diff options
Diffstat (limited to 'docs/configuration/vpn')
| -rw-r--r-- | docs/configuration/vpn/l2tp.rst | 12 | ||||
| -rw-r--r-- | docs/configuration/vpn/pptp.rst | 4 | ||||
| -rw-r--r-- | docs/configuration/vpn/sstp.rst | 15 | 
3 files changed, 21 insertions, 10 deletions
| diff --git a/docs/configuration/vpn/l2tp.rst b/docs/configuration/vpn/l2tp.rst index 26de47b3..4a7657e7 100644 --- a/docs/configuration/vpn/l2tp.rst +++ b/docs/configuration/vpn/l2tp.rst @@ -17,8 +17,8 @@ with native Windows and Mac VPN clients):    set vpn ipsec interface eth0    set vpn l2tp remote-access outside-address 192.0.2.2 -  set vpn l2tp remote-access client-ip-pool start 192.168.255.2 -  set vpn l2tp remote-access client-ip-pool stop 192.168.255.254 +  set vpn l2tp remote-access client-ip-pool L2TP-POOL range 192.168.255.2-192.168.255.254 +  set vpn l2tp remote-access default-pool 'L2TP-POOL'    set vpn l2tp remote-access ipsec-settings authentication mode pre-shared-secret    set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret <secret>    set vpn l2tp remote-access authentication mode local @@ -95,8 +95,8 @@ Below is an example to configure a LNS:  .. code-block:: none    set vpn l2tp remote-access outside-address 192.0.2.2 -  set vpn l2tp remote-access client-ip-pool start 192.168.255.2 -  set vpn l2tp remote-access client-ip-pool stop 192.168.255.254 +  set vpn l2tp remote-access client-ip-pool L2TP-POOL range 192.168.255.2-192.168.255.254 +  set vpn l2tp remote-access default-pool 'L2TP-POOL'    set vpn l2tp remote-access lns shared-secret 'secret'    set vpn l2tp remote-access ccp-disable    set vpn l2tp remote-access authentication mode local @@ -122,8 +122,8 @@ The rate-limit is set in kbit/sec.  .. code-block:: none    set vpn l2tp remote-access outside-address 192.0.2.2 -  set vpn l2tp remote-access client-ip-pool start 192.168.255.2 -  set vpn l2tp remote-access client-ip-pool stop 192.168.255.254 +  set vpn l2tp remote-access client-ip-pool L2TP-POOL range 192.168.255.2-192.168.255.254 +  set vpn l2tp remote-access default-pool 'L2TP-POOL'    set vpn l2tp remote-access authentication mode local    set vpn l2tp remote-access authentication local-users username test password test    set vpn l2tp remote-access authentication local-users username test rate-limit download 20480 diff --git a/docs/configuration/vpn/pptp.rst b/docs/configuration/vpn/pptp.rst index 12364acb..fe536eec 100644 --- a/docs/configuration/vpn/pptp.rst +++ b/docs/configuration/vpn/pptp.rst @@ -20,8 +20,8 @@ server example    set vpn pptp remote-access authentication local-users username test password 'test'    set vpn pptp remote-access authentication mode 'local' -  set vpn pptp remote-access client-ip-pool start '192.168.0.10' -  set vpn pptp remote-access client-ip-pool stop '192.168.0.15' +  set vpn pptp remote-access client-ip-pool PPTP-POOL range 192.168.0.10-192.168.0.15 +  set vpn pptp remote-access default-pool 'PPTP-POOL'    set vpn pptp remote-access gateway-address '10.100.100.1'    set vpn pptp remote-access outside-address '10.1.1.120' diff --git a/docs/configuration/vpn/sstp.rst b/docs/configuration/vpn/sstp.rst index f3e062fe..fa2b96c8 100644 --- a/docs/configuration/vpn/sstp.rst +++ b/docs/configuration/vpn/sstp.rst @@ -116,9 +116,20 @@ Configuration    Specifies the port `<port>` that the SSTP port will listen on (default 443). -.. cfgcmd:: set vpn sstp client-ip-pool subnet <subnet> +.. cfgcmd:: set vpn sstp client-ip-pool <POOL-NAME> range <x.x.x.x-x.x.x.x | x.x.x.x/x> -  Use `<subnet>` as the IP pool for all connecting clients. +   Use this command to define the first IP address of a pool of +   addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, +   it must be within a /24 subnet. If notation ``x.x.x.x/x`` is +   used there is possibility to set host/netmask. + +.. cfgcmd:: set vpn sstp client-ip-pool <POOL-NAME> next-pool <NEXT-POOL-NAME> + +   Use this command to define the next address pool name. + +.. cfgcmd:: set vpn sstp default-pool <POOL-NAME> + +   Use this command to define default address pool name.  .. cfgcmd:: set vpn sstp client-ipv6-pool prefix <address> mask <number-of-bits> | 
