summaryrefslogtreecommitdiffstats
path: root/doc/misc/pptp.txt
blob: 24bdc2fba419602937ae789208fec854f0195bc7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
requirements:
- mppe patched kernel (http://www.polbox.com/h/hs001/)
- pptp client (http://pptpclient.sourceforge.net/)


needed for connection:
- IP address or hostname
- dns
	- automatic (usepeerdns)
	- name servers (ip)
- authentication domain name 
- authentication
	- no (noauth)
	- yes 
- username
- password
- encryption
	- refuse 40 bit encr (nomppe-40)
	- refuse 128 bit encr (nomppe-128)
	- require stateless encr (mppe-stateful)
	- require mppe (require-mppe)
		- requires ppp-compress-18 (ppp_mppe)
	- refuse eap (refuse-eap)

optional:
- debug (debug dump)
- reconnect on disconnect (persist)


options:

       mppe-stateful
              Allow  MPPE  to  use  stateful  mode.   Stateless  mode is still
              attempted first.  The default is to disallow stateful mode.
       nomppe Disables MPPE (Microsoft Point to Point  Encryption).   This  is
              the default.

       nomppe-40
              Disable 40-bit encryption with MPPE.

       nomppe-128
              Disable 128-bit encryption with MPPE.

       nomppe-stateful
              Disable MPPE stateful mode.  This is the default.

       refuse-mschap
              With this option, pppd will not agree to authenticate itself  to
              the peer using MS-CHAP.

       refuse-mschap-v2
              With  this option, pppd will not agree to authenticate itself to
              the peer using MS-CHAPv2.
       require-mppe
              Require  the  use of MPPE (Microsoft Point to Point Encryption).
              This option disables all other compression types.   This  option
              enables  both  40-bit and 128-bit encryption.  In order for MPPE
              to successfully come up, you must have authenticated with either
              MS-CHAP  or  MS-CHAPv2.  This option is presently only supported
              under Linux, and only if your  kernel  has  been  configured  to
              include MPPE support.

       require-mppe-40
              Require the use of MPPE, with 40-bit encryption.

       require-mppe-128
              Require the use of MPPE, with 128-bit encryption.

       require-mschap
              Require the peer to authenticate itself using MS-CHAP [Microsoft
              Challenge Handshake Authentication Protocol] authentication.

       require-mschap-v2
              Require  the  peer  to  authenticate  itself   using   MS-CHAPv2
              [Microsoft  Challenge Handshake Authentication Protocol, Version
              2] authentication.

       require-eap
              Require the peer to authenticate itself  using  EAP  [Extensible
              Authentication Protocol] authentication.