polarson # ROMANIA Posted June 4, 2014 Share Posted June 4, 2014 (edited) Verificati daca colectia de porturi este actualizata.Instalati poptop din /usr/ports/net/poptop: root@bsdpc[/usr/ports/net/poptop] # make install clean Folosind editorul de text preferat, editam fisierul de configurare /usr/local/etc/pptpd.conf care va contine urmatoarele: nobsdcompproxyarppidfile /var/run/pptpd.pid+chapms-v2mppe-40mppe-128mppe-stateless Editam fisierul de configurare PPP, /etc/ppp/ppp.conf, astfel incat sa contina: loop:set timeout 0set log phase chat connect lcp ipcp commandset device localhost:pptpset dialset login# Server (local) IP address, Range for Clients, and Netmaskset ifaddr 192.168.31.254 192.168.31.120-192.168.31.128 255.255.255.255set server /tmp/vpn-in-%d “” 0177loop-in:set timeout 0set log phase lcp ipcp commandallow mode directpptp:load loopdisable papdisable passwdauthdisable ipv6cpenable proxyaccept dnsenable MSChapV2enable mppedisable deflate pred1deny deflate pred1set device !/etc/ppp/secure Toate liniile cu exceptia celor care se termina cu doua puncte ( trebuie identate (spatiu fata de margine dat de tasta TAB), altfel ppp.conf nu va functiona. Adaugam fisierul /etc/ppp/secure cu urmatorul continut: #!/bin/shexec /usr/sbin/ppp -direct loop-in Setam acest fisier ca executabil: root@bsdpc[~] # chmod 0755 /etc/ppp/secure Adaugam fisierul cu username-urile si parolele pentru conectare la VPN, /etc/ppp/ppp.secret, care va arata in felul urmator: user1 pass1user2 pass2 Activam ARP proxy adaugand linia net.link.ether.inet.proxyall=1 in fisierul /etc/sysctl.confPentru a activa ARP Proxy fara reboot la sistem rulam urmatoarea comanda: root@bsdpc[~] # sysctl net.link.ether.inet.proxyall=1 Setam serverul VPN sa porneasca la initializarea sistemului adaugand in /etc/rc.conf linia pptpd_enable=”YES” Pornim serverul VPN cu comanda: root@bsdpc[~] # /usr/local/etc/rc.d/pptpd start Verificati firewall-ul sa acepte conexiuni tcp pe portul 1723 si deasemenea sa accepte conexiuni pe protocolul gre. Pentru un firewall folosind packet filter in fisierul de configurare trebuie sa aveti urmatoarele linii: pass in quick on $ext_if proto tcp from any to any port 1723 keep statepass in quick on $ext_if proto gre from any to any Edited June 4, 2014 by polarson # ROMANIA Link to comment Share on other sites More sharing options...
Recommended Posts