From owner-freebsd-net@FreeBSD.ORG Tue Jan 20 06:02:53 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B365F16A4CE for ; Tue, 20 Jan 2004 06:02:53 -0800 (PST) Received: from mail.a-quadrat.at (mail.a-quadrat.at [81.223.141.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1453843D39 for ; Tue, 20 Jan 2004 06:02:52 -0800 (PST) (envelope-from mbretter@a-quadrat.at) Received: from BRUTUS.a-quadrat.at (brutus.a-quadrat.at [192.168.90.60]) by files.a-quadrat.at (Postfix) with ESMTP id D6D835C041; Tue, 20 Jan 2004 14:59:02 +0100 (CET) Date: Tue, 20 Jan 2004 15:02:44 +0100 (=?ISO-8859-15?Q?Westeurop=E4ische_Normalzeit?=) From: Michael Bretterklieber To: Brad Watkins In-Reply-To: <005901c3df4f$9cd48650$33a119ac@ptds.qld.prism.int> Message-ID: References: <005901c3df4f$9cd48650$33a119ac@ptds.qld.prism.int> X-X-Sender: mbretter@files.a-quadrat.at MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-net@freebsd.org cc: Tom Storey Subject: Re: mpd 3.15 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Jan 2004 14:02:53 -0000 Hi, On Tue, 20 Jan 2004, Brad Watkins wrote: > I'm having trouble configuring mpd 3.15, > Im trying to create a vpn tunnel to a friends network throguh the internet who is using windows 2003 at the moment but will be using freebsd and mpd as well. > the vpn will allow incomming connections but not outgoing. > i will attach the configuration files below > > mpd.links > ~~~~~~~~~ > vpn: > set link type pptp > set pptp self 172.25.161.45/27 > set pptp peer 172.25.161.51/27 > set pptp enable originate incoming outcall for outgoing connections remove "incoming" and "set pptp self", and a single IP-Address is here expected and not an address-range. > > mpd.conf > ~~~~~~~~~ > default: > > load vpn > > vpn: > new -i ng1 vpn vpn > set iface disable on-demand > set iface addrs 172.25.144.1 172.25.145.1 > set iface idle 0 > set bundle session 28800 > set iface route 172.25.145.0/24 > set bundle disable multilink > set bundle authname "BRADTOP\\tom_brad" > set bundle password "rotaredom" > set bundle enable compression > set link yes acfcomp protocomp > set link no pap > set link yes chap for outgoing connections it's better just doing: set link no pap chap set link accept chap ... because "yes" stands for "enable" and "accept", whereas "enable" means, "I'm actively requesting this feature", wich can make problems in client mode. bye, -- ------------------------------- ---------------------------------- Michael Bretterklieber - http://www.bretterklieber.com A-Quadrat Automation GmbH - http://www.a-quadrat.at Tel: ++43-(0)3172-41679 - GSM: ++43-(0)699 12861847 ------------------------------- ---------------------------------- "...the number of UNIX installations has grown to 10, with more expected..." - Dennis Ritchie and Ken Thompson, June 1972