White space fix only. Translators can ignore.

This commit is contained in:
Dru Lavigne 2013-10-18 02:29:58 +00:00
parent faf6b93ca6
commit b91bdad9d4
Notes: svn2git 2020-12-08 03:00:23 +00:00
svn path=/head/; revision=42995

View file

@ -63,8 +63,8 @@
<para>Be familiar with basic network terminology.</para> <para>Be familiar with basic network terminology.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>Understand the basics and purpose of a dial-up connection <para>Understand the basics and purpose of a dial-up
and <acronym>PPP</acronym>.</para> connection and <acronym>PPP</acronym>.</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</sect1> </sect1>
@ -120,35 +120,35 @@
</listitem> </listitem>
<listitem> <listitem>
<para>The dial-up number for the <acronym>ISP</acronym>.</para> <para>The dial-up number for the
<acronym>ISP</acronym>.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>The login name and password assigned by the <acronym>ISP</acronym>.</para> <para>The login name and password assigned by the
<acronym>ISP</acronym>.</para>
</listitem> </listitem>
<listitem> <listitem>
<para>The <acronym>IP</acronym> address of one or more name servers. <para>The <acronym>IP</acronym> address of one or more name
Normally, an <acronym>ISP</acronym> provides these addresses. servers. Normally, an <acronym>ISP</acronym> provides these
If not, use <command>enable addresses. If not, use <command>enable dns</command> in
dns</command> in <filename>ppp.conf</filename> <filename>ppp.conf</filename> and
and <application>ppp</application> will set the name <application>ppp</application> will set the name servers.
servers. This feature requires the <acronym>ISP</acronym> This feature requires the <acronym>ISP</acronym> to
to supporting DNS supporting DNS negotiation.</para>
negotiation.</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
<para>The following information may be supplied by the <acronym>ISP</acronym>, but <para>The following information may be supplied by the
is not necessary:</para> <acronym>ISP</acronym>, but is not necessary:</para>
<itemizedlist> <itemizedlist>
<listitem> <listitem>
<para>The <acronym>IP</acronym> address of the default gateway. <para>The <acronym>IP</acronym> address of the default
If this information is missing gateway. If this information is missing the
the <acronym>ISP</acronym>'s <acronym>PPP</acronym> <acronym>ISP</acronym>'s <acronym>PPP</acronym> server will
server will provide the correct value during provide the correct value during connection setup.</para>
connection setup.</para>
<para>This <acronym>IP</acronym> number is referred to as <para>This <acronym>IP</acronym> number is referred to as
<literal>HISADDR</literal> by <literal>HISADDR</literal> by
@ -166,9 +166,10 @@
<primary>static <acronym>IP</acronym> address</primary> <primary>static <acronym>IP</acronym> address</primary>
</indexterm> </indexterm>
<para>If the <acronym>ISP</acronym> has assigned a static <acronym>IP</acronym> address and <para>If the <acronym>ISP</acronym> has assigned a static
hostname, enter it. Otherwise, this information will be provided <acronym>IP</acronym> address and hostname, enter it.
during connection setup.</para> Otherwise, this information will be provided during
connection setup.</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
@ -191,20 +192,22 @@
<para>A number of files are edited when configuring <para>A number of files are edited when configuring
<command>ppp</command>. The edits <command>ppp</command>. The edits
depend to some extent on whether the <acronym>ISP</acronym> allocates <acronym>IP</acronym> depend to some extent on whether the <acronym>ISP</acronym>
addresses statically or dynamically.</para> allocates <acronym>IP</acronym> addresses statically or
dynamically.</para>
<sect2 id="userppp-staticIP"> <sect2 id="userppp-staticIP">
<title>PPP With Static <acronym>IP</acronym> Addresses</title> <title>PPP With Static <acronym>IP</acronym> Addresses</title>
<indexterm> <indexterm>
<primary>PPP</primary> <primary>PPP</primary>
<secondary>with static <acronym>IP</acronym> addresses</secondary> <secondary>with static <acronym>IP</acronym>
addresses</secondary>
</indexterm> </indexterm>
<para>If the ISP has provided an address that does not change, edit <para>If the ISP has provided an address that does not change,
<filename>/etc/ppp/ppp.conf</filename> as described edit <filename>/etc/ppp/ppp.conf</filename> as described in
in the example below.</para> the example below.</para>
<note> <note>
<para>Lines that end in a <literal>:</literal> start in the <para>Lines that end in a <literal>:</literal> start in the
@ -346,10 +349,10 @@
<listitem> <listitem>
<para>Identifies an entry for a provider called <para>Identifies an entry for a provider called
<quote>provider</quote>. This could be changed <quote>provider</quote>. This could be changed
to the name of the <acronym>ISP</acronym> so to the name of the <acronym>ISP</acronym> so that
that <option>load <option>load
<replaceable>ISP</replaceable></option> can be used to start <replaceable>ISP</replaceable></option> can be
the connection.</para> used to start the connection.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -393,11 +396,10 @@
<term>Line 15:</term> <term>Line 15:</term>
<listitem> <listitem>
<para>If <para>If <acronym>PAP</acronym> or
<acronym>PAP</acronym> or <acronym>CHAP</acronym> are used, there will be no
<acronym>CHAP</acronym> are used, login at this point, and this line should be
there will be no login at this point, and this line commented out or removed. See <xref
should be commented out or removed. See <xref
linkend="userppp-PAPnCHAP"/> for further linkend="userppp-PAPnCHAP"/> for further
details.</para> details.</para>
@ -438,21 +440,18 @@ protocol: ppp</screen>
<listitem> <listitem>
<para>Sets the interface addresses. The string <para>Sets the interface addresses. The string
<replaceable>x.x.x.x</replaceable> should be <replaceable>x.x.x.x</replaceable> should be
replaced by the <acronym>IP</acronym> address that the replaced by the <acronym>IP</acronym> address that
<acronym>ISP</acronym> the <acronym>ISP</acronym> has allocated. The
has allocated. The string string <replaceable>y.y.y.y</replaceable> should be
<replaceable>y.y.y.y</replaceable> should be
replaced by the <acronym>IP</acronym> address of the replaced by the <acronym>IP</acronym> address of the
gateway. If the <acronym>ISP</acronym> has not provided a gateway gateway. If the <acronym>ISP</acronym> has not
address, use <hostid provided a gateway address, use <hostid
role="netmask">10.0.0.2/0</hostid>. When role="netmask">10.0.0.2/0</hostid>. When using a
using a <quote>guessed</quote> address, <quote>guessed</quote> address, create an entry in
create an entry in
<filename>/etc/ppp/ppp.linkup</filename> as per the <filename>/etc/ppp/ppp.linkup</filename> as per the
instructions in <xref instructions in <xref linkend="userppp-dynamicIP"/>.
linkend="userppp-dynamicIP"/>. If this line is If this line is omitted, <command>ppp</command>
omitted, <command>ppp</command> cannot run in cannot run in <option>-auto</option> mode.</para>
<option>-auto</option> mode.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -467,20 +466,20 @@ protocol: ppp</screen>
otherwise <literal>HISADDR</literal> will not yet otherwise <literal>HISADDR</literal> will not yet
be initialized.</para> be initialized.</para>
<para>When <para>When <option>-auto</option> is not used, this
<option>-auto</option> is not used, this line should be moved line should be moved to the
to the <filename>ppp.linkup</filename> file.</para> <filename>ppp.linkup</filename> file.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
<para>It is not necessary to add an entry to <para>It is not necessary to add an entry to
<filename>ppp.linkup</filename> when using a static <filename>ppp.linkup</filename> when using a static
<acronym>IP</acronym> address and when running ppp in <option>-auto</option> <acronym>IP</acronym> address and when running ppp in
mode as the routing table entries are already correct. <option>-auto</option> mode as the routing table entries
However, an are already correct. However, an entry can be created to
entry can be created to invoke programs after connection. This is invoke programs after connection. This is explained later
explained later with the sendmail example.</para> with the sendmail example.</para>
<para>Example configuration files can be found in the <para>Example configuration files can be found in the
<filename <filename
@ -489,28 +488,29 @@ protocol: ppp</screen>
</sect2> </sect2>
<sect2 id="userppp-dynamicIP"> <sect2 id="userppp-dynamicIP">
<title><acronym>PPP</acronym> With Dynamic <acronym>IP</acronym> <title><acronym>PPP</acronym> With Dynamic
Addresses</title> <acronym>IP</acronym> Addresses</title>
<indexterm> <indexterm>
<primary><acronym>PPP</acronym></primary> <primary><acronym>PPP</acronym></primary>
<secondary>with dynamic <acronym>IP</acronym> addresses</secondary> <secondary>with dynamic <acronym>IP</acronym>
addresses</secondary>
</indexterm> </indexterm>
<indexterm> <indexterm>
<primary>IPCP</primary> <primary>IPCP</primary>
</indexterm> </indexterm>
<para>If the <acronym>IP</acronym> <para>If the <acronym>IP</acronym> address changes whenever
address changes whenever a connection is made, configure <command>ppp</command> to a connection is made, configure <command>ppp</command> to
negotiate the local and remote addresses. This is done by negotiate the local and remote addresses. This is done by
<quote>guessing</quote> an <acronym>IP</acronym> address and allowing <quote>guessing</quote> an <acronym>IP</acronym> address
<command>ppp</command> to set it up correctly using the <acronym>IP</acronym> and allowing <command>ppp</command> to set it up correctly
Configuration Protocol (IPCP) after connecting. The using the <acronym>IP</acronym> Configuration Protocol
(IPCP) after connecting. The
<filename>ppp.conf</filename> configuration is the same as <filename>ppp.conf</filename> configuration is the same as
that described in <xref that described in <xref linkend="userppp-staticIP"/>, with
linkend="userppp-staticIP"/>, with the following the following change:</para>
change:</para>
<programlisting>17 set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.255 0.0.0.0</programlisting> <programlisting>17 set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.255 0.0.0.0</programlisting>
@ -525,16 +525,16 @@ protocol: ppp</screen>
<listitem> <listitem>
<para>The number after the <literal>/</literal> <para>The number after the <literal>/</literal>
character is the number of bits of the address that character is the number of bits of the address that
ppp will insist on. Other <acronym>IP</acronym> addresses ppp will insist on. Other <acronym>IP</acronym>
can be used, but the addresses can be used, but the above example will
above example will always work.</para> always work.</para>
<para>The last argument (<literal>0.0.0.0</literal>) <para>The last argument (<literal>0.0.0.0</literal>)
tells PPP to start negotiations using address tells PPP to start negotiations using address
<hostid role="ipaddr">0.0.0.0</hostid> rather than <hostid role="ipaddr">0.0.0.0</hostid> rather than
<hostid role="ipaddr">10.0.0.1</hostid> and is <hostid role="ipaddr">10.0.0.1</hostid> and is
necessary for some <acronym>ISP</acronym>s. Do not use necessary for some <acronym>ISP</acronym>s. Do not
<literal>0.0.0.0</literal> as the first argument use <literal>0.0.0.0</literal> as the first argument
to <command>set ifaddr</command> as it prevents to <command>set ifaddr</command> as it prevents
PPP from setting up an initial route in PPP from setting up an initial route in
<option>-auto</option> mode.</para> <option>-auto</option> mode.</para>
@ -544,12 +544,11 @@ protocol: ppp</screen>
<para>When not running in <option>-auto</option> mode, <para>When not running in <option>-auto</option> mode,
create an entry in create an entry in
<filename>/etc/ppp/ppp.linkup</filename> as this file <filename>/etc/ppp/ppp.linkup</filename> as this file is
is used after a connection used after a connection has been established. At this
has been established. At this point, point, <command>ppp</command> will have assigned the
<command>ppp</command> will have assigned the interface interface addresses and it will now be possible to add the
addresses and it will now be possible to add the routing routing table entries:</para>
table entries:</para>
<programlisting>1 provider: <programlisting>1 provider:
2 add default HISADDR</programlisting> 2 add default HISADDR</programlisting>
@ -564,8 +563,9 @@ protocol: ppp</screen>
<filename>ppp.linkup</filename> according to the <filename>ppp.linkup</filename> according to the
following rules: First, try to match the same label following rules: First, try to match the same label
as we used in <filename>ppp.conf</filename>. If as we used in <filename>ppp.conf</filename>. If
that fails, look for an entry for the <acronym>IP</acronym> address of that fails, look for an entry for the
our gateway. This entry is a four-octet <acronym>IP</acronym> style <acronym>IP</acronym> address of our gateway. This
entry is a four-octet <acronym>IP</acronym> style
label. If we still have not found an entry, look label. If we still have not found an entry, look
for the <literal>MYADDR</literal> entry.</para> for the <literal>MYADDR</literal> entry.</para>
</listitem> </listitem>
@ -579,8 +579,8 @@ protocol: ppp</screen>
default route that points to default route that points to
<literal>HISADDR</literal>. <literal>HISADDR</literal>.
<literal>HISADDR</literal> will be replaced with the <literal>HISADDR</literal> will be replaced with the
<acronym>IP</acronym> number of the gateway as negotiated by the <acronym>IP</acronym> number of the gateway as
IPCP.</para> negotiated by the IPCP.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
@ -602,8 +602,8 @@ protocol: ppp</screen>
<para>When configuring <application>ppp</application> to <para>When configuring <application>ppp</application> to
receive incoming calls on a machine connected to a LAN, receive incoming calls on a machine connected to a LAN,
decide if packets should be forwarded to the LAN. decide if packets should be forwarded to the LAN. If so,
If so, allocate the peer an <acronym>IP</acronym> address from allocate the peer an <acronym>IP</acronym> address from
the LAN's subnet, and use <command>enable the LAN's subnet, and use <command>enable
proxy</command> in the proxy</command> in the
<filename>/etc/ppp/ppp.conf</filename>. <filename>/etc/ppp/ppp.conf</filename>.
@ -616,8 +616,7 @@ protocol: ppp</screen>
<sect2> <sect2>
<title>Which getty?</title> <title>Which getty?</title>
<para><xref linkend="dialup"/> <para><xref linkend="dialup"/> provides a good description
provides a good description
on enabling dial-up services using &man.getty.8;.</para> on enabling dial-up services using &man.getty.8;.</para>
<para>An alternative to <command>getty</command> is <ulink <para>An alternative to <command>getty</command> is <ulink
@ -645,15 +644,15 @@ protocol: ppp</screen>
<title><application>PPP</application> Permissions</title> <title><application>PPP</application> Permissions</title>
<para>The <command>ppp</command> command must normally be <para>The <command>ppp</command> command must normally be
run as the <username>root</username> user. run as the <username>root</username> user. To instead
To instead allow <command>ppp</command> to run in allow <command>ppp</command> to run in server mode as a
server mode as a normal user, that user normal user, that user must be given permission to run
must be given permission to run <command>ppp</command> <command>ppp</command> by adding them to the
by adding them to the <groupname>network</groupname> <groupname>network</groupname> group in
group in <filename>/etc/group</filename>.</para> <filename>/etc/group</filename>.</para>
<para>The user also needs access to one or more <para>The user also needs access to one or more sections of
sections of the configuration file using the the configuration file using the
<command>allow</command> command:</para> <command>allow</command> command:</para>
<programlisting>allow users fred mary</programlisting> <programlisting>allow users fred mary</programlisting>
@ -664,8 +663,8 @@ protocol: ppp</screen>
</sect2> </sect2>
<sect2> <sect2>
<title><acronym>PPP</acronym> Shells for Dynamic <acronym>IP</acronym> <title><acronym>PPP</acronym> Shells for Dynamic
Users</title> <acronym>IP</acronym> Users</title>
<indexterm> <indexterm>
<primary><acronym>PPP</acronym> shells</primary> <primary><acronym>PPP</acronym> shells</primary>
@ -696,9 +695,9 @@ exec /usr/sbin/ppp -direct $IDENT</programlisting>
<screen>&prompt.root; <userinput>ln -s ppp-shell /etc/ppp/ppp-dialup</userinput></screen> <screen>&prompt.root; <userinput>ln -s ppp-shell /etc/ppp/ppp-dialup</userinput></screen>
<para>Use this script as the <para>Use this script as the
<emphasis>shell</emphasis> for all of dial-up users. <emphasis>shell</emphasis> for all of dial-up users. This
This is an example from <filename>/etc/passwd</filename> is an example from <filename>/etc/passwd</filename> for a
for a dial-up <acronym>PPP</acronym>:</para> dial-up <acronym>PPP</acronym>:</para>
<programlisting>pchilds:*:1011:300:Peter Childs PPP:/home/ppp:/etc/ppp/ppp-dialup</programlisting> <programlisting>pchilds:*:1011:300:Peter Childs PPP:/home/ppp:/etc/ppp/ppp-dialup</programlisting>
@ -715,8 +714,8 @@ exec /usr/sbin/ppp -direct $IDENT</programlisting>
</sect2> </sect2>
<sect2> <sect2>
<title><acronym>PPP</acronym> Shells for Static <acronym>IP</acronym> <title><acronym>PPP</acronym> Shells for Static
Users</title> <acronym>IP</acronym> Users</title>
<indexterm> <indexterm>
<primary><acronym>PPP</acronym> shells</primary> <primary><acronym>PPP</acronym> shells</primary>
@ -727,10 +726,10 @@ exec /usr/sbin/ppp -direct $IDENT</programlisting>
<acronym>IP</acronym>s create a symbolic link to <acronym>IP</acronym>s create a symbolic link to
<filename>ppp-shell</filename>.</para> <filename>ppp-shell</filename>.</para>
<para>For example, to route /24 CIDR <para>For example, to route /24 CIDR networks for the
networks for the dial-up customers dial-up customers <username>fred</username>,
<username>fred</username>, <username>sam</username>, <username>sam</username>, and
and <username>mary</username>, type:</para> <username>mary</username>, type:</para>
<screen>&prompt.root; <userinput>ln -s /etc/ppp/ppp-shell /etc/ppp/ppp-fred</userinput> <screen>&prompt.root; <userinput>ln -s /etc/ppp/ppp-shell /etc/ppp/ppp-fred</userinput>
&prompt.root; <userinput>ln -s /etc/ppp/ppp-shell /etc/ppp/ppp-sam</userinput> &prompt.root; <userinput>ln -s /etc/ppp/ppp-shell /etc/ppp/ppp-sam</userinput>
@ -769,8 +768,9 @@ ttyu1:
for each session. For each dial-up line enabled in for each session. For each dial-up line enabled in
<filename>/etc/ttys</filename> create an entry similar <filename>/etc/ttys</filename> create an entry similar
to the one for <literal>ttyu0:</literal> above. Each to the one for <literal>ttyu0:</literal> above. Each
line should get a unique <acronym>IP</acronym> address from the pool of line should get a unique <acronym>IP</acronym> address
<acronym>IP</acronym> addresses for dynamic users.</para> from the pool of <acronym>IP</acronym> addresses for
dynamic users.</para>
</sect2> </sect2>
<sect2> <sect2>
@ -779,8 +779,8 @@ ttyu1:
<para>Along with the contents of the sample <para>Along with the contents of the sample
<filename>/usr/share/examples/ppp/ppp.conf</filename> <filename>/usr/share/examples/ppp/ppp.conf</filename>
above, add a section for each of the above, add a section for each of the statically assigned
statically assigned dial-up users:.</para> dial-up users:.</para>
<programlisting>fred: <programlisting>fred:
set ifaddr 203.14.100.1 203.14.101.1 255.255.255.255 set ifaddr 203.14.100.1 203.14.101.1 255.255.255.255
@ -793,9 +793,10 @@ mary:
<para>The file <filename>/etc/ppp/ppp.linkup</filename> <para>The file <filename>/etc/ppp/ppp.linkup</filename>
should also contain routing information for each static should also contain routing information for each static
<acronym>IP</acronym> user if required. The line below would add a route <acronym>IP</acronym> user if required. The line below
for the <hostid role="ipaddr">203.14.101.0/24</hostid> would add a route for the <hostid
network via the client's ppp link.</para> role="ipaddr">203.14.101.0/24</hostid> network via the
client's ppp link.</para>
<programlisting>fred: <programlisting>fred:
add 203.14.101.0 netmask 255.255.255.0 HISADDR add 203.14.101.0 netmask 255.255.255.0 HISADDR
@ -874,8 +875,8 @@ exec /usr/sbin/ppp -direct pap$IDENT</programlisting>
<programlisting>enable passwdauth</programlisting> <programlisting>enable passwdauth</programlisting>
<para>To assign some users a static <acronym>IP</acronym> number, <para>To assign some users a static <acronym>IP</acronym>
specify the number as the third argument in number, specify the number as the third argument in
<filename>/etc/ppp/ppp.secret</filename>. See <filename>/etc/ppp/ppp.secret</filename>. See
<filename>/usr/share/examples/ppp/ppp.secret.sample</filename> <filename>/usr/share/examples/ppp/ppp.secret.sample</filename>
for examples.</para> for examples.</para>
@ -920,8 +921,8 @@ set nbns 203.14.100.5</programlisting>
name server addresses, and a NetBIOS nameserver name server addresses, and a NetBIOS nameserver
host.</para> host.</para>
<para>In version 2 and above, if the <para>In version 2 and above, if the <literal>set
<literal>set dns</literal> line is omitted, dns</literal> line is omitted,
<acronym>PPP</acronym> will use the values found in <acronym>PPP</acronym> will use the values found in
<filename>/etc/resolv.conf</filename>.</para> <filename>/etc/resolv.conf</filename>.</para>
</sect2> </sect2>
@ -931,12 +932,13 @@ set nbns 203.14.100.5</programlisting>
<indexterm><primary>PAP</primary></indexterm> <indexterm><primary>PAP</primary></indexterm>
<indexterm><primary>CHAP</primary></indexterm> <indexterm><primary>CHAP</primary></indexterm>
<para>Some <acronym>ISP</acronym>s set their system up so that the <para>Some <acronym>ISP</acronym>s set their system up so
authentication part of the connection is done using that the authentication part of the connection is done
either of the PAP or CHAP authentication mechanisms. If using either of the PAP or CHAP authentication mechanisms.
this is the case, the <acronym>ISP</acronym> will not give a If this is the case, the <acronym>ISP</acronym> will not
<prompt>login:</prompt> prompt at connection, but will give a <prompt>login:</prompt> prompt at connection, but
start talking <acronym>PPP</acronym> immediately.</para> will start talking <acronym>PPP</acronym>
immediately.</para>
<para>PAP is less secure than CHAP, but security is not <para>PAP is less secure than CHAP, but security is not
normally an issue here as passwords, although being sent normally an issue here as passwords, although being sent
@ -944,12 +946,9 @@ set nbns 203.14.100.5</programlisting>
serial line only. There is not much room for crackers serial line only. There is not much room for crackers
to <quote>eavesdrop</quote>.</para> to <quote>eavesdrop</quote>.</para>
<para>Referring back to <xref <para>Referring back to <xref linkend="userppp-staticIP"/>
linkend="userppp-staticIP"/> or <xref linkend="userppp-dynamicIP"/>, the following
or <xref alterations must be made:</para>
linkend="userppp-dynamicIP"/>,
the following alterations must
be made:</para>
<programlisting>13 set authname <replaceable>MyUserName</replaceable> <programlisting>13 set authname <replaceable>MyUserName</replaceable>
14 set authkey <replaceable>MyPassword</replaceable> 14 set authkey <replaceable>MyPassword</replaceable>
@ -991,10 +990,10 @@ set nbns 203.14.100.5</programlisting>
<term>Line 15:</term> <term>Line 15:</term>
<listitem> <listitem>
<para>The <acronym>ISP</acronym> will not normally require a login <para>The <acronym>ISP</acronym> will not normally
to the server when using PAP or CHAP. require a login to the server when using PAP or
Therefore, disable the <quote>set login</quote> CHAP. Therefore, disable the <quote>set
string.</para> login</quote> string.</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
</variablelist> </variablelist>
@ -1011,17 +1010,17 @@ set nbns 203.14.100.5</programlisting>
<programlisting>set server /var/run/ppp-tun<replaceable>%d</replaceable> DiagnosticPassword 0177</programlisting> <programlisting>set server /var/run/ppp-tun<replaceable>%d</replaceable> DiagnosticPassword 0177</programlisting>
<para>This will tell PPP to listen to the specified <para>This will tell PPP to listen to the specified
&unix; domain socket, asking clients for the specified &unix; domain socket, asking clients for the specified
password before allowing access. The password before allowing access. The
<literal>%d</literal> in the name is replaced with the <literal>%d</literal> in the name is replaced with the
<devicename>tun</devicename> device number that is in <devicename>tun</devicename> device number that is in
use.</para> use.</para>
<para>Once a socket has been set up, the &man.pppctl.8; <para>Once a socket has been set up, the &man.pppctl.8;
program may be used in scripts that wish to manipulate program may be used in scripts that wish to manipulate
the running program.</para> the running program.</para>
</sect2> </sect2>
<sect2 id="userppp-nat"> <sect2 id="userppp-nat">
<title>Using <acronym>PPP</acronym> Network Address <title>Using <acronym>PPP</acronym> Network Address
@ -1072,14 +1071,15 @@ nat port tcp 10.0.0.2:http http</programlisting>
<programlisting>hostname="foo.example.com"</programlisting> <programlisting>hostname="foo.example.com"</programlisting>
<para>If the <acronym>ISP</acronym> has supplied a static <acronym>IP</acronym> address <para>If the <acronym>ISP</acronym> has supplied a static
and name, use this name as the <acronym>IP</acronym> address and name, use this name as the
host name.</para> host name.</para>
<para>Look for the <literal>network_interfaces</literal> <para>Look for the <literal>network_interfaces</literal>
variable. To configure the system to dial the variable. To configure the system to dial the
<acronym>ISP</acronym> on demand, make sure the <devicename>tun0</devicename> <acronym>ISP</acronym> on demand, make sure the
device is added to the list, otherwise remove it.</para> <devicename>tun0</devicename> device is added to the list,
otherwise remove it.</para>
<programlisting>network_interfaces="lo0 tun0" <programlisting>network_interfaces="lo0 tun0"
ifconfig_tun0=</programlisting> ifconfig_tun0=</programlisting>
@ -1093,10 +1093,10 @@ ifconfig_tun0=</programlisting>
<programlisting>ppp -auto mysystem</programlisting> <programlisting>ppp -auto mysystem</programlisting>
<para>This script is executed at network configuration time, <para>This script is executed at network configuration time,
starting the ppp daemon in automatic mode. If starting the ppp daemon in automatic mode. If this
this machine acts as a gateway, consider including machine acts as a gateway, consider including
<option>-alias</option>. Refer <option>-alias</option>. Refer to the manual page for
to the manual page for further details.</para> further details.</para>
</note> </note>
<para>Make sure that the router program is set to <para>Make sure that the router program is set to
@ -1126,10 +1126,10 @@ ifconfig_tun0=</programlisting>
<indexterm> <indexterm>
<primary><application>sendmail</application></primary> <primary><application>sendmail</application></primary>
</indexterm> </indexterm>
<para>The downside is that <para>The downside is that <command>sendmail</command> is
<command>sendmail</command> is forced to re-examine the mail queue forced to re-examine the mail queue whenever the ppp link.
whenever the ppp link. To automate this, include <command>!bg</command> To automate this, include <command>!bg</command> in
in <filename>ppp.linkup</filename>:</para> <filename>ppp.linkup</filename>:</para>
<programlisting>1 provider: <programlisting>1 provider:
2 delete ALL 2 delete ALL
@ -1153,7 +1153,8 @@ ifconfig_tun0=</programlisting>
<acronym>PPP</acronym> session, or, to configure <acronym>PPP</acronym> session, or, to configure
<command>ppp</command> to establish sessions automatically <command>ppp</command> to establish sessions automatically
when there is outbound traffic and when there is outbound traffic and
<filename>start_if.tun0</filename> does not exist, type:</para> <filename>start_if.tun0</filename> does not exist,
type:</para>
<screen>&prompt.root; <userinput>ppp -auto provider</userinput></screen> <screen>&prompt.root; <userinput>ppp -auto provider</userinput></screen>
</sect2> </sect2>
@ -1187,7 +1188,8 @@ ifconfig_tun0=</programlisting>
</step> </step>
<step> <step>
<para>When using a dynamic <acronym>IP</acronym> address, create an entry in <para>When using a dynamic <acronym>IP</acronym> address,
create an entry in
<filename>/etc/ppp/ppp.linkup</filename>.</para> <filename>/etc/ppp/ppp.linkup</filename>.</para>
</step> </step>
@ -1295,14 +1297,12 @@ ifconfig_tun0=</programlisting>
<para>This should display some pertinent output about the <para>This should display some pertinent output about the
<devicename>uart</devicename> devices. These are the COM <devicename>uart</devicename> devices. These are the COM
ports we need. If the modem acts like a standard serial ports we need. If the modem acts like a standard serial port,
port, it should be listed on it should be listed on <devicename>uart1</devicename>, or
<devicename>uart1</devicename>, or <devicename>COM2</devicename>. If so, a kernel rebuild is not
<devicename>COM2</devicename>. If so, required. When matching up, if the modem is on
a kernel rebuild is not required. When matching up, if the modem is on <devicename>uart1</devicename>, the modem device would be
<devicename>uart1</devicename>, the <filename class="devicefile">/dev/cuau1</filename>.</para>
modem device would be <filename
class="devicefile">/dev/cuau1</filename>.</para>
</sect2> </sect2>
<sect2> <sect2>
@ -1350,8 +1350,8 @@ type '~h' for help</programlisting>
OK OK
<userinput>atdt<replaceable>123456789</replaceable></userinput></screen> <userinput>atdt<replaceable>123456789</replaceable></userinput></screen>
<para>Use <command>at</command> to initialize the modem, <para>Use <command>at</command> to initialize the modem, then
then use <command>atdt</command> and the number for the use <command>atdt</command> and the number for the
<acronym>ISP</acronym> to begin the dial in process.</para> <acronym>ISP</acronym> to begin the dial in process.</para>
<screen>CONNECT</screen> <screen>CONNECT</screen>
@ -1362,25 +1362,23 @@ OK
<screen>ISP Login:<userinput>myusername</userinput></screen> <screen>ISP Login:<userinput>myusername</userinput></screen>
<para>At this prompt, return the <para>At this prompt, return the prompt with the username that
prompt with the username that was provided by the was provided by the <acronym>ISP</acronym>.</para>
<acronym>ISP</acronym>.</para>
<screen>ISP Pass:<userinput>mypassword</userinput></screen> <screen>ISP Pass:<userinput>mypassword</userinput></screen>
<para>At this prompt, <para>At this prompt, reply with the password that was provided
reply with the password that was provided by the by the <acronym>ISP</acronym>. Just like logging into &os;,
<acronym>ISP</acronym>. Just like logging into the password will not echo.</para>
&os;, the password will not echo.</para>
<screen>Shell or PPP:<userinput>ppp</userinput></screen> <screen>Shell or PPP:<userinput>ppp</userinput></screen>
<para>Depending on the <acronym>ISP</acronym>, this prompt <para>Depending on the <acronym>ISP</acronym>, this prompt
might not appear. If it does, it is asking whether to might not appear. If it does, it is asking whether to use a
use a shell on the provider or to start shell on the provider or to start
<command>ppp</command>. In this example, <command>ppp</command>. In this example,
<command>ppp</command> was selected in order to establish an Internet <command>ppp</command> was selected in order to establish an
connection.</para> Internet connection.</para>
<screen>Ppp ON example&gt;</screen> <screen>Ppp ON example&gt;</screen>
@ -1391,8 +1389,8 @@ OK
<screen>PPp ON example&gt;</screen> <screen>PPp ON example&gt;</screen>
<para>We have successfully authenticated with our <para>We have successfully authenticated with our
<acronym>ISP</acronym> and are waiting for the <acronym>ISP</acronym> and are waiting for the assigned
assigned <acronym>IP</acronym> address.</para> <acronym>IP</acronym> address.</para>
<screen>PPP ON example&gt;</screen> <screen>PPP ON example&gt;</screen>
@ -1425,40 +1423,36 @@ OK
<sect2> <sect2>
<title>Debugging</title> <title>Debugging</title>
<para>If a <para>If a connection cannot be established, turn hardware
connection cannot be established, turn hardware flow flow <acronym>CTS/RTS</acronym> to off using <option>set
<acronym>CTS/RTS</acronym> to off using <option>set ctsrts off</option>. This is mainly the case when
ctsrts off</option>. This is mainly the case when
connected to some <application>PPP</application>-capable connected to some <application>PPP</application>-capable
terminal servers, where <application>PPP</application> hangs terminal servers, where <application>PPP</application> hangs
when it tries to write data to the communication link, and when it tries to write data to the communication link, and
waits for a Clear waits for a Clear To Send (<acronym>CTS</acronym>) signal
To Send (<acronym>CTS</acronym>) signal which may never come. When using this option, which may never come. When using this option, include
include <option>set accmap</option> <option>set accmap</option> as it may be required to defeat
as it may be required to defeat hardware dependent hardware dependent on passing certain characters from end to
on passing certain characters from end to end, most of the end, most of the time XON/XOFF. Refer to &man.ppp.8; for
time XON/XOFF. Refer to &man.ppp.8; for more more information on this option and how it is used.</para>
information on this option and how it is used.</para>
<para>An older modem may need <para>An older modem may need <option>set parity
<option>set parity even</option>. Parity is set at none even</option>. Parity is set at none be default, but is
be default, but is used for error checkingm with a large used for error checkingm with a large increase in traffic,
increase in traffic, on older modems.</para> on older modems.</para>
<para><application>PPP</application> may not return to the <para><application>PPP</application> may not return to the
command mode, which is usually a negotiation error where command mode, which is usually a negotiation error where the
the <acronym>ISP</acronym> is waiting for <acronym>ISP</acronym> is waiting for negotiating to begin.
negotiating to begin. At this point, using <command>~p</command> At this point, using <command>~p</command> will force ppp
will force ppp to start sending the configuration to start sending the configuration information.</para>
information.</para>
<para>If a login prompt never appears, <para>If a login prompt never appears, <acronym>PAP</acronym>
<acronym>PAP</acronym> or or <acronym>CHAP</acronym> authentication is most likely
<acronym>CHAP</acronym> authentication is most likely required. required. To use <acronym>PAP</acronym> or
To use <acronym>CHAP</acronym>, add the following options to
<acronym>PAP</acronym> or <acronym>CHAP</acronym>, add <application>PPP</application> before going into terminal
the following options to <application>PPP</application> mode:</para>
before going into terminal mode:</para>
<screen>ppp ON example&gt; <userinput>set authname <replaceable>myusername</replaceable></userinput></screen> <screen>ppp ON example&gt; <userinput>set authname <replaceable>myusername</replaceable></userinput></screen>
@ -1472,16 +1466,15 @@ OK
replaced with the password that was assigned by the replaced with the password that was assigned by the
<acronym>ISP</acronym>.</para> <acronym>ISP</acronym>.</para>
<para>If a connection is established, but cannot seem to find any domain <para>If a connection is established, but cannot seem to find
name, try to &man.ping.8; an <acronym>IP</acronym> any domain name, try to &man.ping.8; an
address. If <acronym>IP</acronym> address. If there is 100 percent
there is 100 percent (100%) packet loss, it is (100%) packet loss, it is likely that a default route was
likely that a default route was not assigned. not assigned. Double check that <option>add default
Double check that <option>add default
HISADDR</option> was set during the connection. If a HISADDR</option> was set during the connection. If a
connection can be made to a remote <acronym>IP</acronym> address, connection can be made to a remote <acronym>IP</acronym>
it is possible that a resolver address has not been added address, it is possible that a resolver address has not been
to <filename>/etc/resolv.conf</filename>. This file added to <filename>/etc/resolv.conf</filename>. This file
should look like:</para> should look like:</para>
<programlisting>domain <replaceable>example.com</replaceable> <programlisting>domain <replaceable>example.com</replaceable>
@ -1493,9 +1486,9 @@ nameserver <replaceable>y.y.y.y</replaceable></programlisting>
the <acronym>IP</acronym> address of the the <acronym>IP</acronym> address of the
<acronym>ISP</acronym>'s DNS servers.</para> <acronym>ISP</acronym>'s DNS servers.</para>
<para>To configure &man.syslog.3; to provide logging <para>To configure &man.syslog.3; to provide logging for the
for the <application>PPP</application> connection, make sure <application>PPP</application> connection, make sure this
this line exists in <filename>/etc/syslog.conf</filename>:</para> line exists in <filename>/etc/syslog.conf</filename>:</para>
<programlisting>!ppp <programlisting>!ppp
*.* /var/log/ppp.log</programlisting> *.* /var/log/ppp.log</programlisting>
@ -1524,14 +1517,13 @@ nameserver <replaceable>y.y.y.y</replaceable></programlisting>
<secondary>over Ethernet</secondary> <secondary>over Ethernet</secondary>
</indexterm> </indexterm>
<para>This section describes how to set up <para>This section describes how to set up <acronym>PPP</acronym>
<acronym>PPP</acronym> over Ethernet over Ethernet (<acronym>PPPoE</acronym>).</para>
(<acronym>PPPoE</acronym>).</para>
<para>Here is an example of a working <para>Here is an example of a working
<filename>ppp.conf</filename>:</para> <filename>ppp.conf</filename>:</para>
<programlisting>default: <programlisting>default:
set log Phase tun command # you can add more detailed logging if you wish set log Phase tun command # you can add more detailed logging if you wish
set ifaddr 10.0.0.1/0 10.0.0.2/0 set ifaddr 10.0.0.1/0 10.0.0.2/0
@ -1565,17 +1557,17 @@ ppp_profile="name_of_service_provider"</programlisting>
distinguish between different PPPoE servers attached to a distinguish between different PPPoE servers attached to a
given network.</para> given network.</para>
<para>Any required service tag <para>Any required service tag information should be in the
information should be in the documentation provided by the <acronym>ISP</acronym>.</para> documentation provided by the <acronym>ISP</acronym>.</para>
<para>As a last resort, one could try installing the <filename <para>As a last resort, one could try installing the <filename
role="package">net/rr-pppoe</filename> package or port. role="package">net/rr-pppoe</filename> package or port.
Bear in mind however, this may de-program your modem and Bear in mind however, this may de-program your modem and
render it useless, so think twice before doing it. Simply render it useless, so think twice before doing it. Simply
install the program shipped with the modem. install the program shipped with the modem. Then, access the
Then, access the <guimenu>System</guimenu> menu from the <guimenu>System</guimenu> menu from the program. The name of
program. The name of the profile should be listed there. It the profile should be listed there. It is usually
is usually <emphasis>ISP</emphasis>.</para> <emphasis>ISP</emphasis>.</para>
<para>The profile name (service tag) will be used in the PPPoE <para>The profile name (service tag) will be used in the PPPoE
configuration entry in <filename>ppp.conf</filename> as the configuration entry in <filename>ppp.conf</filename> as the
@ -1585,11 +1577,11 @@ ppp_profile="name_of_service_provider"</programlisting>
<programlisting>set device PPPoE:<replaceable>xl1</replaceable>:<replaceable>ISP</replaceable></programlisting> <programlisting>set device PPPoE:<replaceable>xl1</replaceable>:<replaceable>ISP</replaceable></programlisting>
<para>Do not forget to change <replaceable>xl1</replaceable> <para>Do not forget to change <replaceable>xl1</replaceable> to
to the proper device for the Ethernet card.</para> the proper device for the Ethernet card.</para>
<para>Do not forget to change <replaceable>ISP</replaceable> <para>Do not forget to change <replaceable>ISP</replaceable> to
to the profile.</para> the profile.</para>
<para>For additional information, refer to <ulink <para>For additional information, refer to <ulink
url="http://renaud.waldura.com/doc/freebsd/pppoe/">Cheaper url="http://renaud.waldura.com/doc/freebsd/pppoe/">Cheaper
@ -1603,12 +1595,14 @@ ppp_profile="name_of_service_provider"</programlisting>
<trademark class="registered">HomeConnect</trademark> ADSL <trademark class="registered">HomeConnect</trademark> ADSL
Modem Dual Link</title> Modem Dual Link</title>
<para>This modem does not follow the PPPoE specification defined in <ulink <para>This modem does not follow the PPPoE specification defined
url="http://www.faqs.org/rfcs/rfc2516.html">RFC 2516</ulink>.</para> in <ulink
url="http://www.faqs.org/rfcs/rfc2516.html">RFC
2516</ulink>.</para>
<para>In order to make &os; capable of communicating with <para>In order to make &os; capable of communicating with this
this device, a sysctl must be set. This can be done device, a sysctl must be set. This can be done automatically
automatically at boot time by updating at boot time by updating
<filename>/etc/sysctl.conf</filename>:</para> <filename>/etc/sysctl.conf</filename>:</para>
<programlisting>net.graph.nonstandard_pppoe=1</programlisting> <programlisting>net.graph.nonstandard_pppoe=1</programlisting>
@ -1617,8 +1611,8 @@ ppp_profile="name_of_service_provider"</programlisting>
<screen>&prompt.root; <userinput>sysctl net.graph.nonstandard_pppoe=1</userinput></screen> <screen>&prompt.root; <userinput>sysctl net.graph.nonstandard_pppoe=1</userinput></screen>
<para>Unfortunately, because this is a system-wide setting, <para>Unfortunately, because this is a system-wide setting, it
it is not possible to talk to a normal PPPoE client or server is not possible to talk to a normal PPPoE client or server
and a &tm.3com; <trademark and a &tm.3com; <trademark
class="registered">HomeConnect</trademark> ADSL Modem at class="registered">HomeConnect</trademark> ADSL Modem at
the same time.</para> the same time.</para>
@ -1696,20 +1690,18 @@ ppp_profile="adsl"</programlisting>
<sect2> <sect2>
<title>Using mpd</title> <title>Using mpd</title>
<para>The <application>mpd</application> application can be used to connect to a <para>The <application>mpd</application> application can be used
variety of services, in particular PPTP services. It can be installed using the to connect to a variety of services, in particular PPTP
<filename role="package">net/mpd5</filename> package or port. Many ADSL services. It can be installed using the <filename
modems require that a PPTP tunnel is created between the modem role="package">net/mpd5</filename> package or port. Many
and computer.</para> ADSL modems require that a PPTP tunnel is created between the
modem and computer.</para>
<para>Once installed, <para>Once installed, configure <application>mpd</application>
configure <application>mpd</application> to suit the to suit the provider's settings. The port places a set of
provider's settings. The port places a set sample configuration files which are well documented in
of sample configuration files which are well documented in <filename class="directory">/usr/local/etc/mpd/</filename>.
<filename A complete guide to configure <application>mpd</application>
class="directory">/usr/local/etc/mpd/</filename>.
A
complete guide to configure <application>mpd</application>
is available in HTML format in <filename is available in HTML format in <filename
class="directory">/usr/ports/share/doc/mpd/</filename>. class="directory">/usr/ports/share/doc/mpd/</filename>.
Here is a sample configuration for connecting to an ADSL Here is a sample configuration for connecting to an ADSL
@ -1750,10 +1742,12 @@ adsl:
<calloutlist> <calloutlist>
<callout arearefs="co-mpd-ex-user"> <callout arearefs="co-mpd-ex-user">
<para>The username used to authenticate with your <acronym>ISP</acronym>.</para> <para>The username used to authenticate with your
<acronym>ISP</acronym>.</para>
</callout> </callout>
<callout arearefs="co-mpd-ex-pass"> <callout arearefs="co-mpd-ex-pass">
<para>The password used to authenticate with your <acronym>ISP</acronym>.</para> <para>The password used to authenticate with your
<acronym>ISP</acronym>.</para>
</callout> </callout>
</calloutlist> </calloutlist>
@ -1773,12 +1767,12 @@ adsl:
<calloutlist> <calloutlist>
<callout arearefs="co-mpd-ex-self"> <callout arearefs="co-mpd-ex-self">
<para>The <acronym>IP</acronym> address of &os; computer running <para>The <acronym>IP</acronym> address of &os; computer
<application>mpd</application>.</para> running <application>mpd</application>.</para>
</callout> </callout>
<callout arearefs="co-mpd-ex-peer"> <callout arearefs="co-mpd-ex-peer">
<para>The <acronym>IP</acronym> address of the ADSL modem. The Alcatel <para>The <acronym>IP</acronym> address of the ADSL modem.
&speedtouch; Home defaults to <hostid The Alcatel &speedtouch; Home defaults to <hostid
role="ipaddr">10.0.0.138</hostid>.</para> role="ipaddr">10.0.0.138</hostid>.</para>
</callout> </callout>
</calloutlist> </calloutlist>
@ -1808,10 +1802,10 @@ ng0: flags=88d1&lt;UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST&gt; mtu 1500
<para>To use <filename role="package">net/pptpclient</filename> <para>To use <filename role="package">net/pptpclient</filename>
to connect to a DSL service, install the port or package, then to connect to a DSL service, install the port or package, then
edit <filename>/etc/ppp/ppp.conf</filename>. edit <filename>/etc/ppp/ppp.conf</filename>. An example section
An example section of <filename>ppp.conf</filename> of <filename>ppp.conf</filename> is given below. For further
is given below. For further information on information on <filename>ppp.conf</filename> options consult
<filename>ppp.conf</filename> options consult &man.ppp.8;.</para> &man.ppp.8;.</para>
<programlisting>adsl: <programlisting>adsl:
set log phase chat lcp ipcp ccp tun command set log phase chat lcp ipcp ccp tun command
@ -1824,8 +1818,7 @@ ng0: flags=88d1&lt;UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST&gt; mtu 1500
<calloutlist> <calloutlist>
<callout arearefs="co-pptp-ex-user"> <callout arearefs="co-pptp-ex-user">
<para>The username for the DSL <para>The username for the DSL provider.</para>
provider.</para>
</callout> </callout>
<callout arearefs="co-pptp-ex-pass"> <callout arearefs="co-pptp-ex-pass">
@ -1835,9 +1828,8 @@ ng0: flags=88d1&lt;UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST&gt; mtu 1500
<warning> <warning>
<para>Since the account's password is added to <para>Since the account's password is added to
<filename>ppp.conf</filename>in plain text form, <filename>ppp.conf</filename>in plain text form, make sure
make sure nobody can read the contents of this nobody can read the contents of this file:</para>
file:</para>
<screen>&prompt.root; <userinput>chown root:wheel /etc/ppp/ppp.conf</userinput> <screen>&prompt.root; <userinput>chown root:wheel /etc/ppp/ppp.conf</userinput>
&prompt.root; <userinput>chmod 600 /etc/ppp/ppp.conf</userinput></screen> &prompt.root; <userinput>chmod 600 /etc/ppp/ppp.conf</userinput></screen>
@ -1846,11 +1838,11 @@ ng0: flags=88d1&lt;UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST&gt; mtu 1500
<para>This will open a tunnel for a <acronym>PPP</acronym> <para>This will open a tunnel for a <acronym>PPP</acronym>
session to the DSL router. Ethernet DSL modems have a session to the DSL router. Ethernet DSL modems have a
preconfigured LAN <acronym>IP</acronym> address to connect to. In the preconfigured LAN <acronym>IP</acronym> address to connect to.
case of the Alcatel &speedtouch; Home, this address is <hostid In the case of the Alcatel &speedtouch; Home, this address is
role="ipaddr">10.0.0.138</hostid>. The router's <hostid role="ipaddr">10.0.0.138</hostid>. The router's
documentation should list the address the device documentation should list the address the device uses. To
uses. To open the tunnel and start a <acronym>PPP</acronym> open the tunnel and start a <acronym>PPP</acronym>
session:</para> session:</para>
<screen>&prompt.root; <userinput>pptp <replaceable>address</replaceable> <replaceable>adsl</replaceable></userinput></screen> <screen>&prompt.root; <userinput>pptp <replaceable>address</replaceable> <replaceable>adsl</replaceable></userinput></screen>
@ -1858,7 +1850,8 @@ ng0: flags=88d1&lt;UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST&gt; mtu 1500
<tip> <tip>
<para>If an ampersand (<quote>&amp;</quote>) is added <para>If an ampersand (<quote>&amp;</quote>) is added
to the end of this command, to the end of this command,
<application>pptp</application> will return the prompt.</para> <application>pptp</application> will return the
prompt.</para>
</tip> </tip>
<para>A <devicename>tun</devicename> virtual tunnel device <para>A <devicename>tun</devicename> virtual tunnel device