mirror of
https://github.com/vyos/vyos-documentation.git
synced 2025-10-26 08:41:46 +01:00
56 lines
1.7 KiB
ReStructuredText
56 lines
1.7 KiB
ReStructuredText
:lastproofread: 2021-07-15
|
|
|
|
.. _pptp:
|
|
|
|
PPTP-Server
|
|
-----------
|
|
|
|
The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only
|
|
for backwards compatibility. PPTP has many well known security issues and you
|
|
should use one of the many other new VPN implementations.
|
|
|
|
As per default and if not otherwise defined, mschap-v2 is being used for
|
|
authentication and mppe 128-bit (stateless) for encryption. If no
|
|
gateway-address is set within the configuration, the lowest IP out of the /24
|
|
client-ip-pool is being used. For instance, in the example below it would be
|
|
192.168.0.1.
|
|
|
|
server example
|
|
^^^^^^^^^^^^^^
|
|
|
|
.. code-block:: none
|
|
|
|
set vpn pptp remote-access authentication local-users username test password 'test'
|
|
set vpn pptp remote-access authentication mode 'local'
|
|
set vpn pptp remote-access client-ip-pool start '192.168.0.10'
|
|
set vpn pptp remote-access client-ip-pool stop '192.168.0.15'
|
|
set vpn pptp remote-access outside-address '10.1.1.120'
|
|
|
|
|
|
client example (debian 9)
|
|
^^^^^^^^^^^^^^^^^^^^^^^^^
|
|
|
|
Install the client software via apt and execute pptpsetup to generate the
|
|
configuration.
|
|
|
|
|
|
.. code-block:: none
|
|
|
|
apt-get install pptp-linux
|
|
pptpsetup --create TESTTUNNEL --server 10.1.1.120 --username test --password test --encrypt
|
|
pon TESTTUNNEL
|
|
|
|
The command pon TESTUNNEL establishes the PPTP tunnel to the remote system.
|
|
|
|
|
|
All tunnel sessions can be checked via:
|
|
|
|
.. code-block:: none
|
|
|
|
run show vpn remote-access
|
|
Active remote access VPN sessions:
|
|
|
|
User Proto Iface Tunnel IP TX byte RX byte Time
|
|
---- ----- ----- --------- ------- ------- ----
|
|
test PPTP pptp0 192.168.0.10 288 66 00h00m07s
|