Subject: Re: pptp config
To: Mipam <mipam@ibb.net>
From: Bryan P <u9@terran.org>
List: netbsd-help
Date: 07/08/2003 12:42:15
On the distinguished day of Jul 8, Mipam wrote:
> Hi,
>
> Im trying to get pptp to work here. I have a dsl modem so my ethernet
> card is connected to the modem. Now my provider wishes me to speak pptp
> to him.
...
> Any suggestions what i could do or where im going wrong?
Hello,
This may or may not be helpful, but it is a mini-HOWTO I wrote for how to
set up access to PPTP to an unnamed corporate network. It "works for me".
Using PPTP at XXXXXXXX (mini-HOWTO)
===================================
Bryan P, Feb 2003
1.) You'll need a PPTP account set up, which is basically a username and
password on the external PPTP server. Contact the network
administrator for this.
2.) Install pptp-linux, following the included directions. Note that for
NetBSD, you'll need to turn OFF GRE support in the kernel (build with
the "pseudo-device gre" commented out).
3.) Create a pptp.conf file which contains, at least:
name <youraccountname>
remotename PPTP
Putting your PPTP acount name in the space <youraccountname>.
4.) Create an /etc/ppp/chap-secrets file (which should not be readable by
anyone but root), which looks like this:
<youraccountname> PPTP <yourpassword>
5.) Start pptp with something like:
pptp 1.2.3.4 file pptp.conf
where "1.2.3.4" is the address of the PPTP server.
6.) Add a network route through the tunnel, which looks something like
this:
route add -net 10.1.0.0 -netmask 255.255.0.0 10.1.99.151
Where "10.1.99.151" is the address for the PPTP server-side. Figure
that out by looking at the netstat -rn or ifconfig of the ppp
interface.
Other things to consider...
If you are tunneling in from behind a firewall of some sort, you will
want to make sure that you allow out IP protocol 47 (GRE) and that
PPTP masquerading is turned on if you need it. You would probably
need it if you were tunneling from a private address, though if the
NAT device is not also capable of being a PPTP endpoint itself and/or
supports portless NAT, it might work as-is.
-bp
--