Attachment 165626 Details for Bug 186114 – mpd.conf for my site-site vpn

mpd.conf for my site-site vpn

mpd.conf (text/plain), 8.64 KB, created by YS on 2016-01-15 11:52:54 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: YS

Created: 2016-01-15 11:52:54 UTC

Size: 8.64 KB

patch

obsolete

>startup:
>
>default:
>        load berd
>        load en
>        load mel
>        load zp
>        load rv
>        load srn
>        load brv
>        load bc 
>        load pptp_server
>
>
>berd:
>        create bundle static B1
>        set ipcp ranges 10.10.10.100/32 10.2.10.100/32
>        set iface addrs 10.10.10.100 10.2.10.100
>        set iface route 10.2.10.100/24
>        set iface idle 0
>        set bundle enable encryption
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set bundle enable crypt-reqd
>        set mppc yes stateless
>        create link static L1 pptp
>        set link action bundle B1
>        set link no pap chap eap
>        set link yes chap
>        set auth authname 12
>        set auth password 12
>        set link mtu 1300
>        set link mru 1300
>        set link keep-alive 10 75
>        set link max-redial 0
>        set pptp peer IP_1
>        set link enable incoming
>        open
>
>en:
>        create bundle static B2
>        set iface addrs 10.10.10.100 10.3.10.100 
>        set ipcp ranges 10.10.10.100/32 10.3.10.100/32 
>        set iface route 10.3.10.0/8
>        set iface enable tcpmssfix
>        set ipcp no vjcomp
>        set bundle enable encryption
>        set bundle enable compression
>        set bundle enable crypt-reqd
>        set ccp yes mppc
>        set mppc yes compress e40 e56 e128 stateless
>        create link static L2 pptp
>        set link action bundle B2
>        set link enable incoming
>        set link disable  multilink
>        set link yes acfcomp protocomp
>        set link enable chap
>        set link accept chap-msv2 chap pap
>        set link deny chap-msv1
>        set link mtu 1300
>        set link mru 1300
>        set link no acfcomp protocomp
>        set auth authname 23
>        set auth password 23
>mel:
>        create bundle static B3
>        set ipcp ranges 10.10.10.100/32 10.4.10.100/32
>        set iface addrs 10.10.10.100 10.4.10.100
>        set iface route 10.4.10.100/24
>        set iface idle 0
>        set bundle enable encryption
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set bundle enable crypt-reqd
>        set mppc yes stateless
>        create link static L3 pptp
>        set link action bundle B3
>        set link disable  multilink
>        set link no pap chap eap
>        set link yes chap
>        set auth authname 33
>        set auth password 33
>        set link mtu 1300
>        set link mru 1300
>        set link keep-alive 10 75
>        set link max-redial 0
>        set link mru 1460
>        set pptp peer IP_3
>        set link enable incoming
>        set pptp enable originate
>        open
>
>zp:
>        create bundle static B4
>        set ipcp ranges 10.10.10.100/32 10.5.10.100/32
>        set iface addrs 10.10.10.100 10.5.10.100
>        set iface route 10.5.10.100/24
>        set iface idle 0
>        set bundle enable encryption
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set bundle enable crypt-reqd
>        set mppc yes stateless
>        create link static L4 pptp
>        set link action bundle B4
>        set link disable  multilink
>        set link no pap chap eap
>        set link yes chap
>        set auth authname 34
>        set auth password 34
>        set link mtu 1300
>        set link mru 1300
>        set link keep-alive 10 75
>        set link max-redial 0
>        set link mru 1460
>        set pptp peer IP_4
>        set link enable incoming
>        open
>
>rv:
>        create bundle static B5
>        set ipcp ranges 10.10.10.100/32 10.6.10.100/32
>        set iface addrs 10.10.10.100 10.6.10.100
>        set iface route 10.6.10.100/24
>        set iface idle 0
>        set bundle enable encryption
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set bundle enable crypt-reqd
>        set mppc yes stateless
>        create link static L5 pptp
>        set link action bundle B5
>        set link disable  multilink
>        set link no pap chap eap
>        set link yes chap
>        set auth authname 44
>        set auth password 44
>        set link mtu 1300
>        set link mru 1300
>        set link keep-alive 10 75
>        set link max-redial 0
>        set link mru 1460
>        set pptp peer IP_5
>        set link enable incoming
>        open
>        set pptp enable originate
>srn:
>        create bundle static B6
>        set iface mtu 1500
>        set iface mru 1500
>        set ipcp ranges 10.10.10.100/32 10.7.10.100/32
>        set iface addrs 10.10.10.100 10.7.10.100
>        set iface route 10.7.10.100/24
>        set iface idle 0
>        set bundle enable encryption
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set bundle enable crypt-reqd
>        set mppc yes stateless
>        create link static L6 pptp
>        set link action bundle B6
>        set link disable  multilink
>        set link no pap chap eap
>        set link yes chap
>        set auth authname 55
>        set auth password 55
>        set link mtu 1460
>        set link mru 1460
>        set link keep-alive 10 75
>        set link max-redial 0
>        set pptp peer  IP_6
>        set link enable incoming
>        set link enable originate
>        open
>        set pptp enable originate
>
>brv:
>        create bundle static B7
>        set ipcp ranges 10.10.10.100/32 10.8.10.100/32
>        set iface addrs 10.10.10.100 10.8.10.100
>        set iface route 10.8.10.100/24
>        set iface idle 0
>        set bundle enable encryption
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set bundle enable crypt-reqd
>        set mppc yes stateless
>        create link static L7 pptp
>        set link action bundle B7
># Enable both sides to authenticat each other with CHAP
>        set link disable  multilink
>        set link no pap chap eap
>        set link yes chap
>        set auth authname 56
>        set auth password 56
>        set link keep-alive 10 75
>        set link max-redial 0
>               set link mtu 1300
>        set link mru 1300
>        set pptp disable resolve-once
>        set pptp peer IP_7
>        set link enable incoming
>        open
>
>bc:
>        create bundle static B8
>        set ipcp ranges 10.10.10.100/32 10.9.10.100/32
>        set iface addrs 10.10.10.100 10.9.10.100
>        set iface route 10.9.10.100/24
>        set iface idle 0
>        set bundle enable encryption
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set bundle enable crypt-reqd
>        set mppc yes stateless
>        create link static L8 pptp
>        set link action bundle B8
>        set link disable  multilink
>        set link no pap chap eap
>        set link yes chap
>        set auth authname 555
>        set auth password 555
>               set link mtu 1300
>        set link mru 1300
>        set link keep-alive 10 75
>        set link max-redial 0
>        set link mtu 1460
>        set pptp peer 31.129.189.153
>        set pptp disable resolve-once
>        set pptp peer IP_8
>        set link enable incoming
>        open
>
>
>pptp_server:
># Define dynamic IP address pool.
>        set ippool add pool1 10.10.10.140 10.10.10.154
># Create clonable bundle template named BU
>        create bundle template BU
>        set iface enable proxy-arp
>        set iface idle 0
>        set iface enable tcpmssfix
>        set ipcp yes vjcomp
># Specify IP address pool for dynamic assigment.
>        set ipcp ranges 10.10.10.100/32 ippool pool1
>        set ipcp dns 10.10.10.100
>        set ipcp nbns 10.10.10.100
># The five lines below enable Microsoft Point-to-Point encryption
># (MPPE) using the ng_mppc(8) netgraph node type.
>        set bundle enable compression
>        set ccp yes mppc
>        set mppc yes e40
>        set mppc yes e128
>        set mppc yes stateless
># Create clonable link template named LN
>        create link template LN pptp
># Set bundle template to use
>        set link action bundle BU
># Multilink adds some overhead, but gives full 1500 MTU.
>        set link disable multilink
>        set link yes acfcomp protocomp
>        set link no pap chap eap
>        set link enable chap
>        set link enable chap-msv1
>        set link enable chap-msv2
>#       set auth max-logins 1
># We can use use RADIUS authentication/accounting by including
># another config section with label 'radius'.
>#       load radius
>        set link keep-alive 10 60
># We reducing link mtu to avoid GRE packet fragmentation.
>        set link mtu 1460
># Allow to accept calls
>        set link enable incoming
>#       set pptp self em1

Actions: View

Attachments on bug 186114: 165278 | 165279 | 165280 | 165626 | 175989 | 183536 | 183537 | 183538