startup: default: load berd load en load mel load zp load rv load srn load brv load bc load pptp_server berd: create bundle static B1 set ipcp ranges 10.10.10.100/32 10.2.10.100/32 set iface addrs 10.10.10.100 10.2.10.100 set iface route 10.2.10.100/24 set iface idle 0 set bundle enable encryption set ccp yes mppc set mppc yes e40 set mppc yes e128 set bundle enable crypt-reqd set mppc yes stateless create link static L1 pptp set link action bundle B1 set link no pap chap eap set link yes chap set auth authname 12 set auth password 12 set link mtu 1300 set link mru 1300 set link keep-alive 10 75 set link max-redial 0 set pptp peer IP_1 set link enable incoming open en: create bundle static B2 set iface addrs 10.10.10.100 10.3.10.100 set ipcp ranges 10.10.10.100/32 10.3.10.100/32 set iface route 10.3.10.0/8 set iface enable tcpmssfix set ipcp no vjcomp set bundle enable encryption set bundle enable compression set bundle enable crypt-reqd set ccp yes mppc set mppc yes compress e40 e56 e128 stateless create link static L2 pptp set link action bundle B2 set link enable incoming set link disable multilink set link yes acfcomp protocomp set link enable chap set link accept chap-msv2 chap pap set link deny chap-msv1 set link mtu 1300 set link mru 1300 set link no acfcomp protocomp set auth authname 23 set auth password 23 mel: create bundle static B3 set ipcp ranges 10.10.10.100/32 10.4.10.100/32 set iface addrs 10.10.10.100 10.4.10.100 set iface route 10.4.10.100/24 set iface idle 0 set bundle enable encryption set ccp yes mppc set mppc yes e40 set mppc yes e128 set bundle enable crypt-reqd set mppc yes stateless create link static L3 pptp set link action bundle B3 set link disable multilink set link no pap chap eap set link yes chap set auth authname 33 set auth password 33 set link mtu 1300 set link mru 1300 set link keep-alive 10 75 set link max-redial 0 set link mru 1460 set pptp peer IP_3 set link enable incoming set pptp enable originate open zp: create bundle static B4 set ipcp ranges 10.10.10.100/32 10.5.10.100/32 set iface addrs 10.10.10.100 10.5.10.100 set iface route 10.5.10.100/24 set iface idle 0 set bundle enable encryption set ccp yes mppc set mppc yes e40 set mppc yes e128 set bundle enable crypt-reqd set mppc yes stateless create link static L4 pptp set link action bundle B4 set link disable multilink set link no pap chap eap set link yes chap set auth authname 34 set auth password 34 set link mtu 1300 set link mru 1300 set link keep-alive 10 75 set link max-redial 0 set link mru 1460 set pptp peer IP_4 set link enable incoming open rv: create bundle static B5 set ipcp ranges 10.10.10.100/32 10.6.10.100/32 set iface addrs 10.10.10.100 10.6.10.100 set iface route 10.6.10.100/24 set iface idle 0 set bundle enable encryption set ccp yes mppc set mppc yes e40 set mppc yes e128 set bundle enable crypt-reqd set mppc yes stateless create link static L5 pptp set link action bundle B5 set link disable multilink set link no pap chap eap set link yes chap set auth authname 44 set auth password 44 set link mtu 1300 set link mru 1300 set link keep-alive 10 75 set link max-redial 0 set link mru 1460 set pptp peer IP_5 set link enable incoming open set pptp enable originate srn: create bundle static B6 set iface mtu 1500 set iface mru 1500 set ipcp ranges 10.10.10.100/32 10.7.10.100/32 set iface addrs 10.10.10.100 10.7.10.100 set iface route 10.7.10.100/24 set iface idle 0 set bundle enable encryption set ccp yes mppc set mppc yes e40 set mppc yes e128 set bundle enable crypt-reqd set mppc yes stateless create link static L6 pptp set link action bundle B6 set link disable multilink set link no pap chap eap set link yes chap set auth authname 55 set auth password 55 set link mtu 1460 set link mru 1460 set link keep-alive 10 75 set link max-redial 0 set pptp peer IP_6 set link enable incoming set link enable originate open set pptp enable originate brv: create bundle static B7 set ipcp ranges 10.10.10.100/32 10.8.10.100/32 set iface addrs 10.10.10.100 10.8.10.100 set iface route 10.8.10.100/24 set iface idle 0 set bundle enable encryption set ccp yes mppc set mppc yes e40 set mppc yes e128 set bundle enable crypt-reqd set mppc yes stateless create link static L7 pptp set link action bundle B7 # Enable both sides to authenticat each other with CHAP set link disable multilink set link no pap chap eap set link yes chap set auth authname 56 set auth password 56 set link keep-alive 10 75 set link max-redial 0 set link mtu 1300 set link mru 1300 set pptp disable resolve-once set pptp peer IP_7 set link enable incoming open bc: create bundle static B8 set ipcp ranges 10.10.10.100/32 10.9.10.100/32 set iface addrs 10.10.10.100 10.9.10.100 set iface route 10.9.10.100/24 set iface idle 0 set bundle enable encryption set ccp yes mppc set mppc yes e40 set mppc yes e128 set bundle enable crypt-reqd set mppc yes stateless create link static L8 pptp set link action bundle B8 set link disable multilink set link no pap chap eap set link yes chap set auth authname 555 set auth password 555 set link mtu 1300 set link mru 1300 set link keep-alive 10 75 set link max-redial 0 set link mtu 1460 set pptp peer 31.129.189.153 set pptp disable resolve-once set pptp peer IP_8 set link enable incoming open pptp_server: # Define dynamic IP address pool. set ippool add pool1 10.10.10.140 10.10.10.154 # Create clonable bundle template named BU create bundle template BU set iface enable proxy-arp set iface idle 0 set iface enable tcpmssfix set ipcp yes vjcomp # Specify IP address pool for dynamic assigment. set ipcp ranges 10.10.10.100/32 ippool pool1 set ipcp dns 10.10.10.100 set ipcp nbns 10.10.10.100 # The five lines below enable Microsoft Point-to-Point encryption # (MPPE) using the ng_mppc(8) netgraph node type. set bundle enable compression set ccp yes mppc set mppc yes e40 set mppc yes e128 set mppc yes stateless # Create clonable link template named LN create link template LN pptp # Set bundle template to use set link action bundle BU # Multilink adds some overhead, but gives full 1500 MTU. set link disable multilink set link yes acfcomp protocomp set link no pap chap eap set link enable chap set link enable chap-msv1 set link enable chap-msv2 # set auth max-logins 1 # We can use use RADIUS authentication/accounting by including # another config section with label 'radius'. # load radius set link keep-alive 10 60 # We reducing link mtu to avoid GRE packet fragmentation. set link mtu 1460 # Allow to accept calls set link enable incoming # set pptp self em1