From owner-freebsd-net@FreeBSD.ORG  Fri Oct 21 11:45:45 2005
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: net@FreeBSD.org
Delivered-To: freebsd-net@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BF7FB16A41F;
	Fri, 21 Oct 2005 11:45:45 +0000 (GMT)
	(envelope-from fooler@skyinet.net)
Received: from smtp1.skyinet.net (smtp1.skyinet.net [202.78.97.6])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2CCE843D45;
	Fri, 21 Oct 2005 11:45:45 +0000 (GMT)
	(envelope-from fooler@skyinet.net)
Received: from fooler (fooler.ilo.skyinet.net [202.78.118.66])
	by smtp1.skyinet.net (Postfix) with SMTP id 580A3582C8;
	Fri, 21 Oct 2005 19:45:43 +0800 (PHT)
Message-ID: <002801c5d634$fdc66bd0$42764eca@ilo.skyinet.net>
From: <fooler@skyinet.net>
To: "Marcin Jessa" <lists@yazzy.org>
References: <20051019235111.2225345e.lists@yazzy.org><20051020070145.GA59364@cell.sick.ru><20051020131549.5e432073.lists@yazzy.org><20051020123159.33f6fa33.lists@yazzy.org><07c501c5d5e1$0ddf67f0$42764eca@ilo.skyinet.net>
	<20051021112934.7c857fcc.lists@yazzy.org>
Date: Fri, 21 Oct 2005 19:45:52 +0800
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="iso-8859-1";
	reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Cc: glebius@FreeBSD.org, current@FreeBSD.org, net@FreeBSD.org
Subject: Re: PPPoE and Radius on 6.0RC1
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Oct 2005 11:45:45 -0000

----- Original Message ----- 
From: "Marcin Jessa" <lists@yazzy.org>
To: <fooler@skyinet.net>
Cc: <glebius@FreeBSD.org>; <current@FreeBSD.org>; <net@FreeBSD.org>
Sent: Friday, October 21, 2005 5:29 PM
Subject: Re: PPPoE and Radius on 6.0RC1


> The problem seems to be ppp is never started by pppoe.

here is a sample configuration for your pppoe server.... assuming you have 
two intel nics named fxp0 and fxp1... fxp0 is facing the net and fxp1 is 
facing the pppoe clients... fxp1 is ip less...

please do the following...

1. in your kernel config file, add the following options and compile the 
kernel

options    NETGRAPH
options    NETGRAPH_ETHER
options    NETGRAPH_PPPOE
options    NETGRAPH_SOCKET

2. in your /etc/rc.conf

gateway_enable="YES"
ifconfig_fxp0="inet 192.168.2.8 netmask 255.255.255.0"
ifconfig_fxp1="up"
pppoed_enable="YES"
pppoed_flags="-l PPPoE -P /var/run/pppoed.pid"
pppoed_interface="fxp1"

3. in your /etc/ppp/ppp.conf

default:
    set log Phase Chat LCP IPCP CCP tun command Debug Radius
    ident user-ppp VERSION (built COMPILATIONDATE)

PPPoE:
    set ifaddr 192.168.2.8 192.168.2.100-192.168.2.120 255.255.255.255
    set radius /etc/ppp/radius.conf
    set dns 192.168.2.45
    deny deflate
    disable deflate
    accept dns
    enable lqr
    enable echo
    deny pap
    deny chap
    deny LANMan
    deny MSChap
    enable MSChapV2
    disable pred1
    disable utmp
    disable ipv6cp
    set callback
    set cbcp
    set cd 5!
    set nbns
    set speed sync
    set timeout 0

4. in your /etc/ppp/radius.conf

auth 127.0.0.1:1812 secret_key 3 3
acct 127.0.0.1:1813 secret_key 3 3

try to remark "set radius /etc/ppp/radius.conf" first in /etc/ppp/ppp.conf 
to make sure that your pppoe authentication is working without using a 
radius server... if all went well, then make sure your radius server is 
working properly by binding to ip address 127.0.0.1 only for security 
purposes...

fooler.