L2TP: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 36: Zeile 36:
 
  pppoptfile = /etc/ppp/options.xl2tpd
 
  pppoptfile = /etc/ppp/options.xl2tpd
 
  length bit = yes
 
  length bit = yes
 +
 +
=PPP=
 +
cat /etc/ppp/options.xl2tpd
 +
 +
require-mschap-v2
 +
ms-dns 192.168.240.21
 +
ms-dns 192.168.240.22
 +
asyncmap 0
 +
auth
 +
crtscts
 +
lock
 +
hide-password
 +
modem
 +
debug
 +
name l2tpd
 +
proxyarp
 +
lcp-echo-interval 30
 +
lcp-echo-failure 4
 +
  
 
~                                                                                                                 
 
~                                                                                                                 

Version vom 22. Oktober 2012, 11:20 Uhr

Installation

apt-get install  xl2tpd ppp openswan

Openswan

cat /etc/ipsec.conf
version 2.0
config setup
    nat_traversal=yes
    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
    oe=off
    protostack=netkey
conn l2tp
   authby=secret
   pfs=no
   auto=add
   type=transport
   left=XXX.XXX.XXX.XXX
   leftprotoport=17/1701
   right=%any
   rightprotoport=17/%any
cat /etc/ipsec.secrets 
XXX.XXX.XXX.XXX  %any : PSK "1234"

XL2TP

cat /etc/xl2tpd/xl2tpd.conf 
[global]
ipsec saref = yes

[lns default]
ip range = 10.1.2.2-10.1.2.255
local ip = 10.1.2.1
refuse chap = yes
refuse pap = yes
require authentication = yes
ppp debug = yes
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes

PPP

cat /etc/ppp/options.xl2tpd

require-mschap-v2
ms-dns 192.168.240.21
ms-dns 192.168.240.22
asyncmap 0
auth
crtscts
lock
hide-password
modem
debug
name l2tpd
proxyarp
lcp-echo-interval 30
lcp-echo-failure 4


~ ~ ~


Quellen: