Методические материалы Лохтурова Вячеслава

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Сервис PPP ======

[[http://ru.wikipedia.org/wiki/PPP_(сетевой_протокол)]]

===== Создание локальной базы данных пользователей для PPP =====

==== Debian/Ubuntu pppd ====
<code>
root@gate:~# cat /etc/ppp/chap-secrets
</code><code>
user1 * password1 192.168.100+X.1
user2 * password2 *
</code>

==== FreeBSD ====

<code>
[gate:~] # cat /etc/ppp/ppp.secret
</code><code>
user1 password1 192.168.100+X.101
user2 password2 *
</code>


===== Настройка PPP для PPPoE =====

==== FreeBSD ====
<code>
[gate:~] # cat /etc/ppp/ppp.conf
</code><code>
inet:
 enable mschapv2
 set ifaddr 192.168.100+X.1 192.168.100+X.2-192.168.100+X.2
# set dns 192.168.X.10
# accept dns
 set timeout 0
</code>

==== CentOS SL ====

<code>
[root@gate ~]# cat /etc/ppp/pppoe-server-options
</code><code>
require-mschap-v2
# ms-dns 192.168.X.10
</code>

===== Настройка PPP на использование RADIUS =====

[[Сервис FreeRADIUS]]

==== Debian/Ubuntu ====

<code>
gate# apt install libradcli4

gate# cat /etc/ppp/pppoe-server-options
</code><code>
...
plugin radius.so
radius-config-file /etc/radcli/radiusclient.conf
</code><code>
gate# cat /etc/radcli/radiusclient.conf
</code><code>
seqfile /var/run/radius.seq
mapfile /etc/radcli/port-id-map
authserver      server
acctserver      server
servers         /etc/radcli/servers
dictionary      /etc/radcli/dictionary
default_realm
radius_timeout  10
radius_retries  3
bindaddr        *
</code><code>
gate# touch /etc/radcli/port-id-map

debian12# sed -i 's/ipv4addr/ipaddr/g' /etc/radcli/dictionary

gate# cat /etc/radcli/servers
</code><code>
server testing123
</code><code>
gate# cat /etc/hosts
</code><code>
...
192.168.X.10 server
</code>

==== FreeBSD ====
<code>
[gate:~] # rm /etc/ppp/ppp.secret

[gate:~] # cat /etc/radius.conf
</code><code>
auth server.corpX.un testing123 3 2
acct server.corpX.un testing123 3 2
</code><code>
[gate:~] # cat /etc/ppp/ppp.conf
</code><code>
...
 set timeout 0
 set radius /etc/radius.conf
</code>

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Page Tools