This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_ppp [2014/09/26 09:37] val |
сервис_ppp [2026/05/28 09:22] (current) val [Debian/Ubuntu] |
||
|---|---|---|---|
| Line 5: | Line 5: | ||
| ===== Создание локальной базы данных пользователей для PPP ===== | ===== Создание локальной базы данных пользователей для PPP ===== | ||
| - | ==== FreeBSD ==== | + | ==== Debian/Ubuntu pppd ==== |
| - | + | ||
| - | <code> | + | |
| - | [gate:~] # cat /etc/ppp/ppp.secret | + | |
| - | </code><code> | + | |
| - | user1 ppassword1 192.168.100+X.101 | + | |
| - | user2 ppassword2 192.168.100+X.102 | + | |
| - | </code> | + | |
| - | + | ||
| - | ==== Ubuntu pppd ==== | + | |
| <code> | <code> | ||
| root@gate:~# cat /etc/ppp/chap-secrets | root@gate:~# cat /etc/ppp/chap-secrets | ||
| </code><code> | </code><code> | ||
| - | user1 * ppassword1 192.168.100+X.101 | + | user1 * password1 192.168.100+X.1 |
| - | user2 * ppassword2 192.168.100+X.102 | + | user2 * password2 * |
| </code> | </code> | ||
| - | ==== CentOS SL ==== | + | ==== FreeBSD ==== |
| <code> | <code> | ||
| - | [root@gate ~]# cat /etc/ppp/pppoe-server-options | + | [gate:~] # cat /etc/ppp/ppp.secret |
| </code><code> | </code><code> | ||
| - | require-mschap-v2 | + | user1 password1 192.168.100+X.101 |
| - | # ms-dns 192.168.X.1 | + | user2 password2 * |
| - | </code><code> | + | |
| - | [root@gate ~]# cat /etc/ppp/chap-secrets | + | |
| - | </code><code> | + | |
| - | user1 * ppassword1 192.168.100+X.101 | + | |
| - | user2 * ppassword1 192.168.100+X.102 | + | |
| </code> | </code> | ||
| - | ===== Настройка ppp для PPPoE ===== | ||
| + | ===== Настройка PPP для PPPoE ===== | ||
| + | |||
| + | ==== FreeBSD ==== | ||
| <code> | <code> | ||
| [gate:~] # cat /etc/ppp/ppp.conf | [gate:~] # cat /etc/ppp/ppp.conf | ||
| Line 49: | Line 37: | ||
| </code> | </code> | ||
| - | ===== Настройка ppp на использование RADIUS ===== | + | ==== CentOS SL ==== |
| + | |||
| + | <code> | ||
| + | [root@gate ~]# cat /etc/ppp/pppoe-server-options | ||
| + | </code><code> | ||
| + | require-mschap-v2 | ||
| + | # ms-dns 192.168.X.10 | ||
| + | </code> | ||
| + | |||
| + | ===== Настройка PPP на использование RADIUS ===== | ||
| [[Сервис FreeRADIUS]] | [[Сервис FreeRADIUS]] | ||
| + | |||
| + | ==== Debian/Ubuntu ==== | ||
| + | |||
| + | <code> | ||
| + | gate# apt install libradcli4 | ||
| + | |||
| + | gate# cat /etc/ppp/pppoe-server-options | ||
| + | </code><code> | ||
| + | ... | ||
| + | plugin radius.so | ||
| + | radius-config-file /etc/radcli/radiusclient.conf | ||
| + | </code><code> | ||
| + | gate# cat /etc/radcli/radiusclient.conf | ||
| + | </code><code> | ||
| + | seqfile /var/run/radius.seq | ||
| + | mapfile /etc/radcli/port-id-map | ||
| + | authserver server | ||
| + | acctserver server | ||
| + | servers /etc/radcli/servers | ||
| + | dictionary /etc/radcli/dictionary | ||
| + | default_realm | ||
| + | radius_timeout 10 | ||
| + | radius_retries 3 | ||
| + | bindaddr * | ||
| + | </code><code> | ||
| + | gate# touch /etc/radcli/port-id-map | ||
| + | |||
| + | debian12# sed -i 's/ipv4addr/ipaddr/g' /etc/radcli/dictionary | ||
| + | |||
| + | gate# cat /etc/radcli/servers | ||
| + | </code><code> | ||
| + | server testing123 | ||
| + | </code><code> | ||
| + | gate# cat /etc/hosts | ||
| + | </code><code> | ||
| + | ... | ||
| + | 192.168.X.10 server | ||
| + | </code> | ||
| ==== FreeBSD ==== | ==== FreeBSD ==== | ||
| Line 68: | Line 103: | ||
| set radius /etc/radius.conf | set radius /etc/radius.conf | ||
| </code> | </code> | ||
| - | |||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# rm /etc/ppp/chap-secrets | ||
| - | |||
| - | root@gate:~# apt-get install radiusclient1 | ||
| - | |||
| - | root@gate:~# cat /etc/radiusclient/radiusclient.conf | ||
| - | </code><code> | ||
| - | ... | ||
| - | authserver server.corpX.un | ||
| - | ... | ||
| - | acctserver server.corpX.un | ||
| - | ... | ||
| - | </code><code> | ||
| - | root@gate:~# cat /etc/radiusclient/servers | ||
| - | </code><code> | ||
| - | server.corpX.un testing123 | ||
| - | </code><code> | ||
| - | root@gate:~# cat /etc/ppp/pppoe-server-options | ||
| - | </code><code> | ||
| - | +chap | ||
| - | plugin radius.so | ||
| - | </code> | ||
| - | |||