📄 ppp-howto-12.html
字号:
# This requires TWO WAY authentication - do NOT use this for a standard# PAP authenticated link to an ISP as this will require the ISP machine# to authenticate itself to your machine (and it will not be able to).#+pap# Don't agree to authenticate using PAP.#-pap# Require the peer to authenticate itself using CHAP [Cryptographic# Handshake Authentication Protocol] authentication.# This requires TWO WAY authentication - do NOT use this for a standard# CHAP authenticated link to an ISP as this will require the ISP machine# to authenticate itself to your machine (and it will not be able to).#+chap# Don't agree to authenticate using CHAP.#-chap# Disable negotiation of Van Jacobson style IP header compression (use# default, i.e. no compression).#-vj# Increase debugging level (same as -d). If this option is given, pppd# will log the contents of all control packets sent or received in a# readable form. The packets are logged through syslog with facility# daemon and level debug. This information can be directed to a file by# setting up /etc/syslog.conf appropriately (see syslog.conf(5)). (If# pppd is compiled with extra debugging enabled, it will log messages# using facility local2 instead of daemon).#debug# Append the domain name <d> to the local host name for authentication# purposes. For example, if gethostname() returns the name porsche,# but the fully qualified domain name is porsche.Quotron.COM, you would# use the domain option to set the domain name to Quotron.COM.#domain <d># Enable debugging code in the kernel-level PPP driver. The argument n# is a number which is the sum of the following values: 1 to enable# general debug messages, 2 to request that the contents of received# packets be printed, and 4 to request that the contents of transmitted# packets be printed.#kdebug n# Set the MTU [Maximum Transmit Unit] value to <n>. Unless the peer# requests a smaller value via MRU negotiation, pppd will request that# the kernel networking code send data packets of no more than n bytes# through the PPP network interface.#mtu <n># Set the name of the local system for authentication purposes to <n>.# This will probably have to be set to your ISP user name if you are# using PAP/CHAP.#name <n># Set the user name to use for authenticating this machine with the peer# using PAP to <u>.# Do NOT use this if you are using 'name' above!#user <u># Enforce the use of the host name as the name of the local system for# authentication purposes (overrides the name option).#usehostname# Set the assumed name of the remote system for authentication purposes# to <n>.#remotename <n># Add an entry to this system's ARP [Address Resolution Protocol]# table with the IP address of the peer and the Ethernet address of this# system.#proxyarp# Use the system password database for authenticating the peer using# PAP.#login# If this option is given, pppd will send an LCP echo-request frame to# the peer every n seconds. Under Linux, the echo-request is sent when# no packets have been received from the peer for n seconds. Normally# the peer should respond to the echo-request by sending an echo-reply.# This option can be used with the lcp-echo-failure option to detect# that the peer is no longer connected.#lcp-echo-interval <n># If this option is given, pppd will presume the peer to be dead if n# LCP echo-requests are sent without receiving a valid LCP echo-reply.# If this happens, pppd will terminate the connection. Use of this# option requires a non-zero value for the lcp-echo-interval parameter.# This option can be used to enable pppd to terminate after the physical# connection has been broken (e.g., the modem has hung up) in# situations where no hardware modem control lines are available.#lcp-echo-failure <n># Set the LCP restart interval (retransmission timeout) to <n> seconds# (default 3).#lcp-restart <n># Set the maximum number of LCP terminate-request transmissions to <n># (default 3).#lcp-max-terminate <n># Set the maximum number of LCP configure-request transmissions to <n># (default 10).# Some PPP servers are slow to start up. You may need to increase this# if you keep getting 'serial line looped back' errors and your are SURE# that you have logged in correctly and PPP should be starting on the server.#lcp-max-configure <n># Set the maximum number of LCP configure-NAKs returned before starting# to send configure-Rejects instead to <n> (default 10).#lcp-max-failure <n># Set the IPCP restart interval (retransmission timeout) to <n># seconds (default 3).#ipcp-restart <n># Set the maximum number of IPCP terminate-request transmissions to <n># (default 3).#ipcp-max-terminate <n># Set the maximum number of IPCP configure-request transmissions to <n># (default 10).#ipcp-max-configure <n># Set the maximum number of IPCP configure-NAKs returned before starting# to send configure-Rejects instead to <n> (default 10).#ipcp-max-failure <n># Set the PAP restart interval (retransmission timeout) to <n> seconds# (default 3).#pap-restart <n># Set the maximum number of PAP authenticate-request transmissions to# <n> (default 10).#pap-max-authreq <n># Set the CHAP restart interval (retransmission timeout for# challenges) to <n> seconds (default 3).#chap-restart <n># Set the maximum number of CHAP challenge transmissions to <n># (default 10).#chap-max-challenge# If this option is given, pppd will re-challenge the peer every <n># seconds.#chap-interval <n># With this option, pppd will accept the peer's idea of our local IP# address, even if the local IP address was specified in an option.#ipcp-accept-local# With this option, pppd will accept the peer's idea of its (remote) IP# address, even if the remote IP address was specified in an option.#ipcp-accept-remote</PRE><HR><P><P><H2><A NAME="ss12.2">12.2 我应该使用什麽选项? (无 PAP/CHAP)</A></H2><P>嗯,完全视情况而定(唉).这里所提供的应该适用於大部份的伺服器.<P><P>然而,如果它无法运作的话,阅读样板档(<CODE>/etc/ppp/options.tpl</CODE>) <B>以及</B> pppd 的线上使用手册<B>并且</B>告诉你所连线之伺服器的系统管理/使用者支援人员.<P><P>你还应该注意这里所展示的连结指令稿也使用了一些给 pppd 的命令列选项以便让事情容易调整些.<P><HR><PRE># /etc/ppp/options (NO PAP/CHAP)## 避免 pppd 进入背景执行-detach## 使用数据机控制线modem# 使用 uucp 形态的锁定档以避免它人取用串列装置lock# 使用硬体流量控制crtscts# 在递送表格中将此连结建立为预设递送装置defaultroute# 不使用任何"逸出"控制序列asyncmap 0# 最大传送封包大小为 552 bytesmtu 552# 最大接收封包大小为 552 bytesmru 552##-------END OF SAMPLE /etc/ppp/options (no PAP/CHAP)</PRE><HR><P><HR><A HREF="PPP-HOWTO-13.html">Next</A><A HREF="PPP-HOWTO-11.html">Previous</A><A HREF="PPP-HOWTO.html#toc12">Contents</A></BODY></HTML>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -