pptpd-options 4.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122
  1. ###############################################################################
  2. # $Id$
  3. #
  4. # Sample Poptop PPP options file /etc/ppp/pptpd-options
  5. # Options used by PPP when a connection arrives from a client.
  6. # This file is pointed to by /etc/pptpd.conf option keyword.
  7. # Changes are effective on the next connection. See "man pppd".
  8. #
  9. # You are expected to change this file to suit your system. As
  10. # packaged, it requires PPP 2.4.2 and the kernel MPPE module.
  11. ###############################################################################
  12. # Authentication
  13. # Name of the local system for authentication purposes
  14. # (must match the second field in /etc/ppp/chap-secrets entries)
  15. name pptpd
  16. # Optional: domain name to use for authentication
  17. # domain mydomain.net
  18. # Strip the domain prefix from the username before authentication.
  19. # (applies if you use pppd with chapms-strip-domain patch)
  20. #chapms-strip-domain
  21. # Encryption
  22. # (There have been multiple versions of PPP with encryption support,
  23. # choose with of the following sections you will use.)
  24. # BSD licensed ppp-2.4.2 upstream with MPPE only, kernel module ppp_mppe.o
  25. # {{{
  26. refuse-pap
  27. refuse-chap
  28. refuse-mschap
  29. # Require the peer to authenticate itself using MS-CHAPv2 [Microsoft
  30. # Challenge Handshake Authentication Protocol, Version 2] authentication.
  31. require-mschap-v2
  32. # Require MPPE 128-bit encryption
  33. # (note that MPPE requires the use of MSCHAP-V2 during authentication)
  34. require-mppe-128
  35. # }}}
  36. # Network and Routing
  37. # If pppd is acting as a server for Microsoft Windows clients, this
  38. # option allows pppd to supply one or two DNS (Domain Name Server)
  39. # addresses to the clients. The first instance of this option
  40. # specifies the primary DNS address; the second instance (if given)
  41. # specifies the secondary DNS address.
  42. # Attention! This information may not be taken into account by a Windows
  43. # client. See KB311218 in Microsoft's knowledge base for more information.
  44. #ms-dns 10.0.0.1
  45. #ms-dns 10.0.0.2
  46. # If pppd is acting as a server for Microsoft Windows or "Samba"
  47. # clients, this option allows pppd to supply one or two WINS (Windows
  48. # Internet Name Services) server addresses to the clients. The first
  49. # instance of this option specifies the primary WINS address; the
  50. # second instance (if given) specifies the secondary WINS address.
  51. #ms-wins 10.0.0.3
  52. #ms-wins 10.0.0.4
  53. # Add an entry to this system's ARP [Address Resolution Protocol]
  54. # table with the IP address of the peer and the Ethernet address of this
  55. # system. This will have the effect of making the peer appear to other
  56. # systems to be on the local ethernet.
  57. # (you do not need this if your PPTP server is responsible for routing
  58. # packets to the clients -- James Cameron)
  59. proxyarp
  60. # Normally pptpd passes the IP address to pppd, but if pptpd has been
  61. # given the delegate option in pptpd.conf or the --delegate command line
  62. # option, then pppd will use chap-secrets or radius to allocate the
  63. # client IP address. The default local IP address used at the server
  64. # end is often the same as the address of the server. To override this,
  65. # specify the local IP address here.
  66. # (you must not use this unless you have used the delegate option)
  67. #10.8.0.100
  68. # Debian: do not replace the default route
  69. nodefaultroute
  70. # Logging
  71. # Enable connection debugging facilities.
  72. # (see your syslog configuration for where pppd sends to)
  73. #debug
  74. # Print out all the option values which have been set.
  75. # (often requested by mailing list to verify options)
  76. #dump
  77. # Miscellaneous
  78. # Create a UUCP-style lock file for the pseudo-tty to ensure exclusive
  79. # access.
  80. lock
  81. # Disable BSD-Compress compression
  82. nobsdcomp
  83. # Disable Van Jacobson compression
  84. # (needed on some networks with Windows 9x/ME/XP clients, see posting to
  85. # poptop-server on 14th April 2005 by Pawel Pokrywka and followups,
  86. # http://marc.theaimsgroup.com/?t=111343175400006&r=1&w=2 )
  87. novj
  88. novjccomp
  89. # turn off logging to stderr, since this may be redirected to pptpd,
  90. # which may trigger a loopback
  91. nologfd
  92. # put plugins here
  93. # (putting them higher up may cause them to sent messages to the pty)