtu to avoid GRE packet fragmentation.
        set link mtu 1460
# Configure PPTP
#        set pptp self 192.168.10.254
# Allow to accept calls
        set link enable incoming

# Add 25.01.2010
        set pptp disable windowing

radius:
# You can use radius.conf(5), its useful, because you can share the
# same config with userland-ppp and other apps.
#       set radius config /etc/radius.conf
# or specify the server directly here
        set radius server localhost Пароль 1812 1813
        set radius retries 3
        set radius timeout 3
# send the given IP in the RAD_NAS_IP_ADDRESS attribute to the server.
#       set radius me 1.1.1.1
# send accounting updates every 5 minutes
        set auth acct-update 300
# enable RADIUS, and fallback to mpd.secret, if RADIUS auth failed
        set auth enable radius-auth
# enable RADIUS accounting
        set auth enable radius-acct
# protect our requests with the message-authenticator
        set radius enable message-authentic