This chapter describes commands that are specific to PPTP type links. These commands apply to the currently active link, and are only valid if the currently active link has type pptp.
The PPTP protocol can be most easily understood as just another link layer type, where the link layer medium just happens to be an IP connection. So, for example, instead of configuring a telephone number to dial as you would with a modem, you configure an IP address to connect to. Everything else that's above the link layer functions exactly the same. Hence PPTP allows you to ``tunnel'' PPP frames over IP.
Note that PPTP connections are initiated by a TCP connection from
one machine to another, and that servers usually listen to TCP
port 1723 (and this is the default for port
in the commands below). PPTP also uses the GRE protocol, which
has IP protocol number 47. Your firewall may need to be adjusted
to allows this type of IP packet.
Currently, mpd will not allow you to create a bundle containing more than one PPTP link.
set pptp mode [ active | passive ]Set the link for active or passive mode. In active mode, the local side initiates all connections. In passive mode, the local side waits for incoming connections (in a future revision bi-directional connections will be supported).
set pptp self ipaddr [ port ]Sets the local IP address and port for the PPTP connection. There is only one distinct IP address possible in current mpd's PPTP implementation.
set pptp peer ipaddr [ port ]Sets the peer IP address and port for the PPTP connection. This command applies to both incoming and outgoing connections. For outgoing connections, this command is required in order to specify where to connect to. For incoming connections, this command is optional; if not given, mpd accepts incoming connections from any host. Otherwise, only connections from the stated IP address (and, optionally, port) are allowed.
set pptp callingnum numberset pptp callednum numberSets the calling and called telephone number to use when initiating a PPTP connection. For most VPN applications this is ignored, but in certain cases an actual phone number is required. The default is the empty string.
set pptp enable option ... set pptp disable option ... Enable and disable PPTP device type options for the link.
The following options are supported:
originateThis option enables the initiation of PPTP connections to the peer.
If this option is disabled, mpd will not initiate any PPTP connections.
You must configure the peer's IP address with the
set pptp peer command.
incomingThis option enables the acceptance of incoming PPTP connections. If this option is disabled, mpd will not accept any incoming connections.
outcallIn PPTP, each individual PPP connection between two IP hosts (there may be several, and these are not to be confused with the single TCP connection between any two IP hosts), is initiated as either an incoming or an outgoing call. This is to allow, for example, making an actual outgoing telephone call via a remote access server, as well as the more common use of forwarding of an incoming telephone call from an access server to a remote PPTP server.
When this option is enabled, mpd will initiate outgoing calls; otherwise mpd will initiate incoming calls. Although it seems that incoming would be more correct, the default is outgoing, as this is consistent with the behavior of the Microsoft PPTP dial-up adapter client.
Mpd will accept either type of call on an incoming PPTP connection.
delayed-ackEnable delayed ACK's. This can improve throughput on reliable links. Default is on.
always-ackAlways include ACK even if already sent. This can improve throughput on unreliable links. Default is off.
windowingEnables the windowing mechanism specified by the protocol. Disabling this will cause Mpd to violate the protocol, possibly confusing other PPTP peers, but often results in better performance. The windowing mechanism is a design error in the PPTP protocol; L2TP, the successor to PPTP, removes it. You need a recent version of FreeBSD (NGM_PPTPGRE_COOKIE >= 1082548365) in order to get this feature. Default is on.