You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
73 lines
3.8 KiB
73 lines
3.8 KiB
;
|
|
; Sample l2tpd configuration file
|
|
;
|
|
; This example file should give you some idea of how the options for l2tpd
|
|
; should work. The best place to look for a list of all options is in
|
|
; the source code itself, until I have the time to write better documetation :)
|
|
; Specifically, the file "file.c" contains a list of commands at the end.
|
|
;
|
|
; You most definitely don't have to spell out everything as it is done here
|
|
;
|
|
; [global] ; Global parameters:
|
|
; port = 1701 ; * Bind to port 1701
|
|
; auth file = /etc/xl2tpd/xl2tp-secrets ; * Where our challenge secrets are
|
|
; access control = yes ; * Refuse connections without IP match
|
|
; rand source = dev ; Source for entropy for random
|
|
; ; numbers, options are:
|
|
; ; dev - reads of /dev/urandom
|
|
; ; sys - uses rand()
|
|
; ; egd - reads from egd socket
|
|
; ; egd is not yet implemented
|
|
;
|
|
; [lns default] ; Our fallthrough LNS definition
|
|
; exclusive = no ; * Only permit one tunnel per host
|
|
; ip range = 192.168.0.1-192.168.0.20 ; * Allocate from this IP range
|
|
; no ip range = 192.168.0.3-192.168.0.9 ; * Except these hosts
|
|
; ip range = 192.168.0.5 ; * But this one is okay
|
|
; ip range = lac1-lac2 ; * And anything from lac1 to lac2's IP
|
|
; lac = 192.168.1.4 - 192.168.1.8 ; * These can connect as LAC's
|
|
; no lac = untrusted.marko.net ; * This guy can't connect
|
|
; hidden bit = no ; * Use hidden AVP's?
|
|
; local ip = 192.168.1.2 ; * Our local IP to use
|
|
; length bit = yes ; * Use length bit in payload?
|
|
; require chap = yes ; * Require CHAP auth. by peer
|
|
; refuse pap = yes ; * Refuse PAP authentication
|
|
; refuse chap = no ; * Refuse CHAP authentication
|
|
; refuse authentication = no ; * Refuse authentication altogether
|
|
; require authentication = yes ; * Require peer to authenticate
|
|
; unix authentication = no ; * Use /etc/passwd for auth.
|
|
; name = myhostname ; * Report this as our hostname
|
|
; ppp debug = no ; * Turn on PPP debugging
|
|
; pppoptfile = /etc/ppp/options.xl2tpd.lns ; * ppp options file
|
|
; call rws = 10 ; * RWS for call (-1 is valid)
|
|
; tunnel rws = 4 ; * RWS for tunnel (must be > 0)
|
|
; flow bit = yes ; * Include sequence numbers
|
|
; challenge = yes ; * Challenge authenticate peer ;
|
|
;
|
|
; [lac marko] ; Example VPN LAC definition
|
|
; lns = lns.marko.net ; * Who is our LNS?
|
|
; lns = lns2.marko.net ; * A backup LNS (not yet used)
|
|
; redial = yes ; * Redial if disconnected?
|
|
; redial timeout = 15 ; * Wait n seconds between redials
|
|
; max redials = 5 ; * Give up after n consecutive failures
|
|
; hidden bit = yes ; * User hidden AVP's?
|
|
; local ip = 192.168.1.1 ; * Force peer to use this IP for us
|
|
; remote ip = 192.168.1.2 ; * Force peer to use this as their IP
|
|
; length bit = no ; * Use length bit in payload?
|
|
; require pap = no ; * Require PAP auth. by peer
|
|
; require chap = yes ; * Require CHAP auth. by peer
|
|
; refuse pap = yes ; * Refuse PAP authentication
|
|
; refuse chap = no ; * Refuse CHAP authentication
|
|
; refuse authentication = no ; * Refuse authentication altogether
|
|
; require authentication = yes ; * Require peer to authenticate
|
|
; name = marko ; * Report this as our hostname
|
|
; ppp debug = no ; * Turn on PPP debugging
|
|
; pppoptfile = /etc/ppp/options.xl2tpd.marko ; * ppp options file for this lac
|
|
; call rws = 10 ; * RWS for call (-1 is valid)
|
|
; tunnel rws = 4 ; * RWS for tunnel (must be > 0)
|
|
; flow bit = yes ; * Include sequence numbers
|
|
; challenge = yes ; * Challenge authenticate peer
|
|
;
|
|
; [lac cisco] ; Another quick LAC
|
|
; lns = cisco.marko.net ; * Required, but can take from default
|
|
; require authentication = yes
|