SpecialistOff.NET / Вопросы / Статьи / Фрагменты кода / Резюме / Метки / Помощь / Файлы
Список вопросов Печать| RemiZOffAlex Создано: 2017-12-14 15:06:22.705674 Обновлено: 2017-12-14 15:06:22.705674 |
|---|
l2tp_server:
#
# Define dynamic IP address pool.
set ippool add pool1 10.10.2.20 10.10.2.254
# Create clonable bundle template named B
create bundle template B
set iface enable proxy-arp
set iface idle 1800
set iface enable tcpmssfix
set iface route 10.10.2.1
set iface up-script /usr/local/etc/mpd5/l2tp_server_up.sh
set iface down-script /usr/local/etc/mpd5/l2tp_server_down.sh
set ipcp yes vjcomp
# Specify IP address pool for dynamic assigment.
set ipcp ranges 10.10.2.1/24 ippool pool1
set ipcp dns 10.10.2.1
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
# Create clonable link template named L
create link template L l2tp
# Set bundle template to use
set link action bundle B
# Multilink adds some overhead, but gives full 1500 MTU.
set link enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
set link enable chap-msv1
set link enable chap-msv2
set link keep-alive 10 60
# We reducing link mtu to avoid GRE packet fragmentation
set link mtu 1460
# Configure l2tp
# IP
set l2tp self 0.0.0.0
# Allow to accept calls
set link enable incoming
|