*BSD News Article 63384


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.mel.connect.com.au!munnari.OZ.AU!news.ecn.uoknor.edu!paladin.american.edu!zombie.ncsc.mil!news.mathworks.com!newsfeed.internetmci.com!uwm.edu!news.sol.net!daily-planet.execpc.com!earth!jkane
From: jkane@earth.execpc.com (Jeff Kane)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: [Q] pppd examples?
Date: 12 Mar 1996 03:44:18 GMT
Organization: Exec-PC
Lines: 94
Message-ID: <4i2rui$kqf@daily-planet.execpc.com>
NNTP-Posting-Host: earth-le1.execpc.com
X-Newsreader: TIN [version 1.2 PL2]

A couple of questions for the group.

I am trying to set up pppd for a small office to use
for work from home type connections.  I have successfully
set up ijppp as a client, but this office wants pppd
instead.  Preference I guess.

Any example you can supply would be most helpful.

First, any comments as to why NOT to use pppd???

Second, can the ppp0 port and the eth0 ports both
 be part of the same subnet?  ie.
 ppp0 = 192.99.99.25
 eth0 = 192.99.99.5
 The client will get 192.99.99.26
 These are not the real IP's, but are examples.

Third, what is the difference between pap/chap and
 using the /etc/passwd file for login.  Or, simply,
 can one use the /etc/passwd without pap/chap?

Details:

Comments are considered open season.  I will accept
email to keep this thread from going wild!

On the addressing question, I have tried to set up a
bogus second base address to test with.  If I use a
second class C network, I get the same symptom.  This
being ... The client gets a connection after much trial
and error (stress the error!)

Config -
  eth0 - 192.99.99.5
  ppp0 - 192.99.100.25
  client - 192.99.100.26
  default route for server 192.99.99.1

I am able to ping from the client the eth0, ppp0,
and the clients own ppp port with no problems.  I
can telnet to the server.  I can not ping the default
router for the server, or any other device.

I have set the client for using a default router of
all three of eth0, ppp0, and 192.99.99.1.  Same
symptom in all three cases.  I tried to add a route
in the tables of the server, and it did not help.

What am I over looking?  Do I need Gated instead of
routed?  Or is it less than that?

Next, I would like to use the same subnet on both
eth0 and ppp0 if possible.  I tried that too.
Didn't go to far as I thought that may have been
my problem.  I set it to do proxyarp, and it did
add an entry, but still could not ping past the
server in that config either.

Is it possible to use the same subnet on both sides?

And finally, pap/chap/passwd?  This one had me for
a while.  I still am working on it.  Can I use the
/etc/passwd file as a authentication medium?  The 
man pages elude to it, but alas, no examples!  Any
basic example would be appreciated.

I set "login" in the options file.  Then, I set 
"-pap" and "-chap" also.  I then added a pap.secrets
file with just " * * "" " in it which according to 
the man pages should allow any ID or Password from
any client to connect.  Well, it has gotten me this
far, but at some point, I will need to use some sort
of authentication.

Any examples of pap.secrets or chap.secrets?

What is a secret anyhow?  (It's secret and you can't
tell me right!)  I am guessing it is a password.

Can I use the /etc/passwd, or do I have to let getty
answer the port to do that?  If so, do I then open
up a security hole by allowing shell access??

TIA



--
Jeff Kane                                             jkane@execpc.com 
Sysop - Home Brew University BBS   Brew City Campus       414-238-9074
Genealogy Search:  Brickner, Kane, Kimbro, LaClaire, Snyder|Snider,
                   Seecs|Seetch|Sich, and Thorton.
  Visit my homepage for more ...          http://www.execpc.com/~jkane