· Next, edit file /etc/pptp.conf
option /etc/ppp/options.pptpdlocalip [IP Interface that connect to LAN]remoteip [IP for your client, ex:192.168.0.101-103]
· Edit file /etc/ppp/options.pptpd like this,locknopcompnoauthdebugdefaultroutename pptpdproxyarpasyncmap 0refuse-chaprefuse-mschaprequire-mschap-v2require-mppelcp-echo-failure 30lcp-echo-interval 5ipcp-accept-localipcp-accept-remoteallow-ip [ip_remote_yg_boleh mengakses]
ms-dns [DNS Local Server]
ms-wins [WINS Local Server]
proxyarp
debug
dump
lock
nobsdcomp
logfile /var/log/pptp.log
· Open the Firewall for TCP port 1723 dan PROTO GRE-A INPUT -i eth0 -p tcp --dport 1723 -j ACCEPT-A INPUT -p gre -j ACCEPT
Use the EAP-TLS (MSCHAP2) for the authentification.
No comments:
Post a Comment