This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_ppp [2012/01/30 16:37] val |
сервис_ppp [2026/05/28 09:22] (current) val [Debian/Ubuntu] |
||
|---|---|---|---|
| Line 3: | Line 3: | ||
| [[http://ru.wikipedia.org/wiki/PPP_(сетевой_протокол)]] | [[http://ru.wikipedia.org/wiki/PPP_(сетевой_протокол)]] | ||
| - | ===== Настройка PPP с использованием локальной базы данных пользователей ===== | + | ===== Создание локальной базы данных пользователей для PPP ===== |
| + | |||
| + | ==== Debian/Ubuntu pppd ==== | ||
| + | <code> | ||
| + | root@gate:~# cat /etc/ppp/chap-secrets | ||
| + | </code><code> | ||
| + | user1 * password1 192.168.100+X.1 | ||
| + | user2 * password2 * | ||
| + | </code> | ||
| ==== FreeBSD ==== | ==== FreeBSD ==== | ||
| Line 10: | Line 18: | ||
| [gate:~] # cat /etc/ppp/ppp.secret | [gate:~] # cat /etc/ppp/ppp.secret | ||
| </code><code> | </code><code> | ||
| - | user1 ppassword1 192.168.100+X.100 | + | user1 password1 192.168.100+X.101 |
| - | user2 ppassword2 192.168.100+X.101 | + | user2 password2 * |
| - | </code><code> | + | </code> |
| - | [gate:~] # rm /etc/ppp/ppp.conf | + | |
| + | |||
| + | ===== Настройка PPP для PPPoE ===== | ||
| + | |||
| + | ==== FreeBSD ==== | ||
| + | <code> | ||
| [gate:~] # cat /etc/ppp/ppp.conf | [gate:~] # cat /etc/ppp/ppp.conf | ||
| </code><code> | </code><code> | ||
| inet: | inet: | ||
| enable mschapv2 | enable mschapv2 | ||
| - | set ifaddr 192.168.100+X.1 192.168.100+X.2-192.168.100+X.2 #need in freebsd7 | + | set ifaddr 192.168.100+X.1 192.168.100+X.2-192.168.100+X.2 |
| - | # set dns 192.168.X.1 | + | # set dns 192.168.X.10 |
| # accept dns | # accept dns | ||
| set timeout 0 | set timeout 0 | ||
| </code> | </code> | ||
| - | ==== Ubuntu pppd ==== | + | ==== CentOS SL ==== |
| <code> | <code> | ||
| - | root@gate:~# cat /etc/ppp/chap-secrets | + | [root@gate ~]# cat /etc/ppp/pppoe-server-options |
| </code><code> | </code><code> | ||
| - | ... | + | require-mschap-v2 |
| - | user1 * ppassword1 192.168.100+X.100 | + | # ms-dns 192.168.X.10 |
| - | user2 * ppassword1 192.168.100+X.101 | + | |
| - | </code><code> | + | |
| - | root@gate:~# cat /etc/ppp/pppoe-server-options | + | |
| - | </code><code> | + | |
| - | +chap | + | |
| - | # ms-dns 192.168.X.1 | + | |
| </code> | </code> | ||
| - | ==== CentOS SL ==== | + | ===== Настройка PPP на использование RADIUS ===== |
| + | |||
| + | [[Сервис FreeRADIUS]] | ||
| + | |||
| + | ==== Debian/Ubuntu ==== | ||
| <code> | <code> | ||
| - | [root@gate ~]# cat /etc/ppp/pppoe-server-options | + | gate# apt install libradcli4 |
| + | |||
| + | gate# cat /etc/ppp/pppoe-server-options | ||
| </code><code> | </code><code> | ||
| - | require-mschap-v2 | + | ... |
| - | # ms-dns 192.168.X.1 | + | plugin radius.so |
| + | radius-config-file /etc/radcli/radiusclient.conf | ||
| </code><code> | </code><code> | ||
| - | [root@gate ~]# cat /etc/ppp/chap-secrets | + | gate# cat /etc/radcli/radiusclient.conf |
| </code><code> | </code><code> | ||
| - | user1 * ppassword1 192.168.100+X.100 | + | seqfile /var/run/radius.seq |
| - | user2 * ppassword1 192.168.100+X.101 | + | mapfile /etc/radcli/port-id-map |
| + | authserver server | ||
| + | acctserver server | ||
| + | servers /etc/radcli/servers | ||
| + | dictionary /etc/radcli/dictionary | ||
| + | default_realm | ||
| + | radius_timeout 10 | ||
| + | radius_retries 3 | ||
| + | bindaddr * | ||
| </code><code> | </code><code> | ||
| - | [root@gate ~]# pppoe-server -I eth1 -L 192.168.113.1 | + | gate# touch /etc/radcli/port-id-map |
| - | </code> | + | |
| - | ===== Настройка ppp на использование RADIUS ===== | + | debian12# sed -i 's/ipv4addr/ipaddr/g' /etc/radcli/dictionary |
| - | [[Сервис FreeRADIUS]] | + | gate# cat /etc/radcli/servers |
| + | </code><code> | ||
| + | server testing123 | ||
| + | </code><code> | ||
| + | gate# cat /etc/hosts | ||
| + | </code><code> | ||
| + | ... | ||
| + | 192.168.X.10 server | ||
| + | </code> | ||
| ==== FreeBSD ==== | ==== FreeBSD ==== | ||
| Line 74: | Line 103: | ||
| set radius /etc/radius.conf | set radius /etc/radius.conf | ||
| </code> | </code> | ||
| - | |||
| - | ==== Ubuntu ==== | ||
| - | <code> | ||
| - | root@gate:~# apt-get install radiusclient1 | ||
| - | |||
| - | root@gate:~# less /etc/radiusclient/radiusclient.conf | ||
| - | |||
| - | root@gate:~# cat /etc/radiusclient/servers | ||
| - | </code><code> | ||
| - | server.corpX.un testing123 | ||
| - | </code><code> | ||
| - | root@gate:~# cat /etc/ppp/pppoe-server-options | ||
| - | </code><code> | ||
| - | +chap | ||
| - | plugin radius.so | ||
| - | </code> | ||
| - | |||