File:  [ELWIX - Embedded LightWeight unIX -] / embedaddon / mpd / doc / mpd47.html
Revision 1.1.1.4 (vendor branch): download - view: text, annotated - select for diffs - revision graph
Wed Mar 17 00:39:23 2021 UTC (3 years, 2 months ago) by misho
Branches: mpd, MAIN
CVS tags: v5_9p16, v5_9, HEAD
mpd 5.9

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>PPTP device type commands</TITLE>
</HEAD>
<BODY text="#000000" bgcolor="#ffffff">

<A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A>
 <b>:</b> <A HREF="mpd42.html"><EM>Device Types</EM></A>
 <b>:</b> <EM>PPTP device type commands</EM><BR>
<b>Previous:</b> <A HREF="mpd46.html"><EM>UDP device type commands</EM></A><BR>
<b>Next:</b> <A HREF="mpd48.html"><EM>L2TP device type commands</EM></A>


<HR NOSHADE>
  <H2><A NAME="47"></A>5.5. PPTP device type commands<A NAME="pptp"></A></H2>
<p>This chapter describes commands that are specific to PPTP type links.
These commands apply to the currently active link, and are only
valid if the currently active link has type <b>pptp</b>.</p>
<p>The PPTP protocol can be most easily understood as just another
link layer type, where the link layer medium just happens to be
an IP connection. So, for example, instead of configuring a
telephone number to dial as you would with a modem, you configure
an IP address to connect to. Everything else that's above the
link layer functions exactly the same. Hence PPTP allows you
to ``tunnel'' PPP frames over IP.</p>
<p>Note that PPTP connections are initiated by a TCP connection from
one machine to another, and that servers usually listen to TCP
port 1723 (and this is the default for <code><em>port</em></code>
in the commands below). PPTP also uses the GRE protocol, which
has IP protocol number 47. Your firewall may need to be adjusted
to allows this type of IP packet.</p>
<p>Complete PPTP network topology looks like:
<pre>
client &lt;- some link type -&gt; PAC &lt;- PPTP tunnel -&gt; PNS
</pre>
</p>
<p>PAC is physical level repeater, which receives PPP connection of some 
type and forwards it to PNS using PPTP protocol. PNS is a PPP endpoint, 
which receives PPP frames via PPTP tunnel and processes them.</p>
<p>In simple case, when physical conversion is not required, topology 
can be simplified to:
<pre>
client (PAC emulator) &lt;- PPTP tunnel -&gt; PNS
</pre>
</p>
<p>Mpd is able to operate in both PAC and PNS modes. As PAC mpd supports 
both simple case PAC emulator and complete PAC topologies. Complete 
PAC can be configured by joining two physical devices using mpd's
repeater functionality.</p>
<p>
<dl>

<dt><b><code>set pptp self <em>ipaddr</em> [ <em>port</em> ]</code></b><dd><p>Sets the local IP address and port for the PPTP connection.</p>

<dt><b><code>set pptp peer <em>ipaddr</em> [ <em>port</em> ]</code></b><dd><p>Sets the peer IP address and port for the PPTP connection.
This command applies to both incoming and outgoing connections.
For outgoing connections, this command is required in order to
specify where to connect to. For incoming connections, this command
is optional; if not given, mpd accepts incoming connections from any
host. Otherwise, only connections from the stated IP address
(and, optionally, port) are allowed.</p>

<dt><b><code>set pptp callingnum <em>number</em></code></b><dd>
<dt><b><code>set pptp callednum <em>number</em></code></b><dd><p>Sets the calling and called telephone number to use when initiating a PPTP
connection. For most VPN applications this is ignored, but in certain
cases an actual phone number is required.
The default is the empty string.</p>

<dt><b><code>set pptp enable <em>option ...</em> </code></b><dd>
<dt><b><code>set pptp disable <em>option ...</em> </code></b><dd>
<p>Enable and disable PPTP device type options for the link.</p>

</dl>
</p>

<p>The following options are supported:</p>
<p>
<dl>

<dt><b><code>outcall</code></b><dd><p>In PPTP, each individual PPP connection between two IP hosts (there
may be several, and these are not to be confused with the
<em>single</em> TCP connection between any two IP hosts), is
initiated as either an incoming or an outgoing call. 
This allows to make an outgoing phone call (by PNS) via a remote access
server (PAC), as well as in more common case forward an incoming
phone call from an access server (PAC) to a remote PPTP server (PNS).</p>
<p>When this option is enabled, mpd will initiate outgoing calls (PNS);
otherwise mpd will initiate incoming calls (PAC). Although it seems that
incoming would be more correct, the default is outgoing, as this
is consistent with the behavior of the Microsoft PPTP dial-up adapter
client.</p>
<p>Mpd will accept either type of call on an incoming PPTP connection.</p>

<dt><b><code>delayed-ack</code></b><dd><p>Enable delayed ACK's. This can improve throughput on reliable links.</p>
<p>The default is enable.</p>

<dt><b><code>always-ack</code></b><dd><p>Always include ACK even if already sent. This can improve throughput
on unreliable links.</p>
<p>The default is disable.</p>

<dt><b><code>windowing</code></b><dd><p>Enables the windowing mechanism specified by the protocol. Disabling 
this will cause Mpd to violate the protocol, possibly confusing some 
PPTP peers, but usually results in better performance. The windowing 
mechanism is a design error in the PPTP protocol; L2TP, the successor 
to PPTP, removes it.</p>
<p>The default is disable.</p>

<dt><b><code>resolve-once</code></b><dd><p>Enables resolving peer address only once, on startup, or on manual
typing in CLI.</p>
<p>The default is enable.</p>

</dl>
</p>
<p>Note that if you are connecting to an NT server, your authentication
name must include the NT domain name. For example:</p>
<p>
<blockquote><code>
<pre>
    set auth authname "DOMAIN\\username"
</pre>
</code></blockquote>
</p>
<p>For updating Windows 95 and 98 clients so they work properly, see
<A href="http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q191540">VPN Update for Windows 98 and Dial-Up Networking 1.3 Available</A></p>



 <HR NOSHADE>
<A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A>
 <b>:</b> <A HREF="mpd42.html"><EM>Device Types</EM></A>
 <b>:</b> <EM>PPTP device type commands</EM><BR>
<b>Previous:</b> <A HREF="mpd46.html"><EM>UDP device type commands</EM></A><BR>
<b>Next:</b> <A HREF="mpd48.html"><EM>L2TP device type commands</EM></A>



</BODY>
</HTML>

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>