startup:
# configure mpd users
set user foobar 123 admin
# configure the console
set console self 127.0.0.1 5005
set console open
# configure the web server
set web self 192.168.0.2 5006
set web opendefault:
load vpn1
load vpn2
vpn1:
set ippool add pool0 10.0.0.1 10.0.0.250
create bundle template B1
set iface enable proxy-arp
set iface idle 0
set iface enable tcpmssfix
set iface up-script /usr/local/etc/mpd5/routes-up.sh
set iface down-script /usr/local/etc/mpd5/routes-down.sh
set ipcp yes vjcomp
set ipcp ranges 10.0.0.251/32 ippool pool0
set ipcp dns 192.168.0.2
set ipcp nbns 192.168.0.12
# Enable Microsoft Point-to-Point encryption (MPPE)
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
#
create link template L1 pptp
set link action bundle B1
set link enable multilink
set link yes acfcomp protocomp
set link mtu 1460
# Enable both sides to authenticat each other with CHAP
set link no pap eap chap
set link enable chap chap-msv1 chap-msv2
set auth max-logins 1
set auth enable internal
set link keep-alive 10 100
# Configure PPTP and open link
set pptp self 0.0.0.0
set link enable incoming
vpn2:
set ippool add pool1 172.16.0.1 172.16.0.250
create bundle template B2
set iface enable proxy-arp
set iface idle 0
set iface enable tcpmssfix
set iface up-script /usr/local/etc/mpd5/routes-up.sh
set iface down-script /usr/local/etc/mpd5/routes-down.sh
set ipcp yes vjcomp
set ipcp ranges 172.16.0.251/32 ippool pool1
set ipcp dns 192.168.0.2
set ipcp nbns 192.168.0.12
# Enable Microsoft Point-to-Point encryption (MPPE)
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
#
create link template L2 pptp
set link action bundle B2
set link enable multilink
set link yes acfcomp protocomp
set link mtu 1460
# Enable both sides to authenticat each other with CHAP
set link no pap eap chap
set link enable chap chap-msv1 chap-msv2
set auth max-logins 1
set auth enable internal
set link keep-alive 10 100
# Configure PPTP and open link
set pptp self 0.0.0.0
set link enable incoming