имеем freeBSD 5.4, две серые сетки /24 - соответсвенно 2 сетёвки fxp0 (192.168.105.1, смотрит на сетку провайдера) и fxp1 (192.168.55.253, на локальную сеть), mpd из портов.
Задачи: через fxp0 подключиться при помощи mpd к vpn серверу провайдера 192.168.105.254, тем самым получить реальный адрес и иНет.
а на fxp1(локальная сетка) повесить 20 интерфесов vpn для клиентов из локальной сетки. Т.е. ng0 - линк с ISP, ng1-ng20 клиенты.
Пишу конфиг:
srv-03# cat /usr/local/etc/mpd/mpd.conf
default:
load vpn0
load pptp1
# ...
load pptp20
vpn0:
new -i ng0 vpn0 vpn0
set bundle authname "user"
set bundle password "pass"
set ipcp ranges 0.0.0.0/0 0.0.0.0/0
load vpn_isp
pptp1:
new -i ng1 pptp1 pptp1
set ipcp ranges 10.0.7.253/32 10.0.7.1/32
load pptp_standart
# ...
pptp20:
new -i ng20 pptp20 pptp20
set ipcp ranges 10.0.7.253/24 10.0.7.20/32
load pptp_standart
vpn_isp:
set iface disable on-demand
set iface idle 0
set iface route default
set bundle disable multilink
set link yes acfcomp protocomp
set link disable chap pap
set link accept chap pap
set link enable no-orig-auth
set link keep-alive 10 75
set ipcp yes vjcomp
set pptp self 192.168.105.1
set pptp peer 192.168.105.254
set pptp enable originate incoming outcall
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e128
set bundle enable crypt-reqd
set ccp yes mpp-stateless
set iface enable tcpmssfix
open
pptp_standart:
set iface disable on-demand
set bundle enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
set link keep-alive 60 180
set ipcp yes vjcomp
set ipcp dns 192.168.55.253
set bundle enable compression
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e56
set ccp yes mpp-e128
set ccp yes mpp-stateless
# set bundle yes crypt-reqd
set pptp self 192.168.55.253
set pptp enable incoming
set pptp disable originate
set iface mtu 1500
set link mtu 1500
set link mru 1500
set iface enable tcpmssfix
# set iface up-script /usr/local/vpn_up.sh
# set iface down-script /usr/local/vpn_down.sh
===============================================================
srv-03# cat /usr/local/etc/mpd/mpd.links
vpn0:
set link type pptp
pptp1:
set link type pptp
# ....
pptp20:
set link type pptp
===============================================================
Проблема: если в обоих секциях mpd.conf одновременно прописан set pptp self на разные ip:
vpn_isp:
set pptp self 192.168.105.1
pptp_standart:
set pptp self 192.168.55.253
линки не поднимаются вообще, mpd пишет:
...
[vpn0] link: OPEN event
[vpn0] LCP: Open event
[vpn0] LCP: state change Initial --> Starting
[vpn0] LCP: LayerStart
[vpn0] device: OPEN event in state DOWN
pptp0: connecting to 192.168.105.254:1723
[vpn0] device is now in state OPENING
pptp0: connection to 192.168.105.254:1723 failed
pptp0: killing connection with 192.168.105.254:1723
pptp0-0: killing channel
[vpn0] PPTP call failed
[vpn0] device: DOWN event in state OPENING
[vpn0] device is now in state DOWN
[vpn0] link: DOWN event
[vpn0] LCP: Down event
[vpn0] device: OPEN event in state DOWN
[vpn0] pausing 9 seconds before open
если хде-нить в одной секции убрать set pptp self, то начинает работать другая без проблем ... т.е. или соеденение с провом работает, или клиенты могут подключиться :(
Кто подскажет, можно ли подружить это все ?