pptpd配置.docVIP

1 /etc/ppp/chap-secrets 记录CHAP认证的密码配置文件 格式： 用户名 服务名称 密码 Ip地址 eg: zhengyi pptpd zhengyi * 其中IP地址这一列，我们可以为特定用户手工指定特定IP。 如果没有指定，为“*”，那么PPTP VPN服务器从/etc/pptp.conf文件中我们设定的remoteip中选择一个分配给客户端。 2 /etc/ppp/options.pptpd 当从一个客户端接受一个连接时，由ppp使用的选项文件。由/etc/pptpd.conf的option选项指定。 所有改变在下一个连接时生效。具体参见“man pppd”。 # Authentication # Name of the local system for authentication purposes # (must match the second field in /etc/ppp/chap-secrets entries) name pptpd 设置认证名，pptpd要与/etc/ppp/chap-secrets中的服务名称（第二个字段）相匹配。 # Strip the domain prefix from the username before authentication. # (applies if you use pppd with chapms-strip-domain patch) #chapms-strip-domain chapms-strip-domain（去除认证前用户名的前缀）用于pppd # Encryption # (There have been multiple versions of PPP with encryption support, # choose with of the following sections you will use.) 加密 # BSD licensed ppp-2.4.2 upstream with MPPE only, kernel module ppp_mppe.o # {{{ #refuse-pap #refuse-chap #refuse-mschap # Require the peer to authenticate itself using MS-CHAPv2 [Microsoft # Challenge Handshake Authentication Protocol, Version 2] authentication. #require-mschap-v2 # Require MPPE 128-bit encryption # (note that MPPE requires the use of MSCHAP-V2 during authentication) #require-mppe-128 # }}} 允许的 协议选项，与拨号用户的配置要一致。（require-mppe-128 选项要在mschap-v2 认证期间使用，否则连接会失败） # OpenSSL licensed ppp-2.4.1 fork with MPPE only, kernel module mppe.o # {{{ #-chap #-chapms # Require the peer to authenticate itself using MS-CHAPv2 [Microsoft # Challenge Handshake Authentication Protocol, Version 2] authentication. #+chapms-v2 # Require MPPE encryption # (note that MPPE requires the use of MSCHAP-V2 during authentication) #mppe-40 # enable either 40-bit or 128-bit, not both #mppe-128 #mppe-stateless # }}} mppe-40与mppe-128不能同时使用,mppe选项要在mschap-v2 认证期间使用。 # Network and Routing # If pppd is acting as a server for Microsoft Windows clients, this # option allows pppd to supply one or two DNS (Domain Name Server) # addresses to the clients. The first instance of t