Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 May 2002 18:10:30 -0600
From:      "Mike A. Oligny" <pandaro@freebsd.schema.ca>
To:        GM GG <gimbolino@yahoo.it>
Cc:        net@freebsd.org
Subject:   Re: mpd: pptp server
Message-ID:  <20020525001030.GA29518@freebsd.schema.ca>
In-Reply-To: <20020524224757.5028.qmail@web20701.mail.yahoo.com>
References:  <20020524221842.GA29098@freebsd.schema.ca> <20020524224757.5028.qmail@web20701.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
GM GG (gimbolino@yahoo.it) wrote:
> Can you suggest a config for mpd used like a
> pptp client ? It seems to me there is not such
> config sample in the provided mpd.conf default.

Sure, I'll include some that I've used
successfully -

client configs are old and haven't been tested
recently - they were last used with mpd 3.6.

server configs work very well with W2K/XP clients,
however, I think my IP calculations in .secrets
may be incorrect.  Perhaps this isn't even
necessary with 3.7 - my goal was to have one user
always get the same IP - this worked fine, except
if that user disconnected and someone else
connected on same interface, they ended up with
the reserved IP.  Eventually, I'd end up with a
couple clients connected as 192.168.0.210. :(

I find the same sort of thing happens if I log in
twice with the same username unless I have the
client request a specific IP.  Probably just need
to play with numbers in .secrets file.

Any feedback/corrections would be appreciated!

-Mike




** `client' mpd.conf **

default:
	load vpn

vpn:
	new -i ng1 vpn vpn
	set iface disable on-demand
#	set iface addrs 192.168.1.1 192.168.2.1
	set iface idle 0
	set iface route 192.168.1.0/24
	set bundle disable multilink
	set bundle authname "<login here>"
	set bundle password "<password here>"
	set link yes acfcomp protocomp
	set link no pap
#	set link yes chap

	set link enable no-orig-auth
	set link keep-alive 10 75
	set ipcp yes vjcomp
	set ipcp ranges 0.0.0.0/0 192.168.1.0/24
	set bundle enable compression
	set ccp yes mppc
	set ccp yes mpp-e40
	set ccp yes mpp-e128
	set bundle enable crypt-reqd
	set ccp yes mpp-stateless
	open





** `client' mpd.links **

vpn:
        set link type pptp
        set pptp self <client internal ip address>
        set pptp peer <server external ip address>
        set pptp enable originate incoming outcall





** `server' mpd.conf **

default:
	load client1
	load client2
.
.
.
	load client9

pptp_common_settings:
	set iface disable on-demand
	set iface enable proxy-arp
	set iface idle 0
	set bundle enable multilink
	set link yes acfcomp protocomp
	set link no pap chap
	set link enable chap
	set link keep-alive 25 60
	set ipcp yes vjcomp
	set ipcp dns 192.168.0.102
	set ipcp nbns 192.168.0.102

	set bundle enable compression
	set ccp yes mppc

	# I've been trying mpp-compress every couple
	# months... it doesn't work for me.  :)

	# set ccp yes mpp-compress

	set ccp yes mpp-e40
	set ccp yes mpp-e128
	set ccp yes mpp-stateless

client1:
	new -i ng0 pptp1 pptp1
	set ipcp ranges 192.168.0.101/32 192.168.0.201/32
	load pptp_common_settings

client2:
	new -i ng1 pptp2 pptp2
	set ipcp ranges 192.168.0.101/32 192.168.0.202/32
	load pptp_common_settings

.
.
.

client9:
	new -i ng8 pptp9 pptp9
	set ipcp ranges 192.168.0.101/32 192.168.0.209/32
	load pptp_common_settings





** `server' mpd.links **

pptp1:
        set link type pptp
        set pptp self 192.168.0.101
        set pptp enable incoming
        set pptp disable originate

pptp2:
        set link type pptp
        set pptp self 192.168.0.101
        set pptp enable incoming
        set pptp disable originate

.
.
.

pptp9:
        set link type pptp
        set pptp self 192.168.0.101
        set pptp enable incoming
        set pptp disable originate



** `server' mpd.secret **

user1	"password"	192.168.0.210/32
user2	"password"	192.168.0.216/29
user3	"password"	192.168.0.224/29
user4	"password"	192.168.0.232/29
user5	"password"	192.168.0.240/29



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020525001030.GA29518>