1.1. 配置你的新kernel
為ADSL的PPPOE協(xié)議在kernel配置文件中加入以下內(nèi)容:
# ADSL PPPOE Sup
options NETGRAPH
options NETGRAPH_ETHER
options NETGRAPH_SOCKET
options NETGRAPH_PPPOE
1.2. 設(shè)置一個(gè)使用PPPOE的PPP呼出
將/etc/ppp中的ppp.conf進(jìn)行備份,以下是新的ppp.conf中的內(nèi)容:
default:
set log Phase Chat LCP IPCP CCP tun command
nat enable yes
nat same_ports yes
nat use_sockets yes
set redial 15 28800
set reconnect 15 28800
pppoe:
#加入在kernel中配置的會(huì)連接ADSL設(shè)備的網(wǎng)卡的名稱,我的是fxp0
set device PPPoE:fxp0:
set mru 1492
set mtu 1492
set speed sync
enable lqr
set lqrperiod 5
set cd 5
set dial
set login
set timeout 0
set authname Your UserName used to login
set authkey Your Password used to login
set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0
add default HISADDR# Add a (sticky) default route
enable dns
#注意:只有三處需要進(jìn)行更改的地方,它們是PPPoE:fxp0: 以及用戶名和密碼
1.3. 設(shè)置啟動(dòng)時(shí)自動(dòng)進(jìn)行連接
在/etc/rc.conf中加入以下參數(shù)(ppp_mode設(shè)置斷線重?fù)艿墓δ?:
ppp_enable="YES"
ppp_mode="ddial"
ppp_profile="pppoe"
2. 設(shè)置防火墻
2.1. 在kernel中加入防火墻配置
在kernel配置文件中加入以下選項(xiàng)參數(shù):
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
2.2. 設(shè)置系統(tǒng)啟動(dòng)時(shí)參數(shù)
在/etc/rc.conf中加入以下設(shè)置:
ipfirewall_enable="YES"
firewall_type="open"
3. 設(shè)置NAT服務(wù)
3.1. 啟動(dòng)PPP的NAT支持
在/etc/ppp/ppp.conf中加入以下設(shè)置:
nat enable yes
這樣會(huì)打開ppp內(nèi)置的NAT服務(wù)。
3.2. 設(shè)置系統(tǒng)啟動(dòng)參數(shù)
同時(shí)還需要指定本臺(tái)FreeBSD為一個(gè)網(wǎng)關(guān)服務(wù)器。在/etc/rc.conf中設(shè)置gateway選擇以及ppp的撥號(hào)選項(xiàng):
gateway_enable=”YES”
ppp_nat="YES"
natd_enable="YES"
natd_interface="tu0"
gateway_enable="YES"
3.3. 配置文件總結(jié)
3.3.1. /etc/rc.conf
ppp_enable="YES"
ppp_mode="ddial"
ppp_nat="YES"
ppp_profile="cncadsl"
natd_enable="YES"
natd_interface="tu0"
gateway_enable="YES"
firewall_enable="YES"
firewall_type="open"
3.3.2. /etc/ppp/ppp.conf
set log Phase Chat LCP IPCP CCP tun command
nat enable yes
nat same_ports yes
nat use_sockets yes
set redial 15 28800
set reconnect 15 28800
cncadsl:
set device PPPoE:fxp0:
set mru 1492
set mtu 1492
set speed sync
enable lqr
set lqrperiod 5
set cd 5
set dial
set login
set timeout 0
set authname MyUserName
set authkey MyUserPassword
set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0
add default HISADDR# Add a (sticky) default route
enable dns
3.3.3. kernel配置文件
# ADSL PPPOE Sup
options NETGRAPH
options NETGRAPH_ETHER
options NETGRAPH_SOCKET
options NETGRAPH_PPPOE
# IP Firewall Sup
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100