forum.lissyara.su

Код: Выделить всё

 
 pass in all
 pass out all

Код: Выделить всё

pptp_server:
#  IP ,   VPN
        set ippool add pool1 10.100.0.170 10.100.0.190
        # Create clonable bundle template named B
        create bundle template B
        set iface enable proxy-arp
        set iface idle 1800
        set iface enable tcpmssfix
        set iface route default
        set iface enable nat
        set ipcp yes vjcomp
        # Specify IP address pool for dynamic assigment.
        set ipcp ranges 10.100.0.1/32 ippool pool1
        set ipcp dns 10.100.0.1
        # The five lines below enable Microsoft Point-to-Point encryption
        # (MPPE) using the ng_mppc(8) netgraph node type.
        set bundle enable compression
        set ccp yes mppc
#       set mppc yes e40
#       set mppc yes e128
#       set mppc yes stateless
        # Create clonable link template named L
        create link template L pptp
        # Set bundle template to use
        set link action bundle B
        # Multilink adds some overhead, but gives full 1500 MTU.
#       set link fsm-timeout 5
        set link enable multilink
        set link yes acfcomp protocomp
        set link no pap chap eap
        set link enable pap chap-md5 chap-msv1 chap-msv2
#       set link enable chap
#       set link enable chap-msv2
        set link keep-alive 10 60
        # We reducing link mtu to avoid GRE packet fragmentation
        set link mtu 1360
        # Configure PPTP
        #  IP
        set pptp self ng0 em0
        log +flag
        # Allow to accept calls
        set link enable incoming

Код: Выделить всё

set pptp self ipaddr [ port ]
Sets the local IP address and port for the PPTP connection.

Код: Выделить всё

set iface enable nat

Код: Выделить всё

# sysctl net.inet.ip.forwarding

Код: Выделить всё

net.inet.ip.forwarding: 1

Код: Выделить всё

gateway_enable="YES"

mpd_enable="YES"
mpd_flags="-b -s mpd"