accel-ppp.conf 5.0 KB
Newer Older
1
[modules]
2
log_file
3
#log_syslog
4
#log_tcp
5
#log_pgsql
6

7
pptp
8
l2tp
9
#sstp
10
#pppoe
11
#ipoe
12

13
auth_mschap_v2
14 15 16
auth_mschap_v1
auth_chap_md5
auth_pap
17

18
radius
D
Dmitry Kozlov 已提交
19 20
#chap-secrets

K
Kozlov Dmitry 已提交
21
ippool
D
Dmitry Kozlov 已提交
22

23
pppd_compat
24

K
Kozlov Dmitry 已提交
25
#shaper
26
#net-snmp
27 28 29
#logwtmp
#connlimit

K
Kozlov Dmitry 已提交
30 31
#ipv6_nd
#ipv6_dhcp
32
#ipv6pool
33 34

[core]
D
Dmitry Kozlov 已提交
35
log-error=/var/log/accel-ppp/core.log
36
thread-count=4
37

38 39 40 41
[common]
#single-session=replace
#sid-case=upper
#sid-source=seq
42
#max-sessions=1000
43

44 45
[ppp]
verbose=1
K
Kozlov Dmitry 已提交
46
min-mtu=1280
47 48
mtu=1400
mru=1400
49 50
#accomp=deny
#pcomp=deny
51
#ccp=0
52
#check-ip=0
K
Kozlov Dmitry 已提交
53
#mppe=require
K
Kozlov Dmitry 已提交
54
ipv4=require
K
Kozlov Dmitry 已提交
55
ipv6=deny
K
Kozlov Dmitry 已提交
56 57 58
ipv6-intf-id=0:0:0:1
ipv6-peer-intf-id=0:0:0:2
ipv6-accept-peer-intf-id=1
K
Kozlov Dmitry 已提交
59 60 61
lcp-echo-interval=20
#lcp-echo-failure=3
lcp-echo-timeout=120
62
unit-cache=1
63
#unit-preallocate=1
64

K
Kozlov Dmitry 已提交
65 66 67 68
[auth]
#any-login=0
#noauth=0

69
[pptp]
K
Kozlov Dmitry 已提交
70
verbose=1
71
#echo-interval=30
72
#ifname=pptp%d
K
Kozlov Dmitry 已提交
73

74
[pppoe]
75
verbose=1
76 77
#ac-name=xxx
#service-name=yyy
78
#pado-delay=0
79
#pado-delay=0,100:100,200:200,-1:500
80
called-sid=mac
K
Kozlov Dmitry 已提交
81
#tr101=1
K
Kozlov Dmitry 已提交
82
#padi-limit=0
83
#ip-pool=pppoe
84
#ifname=pppoe%d
85
#sid-uppercase=0
D
Dmitry Kozlov 已提交
86 87 88
#vlan-mon=eth0,10-200
#vlan-timeout=60
#vlan-name=%I.%N
89
#interface=eth1,padi-limit=1000
90
interface=eth0
91

92
[l2tp]
93
verbose=1
D
Dmitry Kozlov 已提交
94
#dictionary=/usr/local/share/accel-ppp/l2tp/dictionary
95
#hello-interval=60
96
#timeout=60
97 98
#rtimeout=1
#rtimeout-cap=16
99
#retransmit=5
100
#recv-window=16
D
Dmitry Kozlov 已提交
101
#host-name=accel-ppp
102
#dir300_quirk=0
103
#secret=
104 105
#dataseq=allow
#reorder-timeout=0
106
#ip-pool=l2tp
107
#ifname=l2tp%d
108

109 110
[sstp]
verbose=1
111 112 113
#cert-hash-proto=sha1,sha256
#cert-hash-sha1=
#cert-hash-sha256=
114
#accept=ssl,proxy
115
#ssl-dhparam=/etc/ssl/dhparam.pem
116
#ssl-ecdh-curve=prime256v1
117
#ssl-ciphers=DEFAULT
118
#ssl-prefer-server-ciphers=0
119
#ssl-ca-file=/etc/ssl/sstp-ca.crt
120 121
#ssl-pemfile=/etc/ssl/sstp-cert.pem
#ssl-keyfile=/etc/ssl/sstp-key.pem
122
#host-name=domain.tld
123
#http-error=allow
124 125 126
#timeout=60
#hello-interval=60
#ip-pool=sstp
127
#ifname=sstp%d
128

129
[ipoe]
130
verbose=1
131 132 133
username=ifname
#password=username
lease-time=600
134
renew-time=300
135 136 137 138 139
max-lease-time=3600
#unit-cache=1000
#l4-redirect-table=4
#l4-redirect-ipset=l4
#l4-redirect-on-reject=300
140
#l4-redirect-ip-pool=pool1
141 142 143 144
shared=0
ifcfg=1
mode=L2
start=dhcpv4
145
#start=up
146
#ip-unnumbered=1
147 148 149 150
#proxy-arp=0
#nat=0
#proto=100
#relay=10.10.10.10
151
#vendor=Custom
152
#weight=0
153 154 155
#attr-dhcp-client-ip=DHCP-Client-IP-Address
#attr-dhcp-router-ip=DHCP-Router-IP-Address
#attr-dhcp-mask=DHCP-Mask
156
#attr-dhcp-lease-time=DHCP-Lease-Time
157
#attr-dhcp-opt82=DHCP-Option82
158 159
#attr-dhcp-opt82-remote-id=DHCP-Agent-Remote-Id
#attr-dhcp-opt82-circuit-id=DHCP-Agent-Circuit-Id
160
#attr-l4-redirect=L4-Redirect
161 162
#attr-l4-redirect-table=4
#attr-l4-redirect-ipset=l4-redirect
163 164 165 166
#lua-file=/etc/accel-ppp.lua
#offer-delay=0,100:100,200:200,-1:1000
#vlan-mon=eth0,10-200
#vlan-timeout=60
167
#vlan-name=%I.%N
168
#ip-pool=ipoe
169 170
#idle-timeout=0
#session-timeout=0
171
#soft-terminate=0
172
#check-mac-change=1
173
#calling-sid=mac
174
#local-net=192.168.0.0/16
175 176
interface=eth0

177

178 179 180 181
[dns]
#dns1=172.16.0.1
#dns2=172.16.1.1

K
Kozlov Dmitry 已提交
182 183 184 185
[wins]
#wins1=172.16.0.1
#wins2=172.16.1.1

K
Kozlov Dmitry 已提交
186
[radius]
D
Dmitry Kozlov 已提交
187 188
#dictionary=/usr/local/share/accel-ppp/radius/dictionary
nas-identifier=accel-ppp
189
nas-ip-address=127.0.0.1
190
gw-ip-address=192.168.100.1
191
server=127.0.0.1,testing123,auth-port=1812,acct-port=1813,req-limit=50,fail-timeout=0,max-fail=10,weight=1
192
dae-server=127.0.0.1:3799,testing123
193
verbose=1
194 195 196
#timeout=3
#max-try=3
#acct-timeout=120
197
#acct-delay-time=0
198
#acct-on=0
199
#attr-tunnel-type=My-Tunnel-Type
200 201

[client-ip-range]
202
10.0.0.0/8
203 204

[ip-pool]
205
gw-ip-address=192.168.0.1
206 207 208
#vendor=Cisco
#attr=Cisco-AVPair
attr=Framed-Pool
209
192.168.0.2-255
210 211 212
192.168.1.1-255,name=pool1
192.168.2.1-255,name=pool2
192.168.3.1-255,name=pool3
213
192.168.4.1-255,name=pool4,next=pool1
D
Dmitry Kozlov 已提交
214
192.168.4.0/24
215 216

[log]
D
Dmitry Kozlov 已提交
217 218
log-file=/var/log/accel-ppp/accel-ppp.log
log-emerg=/var/log/accel-ppp/emerg.log
219
log-fail-file=/var/log/accel-ppp/auth-fail.log
220
#log-debug=/dev/stdout
221
#syslog=accel-pppd,daemon
222
#log-tcp=127.0.0.1:3000
D
Dmitry Kozlov 已提交
223
copy=1
224
#color=1
225
#per-user-dir=per_user
226
#per-session-dir=per_session
227
#per-session=1
K
Kozlov Dmitry 已提交
228
level=3
229 230 231 232

[log-pgsql]
conninfo=user=log
log-table=log
233 234

[pppd-compat]
235
verbose=1
K
Kozlov Dmitry 已提交
236
#ip-pre-up=/etc/ppp/ip-pre-up
237 238
ip-up=/etc/ppp/ip-up
ip-down=/etc/ppp/ip-down
239
#ip-change=/etc/ppp/ip-change
240
radattr-prefix=/var/run/radattr
241
#fork-limit=16
242

243 244 245
[chap-secrets]
gw-ip-address=192.168.100.1
#chap-secrets=/etc/ppp/chap-secrets
K
Kozlov Dmitry 已提交
246 247
#encrypted=0
#username-hash=md5
248

K
Kozlov Dmitry 已提交
249 250 251 252 253 254
[shaper]
#attr=Filter-Id
#down-burst-factor=0.1
#up-burst-factor=1.0
#latency=50
#mpu=0
D
Dmitry Kozlov 已提交
255
#mtu=0
K
Kozlov Dmitry 已提交
256 257
#r2q=10
#quantum=1500
258
#moderate-quantum=1
259
#cburst=1534
K
Kozlov Dmitry 已提交
260 261 262
#ifb=ifb0
up-limiter=police
down-limiter=tbf
263
#leaf-qdisc=sfq perturb 10
264
#leaf-qdisc=fq_codel [limit PACKETS] [flows NUMBER] [target TIME] [interval TIME] [quantum BYTES] [[no]ecn]
265
#rate-multiplier=1
D
Dmitry Kozlov 已提交
266
#fwmark=1
K
Kozlov Dmitry 已提交
267 268
verbose=1

269
[cli]
D
Dmitry Kozlov 已提交
270
verbose=1
271 272
telnet=127.0.0.1:2000
tcp=127.0.0.1:2001
273
#password=123
D
Dmitry Kozlov 已提交
274
#sessions-columns=ifname,username,ip,ip6,ip6-dp,type,state,uptime,uptime-raw,calling-sid,called-sid,sid,comp,rx-bytes,tx-bytes,rx-bytes-raw,tx-bytes-raw,rx-pkts,tx-pkts
K
Kozlov Dmitry 已提交
275 276 277 278

[snmp]
master=0
agent-name=accel-ppp
K
Kozlov Dmitry 已提交
279

280 281 282 283
[connlimit]
limit=10/min
burst=3
timeout=60
K
Kozlov Dmitry 已提交
284 285

[ipv6-pool]
286
#gw-ip6-address=fc00:0:1::1
K
Kozlov Dmitry 已提交
287 288 289 290 291 292 293 294 295 296 297
fc00:0:1::/48,64
delegate=fc00:1::/36,48

[ipv6-dns]
#fc00:1::1
#fc00:1::2
#fc00:1::3
#dnssl=suffix1.local.net
#dnssl=suffix2.local.net.

[ipv6-dhcp]
K
Kozlov Dmitry 已提交
298
verbose=1
K
Kozlov Dmitry 已提交
299 300
pref-lifetime=604800
valid-lifetime=2592000
K
Kozlov Dmitry 已提交
301
route-via-gw=1