forum.lissyara.su

Код: Выделить всё

default:
        load pptp0
        load pptp1
        load pptp2
...
        load pptp97
        load pptp98
        load pptp99
 
pptp0:
        new -i ng00 pptp0 pptp0
        set ipcp ranges 10.99.98.254/32 10.99.98.1/32
        load pptp_standart
pptp1:
        new -i ng01 pptp1 pptp1
        set ipcp ranges 10.99.98.254/32 10.99.98.2/32
        load pptp_standart
...
pptp99:
        new -i ng99 pptp99 pptp99
        set ipcp ranges 10.99.98.254/32 10.99.98.100/32
        load pptp_standart
pptp_standart:
   set radius server 10.12.34.56 very_secure_pass 1812 1813
 
   set iface disable on-demand
   set bundle enable multilink
   set link yes acfcomp protocomp
   set link no pap
   set link enable chap
   set link keep-alive 60 180
   set ipcp yes vjcomp
   set link yes no-orig-auth
   set ipcp dns 10.1.1.1
   set iface enable proxy-arp
   set bundle enable compression
   set ccp yes mppc
   set ccp yes mpp-e40
   set ccp yes mpp-e56
   set ccp yes mpp-e128
   set ccp yes mpp-stateless
   set pptp enable incoming
   set pptp disable originate
   set iface mtu 1500
   set link mtu 1500
 
   set radius config /usr/local/etc/mpd/radius.conf
   set radius retries 5
   set radius timeout 5
   set auth enable radius-auth
   set auth enable radius-acct
#   set radius enable message-authentic
   set link enable eap
   set eap enable md5
   set auth disable internal
#   set eap enable radius-proxy

Код: Выделить всё

 AUTHPROTO EAP
[pptp0] LCP: state change Ack-Sent --> Opened
[pptp0] LCP: auth: peer wants nothing, I want EAP
[pptp0] EAP: sending REQUEST Type Identity len:0
[pptp0] LCP: LayerUp
pptp0-0: ignoring SetLinkInfo
[pptp0] LCP: rec'd Ident #2 link 0 (Opened)
 MESG: MSRASV5.10
[pptp0] LCP: rec'd Ident #3 link 0 (Opened)
 MESG: MSRAS-0-MY-NAME
[pptp0] EAP: rec'd RESPONSE Type Identity #1 len:23
[pptp0] EAP: Identity:ivanov@test.example.ru
[pptp0] EAP: sending REQUEST Type MD5 Challenge len:33
[pptp0] EAP: rec'd RESPONSE Type Nak #1 len:2
//////////////////////////////////////////////////////////////
[pptp0] EAP: Nak desired Type TLS////////////////////////
[pptp0] EAP: ran out of EAP Types/////////////////////////
[pptp0] LCP: authorization failed///////////////////////////
[pptp0] LCP: parameter negotiation failed/////////////////
[pptp0] LCP: state change Opened --> Stopping//////////
/////////////////////////////////////////////////////////////
[pptp0] LCP: SendTerminateReq #5

Код: Выделить всё

4.14. EAP commands

This chapter describes commands that configure the EAP (Extensible Authentication Protocol). Mpd supports natively only the EAP-Type MD5; other EAP-Types may be used in conjunction with a RADIUS server. All of these commands apply to the currently active link.

set eap accept option ... 
set eap deny option ... 
set eap enable option ... 
set eap disable option ... 
set eap yes option ... 
set eap no option ... 

These commands configure various EAP options. Most options are bi-directional in that they can be independently enabled and disabled in each direction. 
md5

EAP-Type MD5. It's the same as CHAP-MD5, except that is framed inside EAP packets.
radius-proxy

Causes Mpd to proxy all EAP requests to the RADIUS server.