From owner-FreeBSD-net-jp@jp.FreeBSD.org Wed Jan 30 16:42:40 2002
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) id g0U7ge155314;
	Wed, 30 Jan 2002 16:42:40 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from mail.y-min.or.jp (mx.y-min.or.jp [211.10.195.162])
	by castle.jp.FreeBSD.org (8.11.6+3.4W/8.11.3) with SMTP/inet id g0U7ge655308
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 30 Jan 2002 16:42:40 +0900 (JST)
	(envelope-from nob@makioka.y-min.or.jp)
Received: (qmail 48398 invoked by uid 7794); 30 Jan 2002 17:01:11 +0900
Received: from nob@makioka.y-min.or.jp by mail.y-min.or.jp with qmail-scanner-1.01 (. Clean. Processed in 0.271101 secs); 30 Jan 2002 08:01:11 -0000
Received: from unknown (HELO makioka.y-min.or.jp) (211.10.195.185)
  by 0 with SMTP; 30 Jan 2002 17:01:09 +0900
Received: (qmail 92186 invoked from network); 30 Jan 2002 16:42:36 +0900
Received: from unknown (HELO localhost) (192.168.0.1)
  by 192.168.0.1 with SMTP; 30 Jan 2002 16:42:36 +0900
Date: Wed, 30 Jan 2002 16:42:35 +0900 (JST)
Message-Id: <20020130.164235.41714510.nob@makioka.y-min.or.jp>
To: FreeBSD-net-jp@jp.FreeBSD.org
From: MURATA Nobuhiro <nob@makioka.y-min.or.jp>
X-Mailer: Mew version 2.0.50 on Emacs 20.7 / Mule 4.0 (HANANOEN)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-net-jp@jp.FreeBSD.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+011218
X-Sequence: FreeBSD-net-jp 3511
Subject: [FreeBSD-net-jp 3511] mpd =?ISO-2022-JP?B?GyRCJEckThsoQg==?= PPTP
 =?ISO-2022-JP?B?GyRCQFxCMxsoQg==?= 
Errors-To: owner-FreeBSD-net-jp@jp.FreeBSD.org
Sender: owner-FreeBSD-net-jp@jp.FreeBSD.org
X-Originator: nob@makioka.y-min.or.jp

$BB<ED!wKR5V$G$9!#(B

FreeBSD 4.4R $B$r(Bgateway$B$H$9$k(BLAN$B$N4V$r(B
 mpd-netgraph$B$N(BPPTP$B$G@\B3$7$h$&$H;n$_$F$$$^$9$,!"(B
link$B$O$5$l$F$$$k$h$&$J$N$G$9$,!"(Bping $B$,DL$j$^$;$s!#(B

BOX1$B$K$O(Bglobal address a.b.c.d$B$H(B 192.160.0.1
BOX2$B$K$O(B               e.f.g.h$B$H(B 192.168.1.1 $B$r3d$jEv$F$F$$$^$9!#(B
$B$3$N(BBOX1$B$N(B192.168.0.0/24$B$H(BBOX2$B$N(B192.168.1.0/24$B$H$N4V$r@\B3$7$?$$$N$G$9!#(B

BOX1,BOX2$B$O(BFW+NAT$BBP1~!"(BNETGRAPH$BBP1~$G(Bkernel$B$r(Bcompile$B$7$^$7$?!#(B

# ipfw list$B$O(B
00050 divert 8668 ip from any to any via vr0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
65000 allow ip from any to any
65535 deny ip from any to any
$B$G!"(BNAT on$B$G!"$"$H$O$=$N$^$^DL$7$F$$$^$9!#(B

BOX1,BOX2$B$H$b(Bmpd$B$O(Bport$B$G(Binstall$B$7$^$7$?!#(B

/usr/local/etc/mpd/mpd.conf
---------------------------
vpn:
        new -i ng0 vpn vpn
        set iface disable on-demand
        set iface addrs 192.168.0.1 192.168.1.1
#             BOX2 $B$G$O(B 192.168.1.1 192.168.0.1
        set iface idle 0
        set iface route 192.168.1.0/24
        set bundle disable multilink
        set bundle authname "VpnLogin"
        set bundle password "VpnPassword"
        set link yes acfcomp protocomp
        set link no pap
        set link yes chap
        set link keep-alive 10 75
        set ipcp yes vjcomp
        set ipcp ranges 192.168.0.1/32 192.168.1.1/32
#            BOX2$B$G$O(B   192.168.1.1/32 192.168.0.1/32
        set bundle enable compression
        set ccp yes mppc
        set ccp yes mpp-e40
        set ccp yes mpp-e128
        set bundle enable crypt-reqd
        set ccp yes mpp-stateless
        open


/usr/local/etc/mpd/mpd.links
----------------------------
vpn:
        set link type pptp
        set pptp self a.b.c.d
        set pptp peer e.f.g.h
#	     BOX2$B$G$O(B self$B$H(Bpeer$B$,5U(B
        set pptp enable originate incoming outcall


$B$3$N@_Dj$GAPJ}$G(B mpd vpn $B$H5/F0$9$k$H(B

Multi-link PPP for FreeBSD, by Archie L. Cobbs.
Based on iij-ppp, by Toshiharu OHNO.
mpd: pid 1067, version 3.6 (root@************** 09:00 26-Jan-2002)
[vpn] ppp node is "mpd1067-vpn"
empd: local IP address for PPTP is a.b.c.d
[vpn] using interface ng0
$BN,(B
pptp0: connected to e.f.g.h:1723
pptp0: attached to connection with e.f.g.h:1723
$BN,(B

$B$H@\B3$K@.8y$7$F$$$k$h$&$G$9!#(B
ifconfig/netstat$B$G3NG'$9$k$H!"(BBOX1$B$G$O(B
# ifconfig ng0
ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1498
        inet6 fe80::240:26ff:fe55:e0cb%ng0 prefixlen 64 scopeid 0x5
        inet 192.168.0.1 --> 192.168.1.1 netmask 0xffffffff

# netstat -nr
192.168.1          192.168.1.1        UGSc        0        0    ng0
192.168.1.1        192.168.0.1        UH          1        0    ng0
$B$H(BBOX2$B$X$N7PO)$,@_Dj$5$l$F$$$^$9!#(BBOX2$B$G$bF1MM$G$9!#(B

$B$3$N>uBV$G(B BOX1 $B$+$i(B BOX2$B$K(Bping$B$9$k$H(B
BOX1$B$G$O(B
[vpn] LCP: rec'd Protocol Reject #1 link 0 (Opened)
[vpn] LCP: protocol 0x0015 was rejected
[vpn] LCP: rec'd Protocol Reject #2 link 0 (Opened)
[vpn] LCP: protocol 0x0087 was rejected
[vpn] LCP: rec'd Protocol Reject #3 link 0 (Opened)
[vpn] LCP: protocol 0x0009 was rejected

BOX2$B$G$O(B
[vpn] rec'd unexpected protocol 0x0015 on link -1, rejecting
[vpn] rec'd unexpected protocol 0x0087 on link -1, rejecting
[vpn] rec'd unexpected protocol 0x0009 on link -1, rejecting

$B$H$$$&I=<($,$5$l!"(Bping$B$NJVEz$O$"$j$^$;$s!#(B

$B$I$3$KLdBj$,$"$k$+!"$5$5$$$JE@$G$bFM$C9~$s$G$$$?$@$1$l$P=u$+$j$^$9!#(B
$B$h$m$7$/$*4j$$$7$^$9!#(B

MURATA Nobuhiro
nob@makioka.y-min.or.jp
