Страница 1 из 1
Траблы с mtu в mpd5
Добавлено: 2010-05-02 15:14:59
hm
Недавно столкнулся с траблой на ВПН серваке, бывает так, что у юзеров коннект остается а пакеты в тоннеле не ходят.
В логах
Код: Выделить всё
nd6_setmtu0: new link MTU on ng44 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng478 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng547 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng705 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng736 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng162 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng393 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng768 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng771 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng776 (1218) is too small for IPv6
nd6_setmtu0: new link MTU on ng778 (1218) is too small for IPv6
ng_mppc_decompress: decomp returned 0x0
ng_mppc_decompress: decomp returned 0x0
nd6_setmtu0: new link MTU on ng584 (1218) is too small for IPv6
ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xd3f16e00!
Чес говоря ничего не наглулилось. Может кто сталкивался с траблой?
Код: Выделить всё
vpn# uname -a
FreeBSD 7.2-RELEASE FreeBSD 7.2-RELEASE #2
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-03 10:18:11
FreeBSP
в таких случаях принято показывать конфиги, почитайте хендбук о том как правильно задать вопрос
(телепатирую) если указан такй низкий MTU в конфиге, подумайте почему это сделано и стоит ли его менять
если подняли но ipv6 всеравно не бегает, то можно попытаться определить машину где он застревает и поругаться с ее админом
ну и самое простое - убрать из ядра
- нередко ipv6 просто не нужен
или ipv6 у вас для ipsec внутри pptp?
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-04 12:08:19
hm
Конфиг ядра
Код: Выделить всё
cpu I686_CPU
ident NAS
# To statically compile in device wiring instead of /boot/device.hints
#hints "GENERIC.hints" # Default places to look for devices.
makeoptions DEBUG=-g # Build kernel with gdb(1) debug symbols
options SCHED_ULE # ULE scheduler
options PREEMPTION # Enable kernel thread preemption
options INET # InterNETworking
options INET6 # IPv6 communications protocols
options SCTP # Stream Control Transmission Protocol
options FFS # Berkeley Fast Filesystem
options SOFTUPDATES # Enable FFS soft updates support
options UFS_ACL # Support for access control lists
options UFS_DIRHASH # Improve performance on big directories
options UFS_GJOURNAL # Enable gjournal-based UFS journaling
options MD_ROOT # MD is a potential root device
options CD9660 # ISO 9660 Filesystem
options PROCFS # Process filesystem (requires PSEUDOFS)
options PSEUDOFS # Pseudo-filesystem framework
options GEOM_PART_GPT # GUID Partition Tables.
options GEOM_LABEL # Provides labelization
options COMPAT_43TTY # BSD 4.3 TTY compat [KEEP THIS!]
options COMPAT_FREEBSD4 # Compatible with FreeBSD4
options COMPAT_FREEBSD5 # Compatible with FreeBSD5
options COMPAT_FREEBSD6 # Compatible with FreeBSD6
options SCSI_DELAY=5000 # Delay (in ms) before probing SCSI
options KTRACE # ktrace(1) support
options STACK # stack(9) support
options SYSVSHM # SYSV-style shared memory
options SYSVMSG # SYSV-style message queues
options SYSVSEM # SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options ADAPTIVE_GIANT # Giant mutex is adaptive.
options STOP_NMI # Stop CPUS using NMI instead of IPI
options AUDIT # Security event auditing
#options KDTRACE_HOOKS # Kernel DTrace hooks
# FIREWALL
options IPFIREWALL #firewall
options IPFIREWALL_VERBOSE #enable logging to syslogd(8)
#options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
options IPDIVERT
options IPFIREWALL_FORWARD
options DUMMYNET
options IPFIREWALL_NAT #ipfw kernel nat support
options LIBALIAS
# netgraph(4).
options NETGRAPH # netgraph(4) system
#options NETGRAPH_DEBUG # enable extra debugging, this
# Node types
#options NETGRAPH_ASYNC
#options NETGRAPH_ATMLLC
#options NETGRAPH_ATM_ATMPIF
#options NETGRAPH_BLUETOOTH # ng_bluetooth(4)
#options NETGRAPH_BLUETOOTH_BT3C # ng_bt3c(4)
#options NETGRAPH_BLUETOOTH_H4 # ng_h4(4)
#options NETGRAPH_BLUETOOTH_HCI # ng_hci(4)
#options NETGRAPH_BLUETOOTH_L2CAP # ng_l2cap(4)
#options NETGRAPH_BLUETOOTH_SOCKET # ng_btsocket(4)
#options NETGRAPH_BLUETOOTH_UBT # ng_ubt(4)
#options NETGRAPH_BLUETOOTH_UBTBCMFW # ubtbcmfw(4)
options NETGRAPH_BPF
options NETGRAPH_BRIDGE
options NETGRAPH_CAR
options NETGRAPH_CISCO
options NETGRAPH_DEFLATE
options NETGRAPH_DEVICE
options NETGRAPH_ECHO
options NETGRAPH_EIFACE
options NETGRAPH_ETHER
options NETGRAPH_FEC
options NETGRAPH_FRAME_RELAY
#options NETGRAPH_GIF
#options NETGRAPH_GIF_DEMUX
#options NETGRAPH_HOLE
options NETGRAPH_IFACE
options NETGRAPH_IP_INPUT
options NETGRAPH_IPFW
options NETGRAPH_KSOCKET
options NETGRAPH_L2TP
options NETGRAPH_LMI
options NETGRAPH_MPPC_ENCRYPTION
options NETGRAPH_MPPC_COMPRESSION
options NETGRAPH_NETFLOW
options NETGRAPH_NAT
options NETGRAPH_ONE2MANY
options NETGRAPH_PPP
options NETGRAPH_PPPOE
options NETGRAPH_PPTPGRE
options NETGRAPH_PRED1
options NETGRAPH_RFC1490
options NETGRAPH_SOCKET
options NETGRAPH_SPLIT
options NETGRAPH_SPPP
options NETGRAPH_TAG
options NETGRAPH_TCPMSS
options NETGRAPH_TEE
options NETGRAPH_TTY
options NETGRAPH_UI
options NETGRAPH_VJC
# To make an SMP kernel, the next two lines are needed
options SMP # Symmetric MultiProcessor Kernel
options PAE
device apic # I/O APIC
# CPU frequency control
device cpufreq
# Bus support.
device eisa
device pci
# ATA and ATAPI devices
device ata
device atadisk # ATA disk drives
device atapicd # ATAPI CDROM drives
options ATA_STATIC_ID # Static device numbering
# atkbdc0 controls both the keyboard and the PS/2 mouse
device atkbdc # AT keyboard controller
device atkbd # AT keyboard
# syscons is the default console driver, resembling an SCO console
device sc
device agp # support several AGP chipsets
device vga
# Power management support (see NOTES for more options)
#device apm
# Add suspend/resume support for the i8254.
device pmtimer
# Serial (COM) ports
device sio # 8250, 16[45]50 based serial ports
device uart # Generic UART driver
# Parallel port
device ppc
device ppbus # Parallel port bus (required)
device lpt # Printer
device plip # TCP/IP over parallel
device ppi # Parallel port interface device
#device vpo # Requires scbus and da
# If you've got a "dumb" serial or parallel PCI card that is
# supported by the puc(4) glue driver, uncomment the following
# line to enable it (connects to sio, uart and/or ppc drivers):
#device puc
device miibus
device vr
device em
# Pseudo devices.
device loop # Network loopback
device random # Entropy device
device ether # Ethernet support
device sl # Kernel SLIP
device ppp # Kernel PPP
device tun # Packet tunnel.
device pty # Pseudo-ttys (telnet etc)
device md # Memory "disks"
device gif # IPv6 and IPv4 tunneling
device faith # IPv6-to-IPv4 relaying (translation)
device firmware # firmware assist module
# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device bpf # Berkeley packet filter
mpd.conf
Код: Выделить всё
startup:
set console self 127.0.0.1 5005
set console open
set web self 10.10.0.22 8000
set web open
set user uzer porol admin
set netflow peer 192.168.100.1 9996
set netflow self 192.168.100.22 9990
set netflow timeouts 5 5
default:
load pptp_server
log -console -ipcp -lcp -bund -link +auth -ecp -ipv6cp -iface -phys -ccp -fsm -chat -radius -rep
pptp_server:
set ippool add pool1 172.16.0.50 172.16.0.254
create bundle template B
# set iface disable on-demand
set iface enable proxy-arp
set iface idle 0
set iface enable tcpmssfix
set iface enable netflow-out
set iface enable netflow-in
set iface enable tee
set ipcp yes vjcomp
# set ipcp ranges 172.16.0.1/32 ippool pool1
set ipcp ranges 172.16.0.1/32 0.0.0.0/0
set ipcp dns 81.24.87.22 81.24.83.2
set ipcp yes req-pri-dns
set ipcp yes req-sec-dns
# Enable Microsoft Point-to-Point encryption (MPPE)
set bundle enable compression
set ccp yes mppc
set mppc yes compress e40 e128 stateless
create link template L pptp
set link enable multilink
set link yes acfcomp protocomp
set link yes crypt-reqd
set link action bundle B
set link no pap chap eap
set link enable chap-msv1
set link enable chap-msv2
set link keep-alive 0 0
set link mtu 1460
set pptp self 10.10.0.22
set link enable incoming
load radius
radius:
# or specify the server directly here
set radius server 192.168.100.1 sec-sec 1812 1813
set radius retries 5
set radius timeout 10
# set radius me 192.168.100.1
set auth acct-update 300
set auth enable radius-auth
set auth enable radius-acct
set radius enable message-authentic
set link enable peer-as-calling
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-05 1:07:56
FreeBSP
во первых, вы не ответили, нужен ли вам ipv6, так что повторю предложение убрать ipv6 из ядра(вот эти строчки)
Код: Выделить всё
options INET6 # IPv6 communications protocols
options SCTP # Stream Control Transmission Protocol
судя по конфигам, он у вас не используется
во вторых, обновите систему, в ветке 7.2-RELEASE последний патч -p7, а в -p1 что то правили в ipv6:
Код: Выделить всё
51 20090610: p1 FreeBSD-SA-09:09.pipe, FreeBSD-SA-09:10.ipv6,
52 FreeBSD-SA-09:11.ntpd
53 Prevent integer overflow in direct pipe write code from circumventing
54 virtual-to-physical page lookups. [09:09]
55
56 Add missing permissions check for SIOCSIFINFO_IN6 ioctl. [09:10]
57
58 Fix buffer overflow in "autokey" negotiation in ntpd(8). [09:11]
может из-за этого у вас такие щи
также стоит заметить, что обычно советуют обновляться сразу до стейбла, который кстати уже в 7.3
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-05 9:02:14
hm
Извиняюсь, ipv6 не используется.
Попытаюсь обновить сиситему и mpd.
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-05 10:13:22
FreeBSP
уберите ipv6 и обновитесь хотя бы в рамках 7.2, думаю проблема решится
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-11 9:48:14
hm
Теперь в логах такое пишется
Код: Выделить всё
May 11 08:30:14 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xc9199a00!
May 11 08:30:14 subnet-vpn kernel:
May 11 08:30:42 subnet-vpn kernel: ng_mppc_decompress: too many (4045) packets dropped, disabling node 0xd220a600!
May 11 08:30:42 subnet-vpn kernel:
May 11 08:42:28 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xce524400!
May 11 08:42:28 subnet-vpn kernel:
May 11 08:50:19 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xc8cda180!
May 11 08:50:19 subnet-vpn kernel:
May 11 08:54:54 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xc947d580!
May 11 08:54:54 subnet-vpn kernel:
May 11 09:06:45 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xcf974e80!
May 11 09:06:45 subnet-vpn kernel:
May 11 09:34:05 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xd3ed6b00!
May 11 09:34:05 subnet-vpn kernel:
May 11 09:38:38 subnet-vpn kernel: ng_mppc_decompress: too many (4094) packets dropped, disabling node 0xcdfd7200!
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-11 11:16:48
FreeBSP
дропается скорее всего тот же самый ipv6
поищите откуда он берется
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-12 10:06:54
hm
хмм, странно. не я один похоже с этой страблой. У меня бывает так, что сервак зависает, в логах пусто.
Re: Траблы с mtu в mpd5
Добавлено: 2010-05-12 11:57:44
FreeBSP
раскочегарь /var/log/all.log
то-бишь строчку с ним раскомменти в /etc/syslogd.conf
и ротацию настрой - у меня на ежедневная с хранением последних 35 bz2 логов, а то уж больно прожорливые они - метра за два может переваливать каждый
Re: Траблы с mtu в mpd5
Добавлено: 2010-06-22 9:45:31
hm
Сервак стабильно зависает раз в неделю. В логи сыпется
в огромных количествах. Я связываю эту проблему с зависанием.
Логи раскочегарил, и это сообщение появляется сразу после коннекта юзера.
Как же обойти эту проблему?
Код: Выделить всё
vpn# cat /usr/local/etc/mpd5/mpd.conf
startup:
set console self 127.0.0.1 5005
set console open
set web self 10.10.0.22 8000
set web open
set user subnet secpass admin
set netflow peer 192.168.100.1 9996
set netflow self 192.168.100.22 9990
set netflow timeouts 5 5
default:
load pptp_server
log -console -ipcp -lcp -bund -link +auth -ecp -ipv6cp -iface -phys -ccp -fsm -chat -radius -rep
pptp_server:
set ippool add pool1 172.16.0.50 172.16.0.254
create bundle template B
# set iface disable on-demand
set iface enable proxy-arp
set iface idle 0
set iface enable tcpmssfix
set iface enable netflow-out
set iface enable netflow-in
set iface enable tee
set ipcp yes vjcomp
# set ipcp ranges 172.16.0.1/32 ippool pool1
set ipcp ranges 172.16.0.1/32 0.0.0.0/0
set ipcp dns 81.24.80.229 81.24.83.2
set ipcp yes req-pri-dns
set ipcp yes req-sec-dns
# Enable Microsoft Point-to-Point encryption (MPPE)
set bundle enable compression
set bundle disable encryption
set bundle enable crypt-reqd
set ccp yes mppc
set mppc yes compress e40 e128 stateless
create link template L pptp
set link enable multilink
set link yes acfcomp protocomp
set link yes crypt-reqd
set link action bundle B
set link no pap chap eap
set link enable chap-msv1
set link enable chap-msv2
set link keep-alive 0 0
set link mtu 1460
set pptp self 10.10.0.22
set link enable incoming
load radius
radius:
# or specify the server directly here
set radius server 192.168.100.1 secpass 1812 1813
set radius retries 5
set radius timeout 10
# set radius me 192.168.100.1
set auth acct-update 300
set auth enable radius-auth
set auth enable radius-acct
set radius enable message-authentic
set link enable peer-as-calling
Код: Выделить всё
vpn# uname -a
FreeBSD subnet-vpn.dagtk.net 7.3-STABLE FreeBSD 7.3-STABLE #4: Wed May 26 03:17:52 VOLST 2010 /usr/obj/usr/src/sys/NAS i386
Код: Выделить всё
subnet-vpn# kldstat
Id Refs Address Size Name
1 6 0xc0200000 447004 kernel
2 1 0xc0648000 6a508 acpi.ko
3 1 0xce44d000 5000 ng_mppc.ko
4 1 0xce452000 2000 rc4.ko
ng_mppc вынес вмодуль,
Код: Выделить всё
subnet-vpn# cat /usr/src/sys/modules/netgraph/mppc/Makefile
# $Whistle: Makefile,v 1.1 1999/12/08 20:20:39 archie Exp $
# $FreeBSD: src/sys/modules/netgraph/mppc/Makefile,v 1.14 2006/08/14 13:28:53 des Exp $
KMOD= ng_mppc
SRCS= ng_mppc.c opt_netgraph.h
NETGRAPH_MPPC_COMPRESSION?= 1
NETGRAPH_MPPC_ENCRYPTION?= 1
.if ${NETGRAPH_MPPC_COMPRESSION} > 0
# XXX These files don't exist yet, but hopefully someday they will...
.PATH: ${.CURDIR}/../../../net
SRCS+= mppcc.c mppcd.c
.endif
.if ${NETGRAPH_MPPC_ENCRYPTION} > 0
.PATH: ${.CURDIR}/../../../crypto
SRCS+= sha1.c
.endif
.if !defined(KERNBUILDDIR)
opt_netgraph.h:
:> ${.TARGET}
.if ${NETGRAPH_MPPC_COMPRESSION} > 0
echo "#define NETGRAPH_MPPC_COMPRESSION 1" >> ${.TARGET}
.endif
.if ${NETGRAPH_MPPC_ENCRYPTION} > 0
echo "#define NETGRAPH_MPPC_ENCRYPTION 1" >> ${.TARGET}
.endif
.endif
.include <bsd.kmod.mk>
Решение проблемы могу оплатить.
Re: Траблы с mtu в mpd5
Добавлено: 2010-06-22 10:04:40
hm
Код: Выделить всё
subnet-vpn# cat /sys/i386/conf/NAS
#
# GENERIC -- Generic kernel configuration file for FreeBSD/i386
#
# For more information on this file, please read the handbook section on
# Kernel Configuration Files:
#
# http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig-config.html
#
cpu I686_CPU
ident NAS
# To statically compile in device wiring instead of /boot/device.hints
#hints "GENERIC.hints" # Default places to look for devices.
makeoptions DEBUG=-g # Build kernel with gdb(1) debug symbols
options SCHED_ULE # ULE scheduler
options PREEMPTION # Enable kernel thread preemption
options INET # InterNETworking
#options INET6 # IPv6 communications protocols
#options SCTP # Stream Control Transmission Protocol
options FFS # Berkeley Fast Filesystem
options SOFTUPDATES # Enable FFS soft updates support
options UFS_ACL # Support for access control lists
options UFS_DIRHASH # Improve performance on big directories
options UFS_GJOURNAL # Enable gjournal-based UFS journaling
options MD_ROOT # MD is a potential root device
options CD9660 # ISO 9660 Filesystem
options PROCFS # Process filesystem (requires PSEUDOFS)
options PSEUDOFS # Pseudo-filesystem framework
options GEOM_PART_GPT # GUID Partition Tables.
options GEOM_LABEL # Provides labelization
options COMPAT_43TTY # BSD 4.3 TTY compat [KEEP THIS!]
options COMPAT_FREEBSD4 # Compatible with FreeBSD4
options COMPAT_FREEBSD5 # Compatible with FreeBSD5
options COMPAT_FREEBSD6 # Compatible with FreeBSD6
options SCSI_DELAY=5000 # Delay (in ms) before probing SCSI
options KTRACE # ktrace(1) support
options STACK # stack(9) support
options SYSVSHM # SYSV-style shared memory
options SYSVMSG # SYSV-style message queues
options SYSVSEM # SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time extensions
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options ADAPTIVE_GIANT # Giant mutex is adaptive.
options STOP_NMI # Stop CPUS using NMI instead of IPI
options AUDIT # Security event auditing
#options KDTRACE_HOOKS # Kernel DTrace hooks
# FIREWALL
options IPFIREWALL #firewall
options IPFIREWALL_VERBOSE #enable logging to syslogd(8)
#options IPFIREWALL_DEFAULT_TO_ACCEPT #allow everything by default
options IPDIVERT
options IPFIREWALL_FORWARD
options DUMMYNET
options IPFIREWALL_NAT #ipfw kernel nat support
options LIBALIAS
# netgraph(4).
options NETGRAPH # netgraph(4) system
#options NETGRAPH_DEBUG # enable extra debugging, this
# Node types
#options NETGRAPH_ASYNC
#options NETGRAPH_ATMLLC
#options NETGRAPH_ATM_ATMPIF
#options NETGRAPH_BLUETOOTH # ng_bluetooth(4)
#options NETGRAPH_BLUETOOTH_BT3C # ng_bt3c(4)
#options NETGRAPH_BLUETOOTH_H4 # ng_h4(4)
#options NETGRAPH_BLUETOOTH_HCI # ng_hci(4)
#options NETGRAPH_BLUETOOTH_L2CAP # ng_l2cap(4)
#options NETGRAPH_BLUETOOTH_SOCKET # ng_btsocket(4)
#options NETGRAPH_BLUETOOTH_UBT # ng_ubt(4)
#options NETGRAPH_BLUETOOTH_UBTBCMFW # ubtbcmfw(4)
options NETGRAPH_BPF
options NETGRAPH_BRIDGE
options NETGRAPH_CAR
options NETGRAPH_CISCO
#options NETGRAPH_DEFLATE
#options NETGRAPH_DEVICE
#options NETGRAPH_ECHO
#options NETGRAPH_EIFACE
options NETGRAPH_ETHER
#options NETGRAPH_FEC
#options NETGRAPH_FRAME_RELAY
#options NETGRAPH_GIF
#options NETGRAPH_GIF_DEMUX
#options NETGRAPH_HOLE
options NETGRAPH_IFACE
#options NETGRAPH_IP_INPUT
options NETGRAPH_IPFW
options NETGRAPH_KSOCKET
#options NETGRAPH_L2TP
#options NETGRAPH_LMI
#options NETGRAPH_MPPC_ENCRYPTION
#options NETGRAPH_MPPC_COMPRESSION
options NETGRAPH_NETFLOW
options NETGRAPH_NAT
options NETGRAPH_ONE2MANY
options NETGRAPH_PPP
#options NETGRAPH_PPPOE
options NETGRAPH_PPTPGRE
#options NETGRAPH_PRED1
options NETGRAPH_RFC1490
options NETGRAPH_SOCKET
#options NETGRAPH_SPLIT
#options NETGRAPH_SPPP
#options NETGRAPH_TAG
options NETGRAPH_TCPMSS
options NETGRAPH_TEE
options NETGRAPH_TTY
options NETGRAPH_UI
options NETGRAPH_VJC
# To make an SMP kernel, the next two lines are needed
options SMP # Symmetric MultiProcessor Kernel
options PAE
options HZ=1000
device apic # I/O APIC
# CPU frequency control
device cpufreq
# Bus support.
device eisa
device pci
# ATA and ATAPI devices
device ata
device atadisk # ATA disk drives
device atapicd # ATAPI CDROM drives
options ATA_STATIC_ID # Static device numbering
# RAID controllers
device mfi # LSI MegaRAID SAS
# atkbdc0 controls both the keyboard and the PS/2 mouse
device atkbdc # AT keyboard controller
device atkbd # AT keyboard
# syscons is the default console driver, resembling an SCO console
device sc
device agp # support several AGP chipsets
device vga
# Power management support (see NOTES for more options)
#device apm
# Add suspend/resume support for the i8254.
device pmtimer
# Serial (COM) ports
device sio # 8250, 16[45]50 based serial ports
device uart # Generic UART driver
# Parallel port
device ppc
device ppbus # Parallel port bus (required)
device lpt # Printer
device plip # TCP/IP over parallel
device ppi # Parallel port interface device
#device vpo # Requires scbus and da
# If you've got a "dumb" serial or parallel PCI card that is
# supported by the puc(4) glue driver, uncomment the following
# line to enable it (connects to sio, uart and/or ppc drivers):
#device puc
device miibus
device bce
# Pseudo devices.
device loop # Network loopback
device random # Entropy device
device ether # Ethernet support
device sl # Kernel SLIP
device ppp # Kernel PPP
device tun # Packet tunnel.
device pty # Pseudo-ttys (telnet etc)
device md # Memory "disks"
device gif # IPv6 and IPv4 tunneling
device faith # IPv6-to-IPv4 relaying (translation)
device firmware # firmware assist module
# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device bpf # Berkeley packet filter