From owner-freebsd-questions Mon Sep 14 09:14:00 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA26483 for freebsd-questions-outgoing; Mon, 14 Sep 1998 09:14:00 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from ktpk.dp.ua (ktpk.dp.ua [195.24.130.245]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA26420 for ; Mon, 14 Sep 1998 09:13:15 -0700 (PDT) (envelope-from os@ktpk.dp.ua) Received: from admin (admin.dnepr.com [192.168.0.4]) by ktpk.dp.ua (8.8.7/8.8.7) with SMTP id SAA05880 for ; Mon, 14 Sep 1998 18:44:18 +0300 (EEST) (envelope-from os@ktpk.dp.ua) Message-ID: <000501bddfee$8f0f5880$0400a8c0@admin.dnepr.com> From: "Oleg Semyonov" To: Subject: Dialup PPP Server: HOW TO... Date: Mon, 14 Sep 1998 18:45:52 +0400 MIME-Version: 1.0 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello All! I want to install my own PPP dialup server with next features: 1) I want to use more than one tty for dialup access; 2) I want to use dynamic peer IP allocation for MS clients; 3) I want to use either login or AutoPPP+PAP/CHAP for auth; 4) I want to use _allocated_ peer IP address for controlling access to my LAN and Internet ports and addresses via IPFW. Can I do all things with pppd without patching of source? I can't use tty number for peer IP address selection because I have some number of peers with different LAN permissions (IPFW), so different IP addresses must be used for login on that tty. I can't use peer login name for IP address selection because peer may be authenticated via PAP/CHAP inside of pppd process (no standard login procedure), so no way to define remote IP based on this auth (I may check IP by secret file but I need to _send_ peer IP via IPCP - I do not want to set peer IP addresses manually on client side). Possible solution may be to instruct pppd to send peer IP address which was selected from one of addresses allowed for already authenticated client (and some IPs may be unavailable because others clients with same priviledges and so IPs allowed (for IPFW) may be connected at same time). Could anybody help me? Oleg Semyonov To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message