forum.lissyara.su

Код: Выделить всё

pass in on $ext_if1 inet proto tcp from any to any port 1723
pass in on $ext_if1 inet proto gre from any to any
passs out on $ext_if1 inet proto gre from any to any

Код: Выделить всё

default:
                load pptp_server

        pptp_server:
        # Define dynamic IP address pool.
                set ippool add pool1 10.0.0.150 10.0.0.200

        # Create clonable bundle template named B
                create bundle template B
                set iface enable proxy-arp
                set iface idle 1800
                set iface enable tcpmssfix
                set ipcp yes vjcomp
        # Specify IP address pool for dynamic assigment.
                set ipcp ranges 10.0.0.201/32 ippool pool1
                set ipcp dns 10.0.0.2
        # The five lines below enable Microsoft Point-to-Point encryption
        # (MPPE) using the ng_mppc(8) netgraph node type.
                set bundle enable compression
                set ccp yes mppc
                set mppc yes e40
                set mppc yes e128
                set mppc yes stateless
        
        # Create clonable link template named L
                create link template L pptp
        # Set bundle template to use
                set link action bundle B
        # Multilink adds some overhead, but gives full 1500 MTU.
                set link enable multilink
                set link yes acfcomp protocomp
                set link no pap chap
                set link enable chap
        # We can use use RADIUS authentication/accounting by including
        # another config section with label 'radius'.
               # load radius
                set link keep-alive 10 60
        # We reducing link mtu to avoid GRE packet fragmentation.
                set link mtu 1460
        # Configure PPTP
                set pptp self xxx.xxx.xxx.xxx
        # Allow to accept calls
                set link enable incoming