next »

[moo]

can we only have 16 PPTP connections? we can't change the /28? or I'm missing something?

thanks

[sullrich]

http://article.gmane.org/gmane.comp.security.firewalls.pfsense.support/3920

[moo]

Ha, that's awesome!!!

thanks

[wjoyce]

Any plans to include making this configurable through the GUI?  For user friendlyness sake of course.   

[sullrich]

Any plans to include making this configurable through the GUI?  For user friendlyness sake of course.   

No, I doubt we'll expose these functions since not many ppl need them.  It's rather easy to edit config.xml and add the 2 lines.

[wjoyce]

I can respect that.  In the future, I plan on using the PPTP server to secure wireless captive portal clients.  I basically want to half the subnet I will use between the DHCP addresses and the PPTP addresses.

[ssam]

i have a question here, i've added those 2 lines, and im using pptp for securing wifi too:) But when you go to the pptp option, the max pptp clients number is still on 16 (i think thats because the value is hardcoded?), and when i set the iprange, its still being calculated by the /28 range. Is it possible to change this somehow?

[wjoyce]

i have a question here, i've added those 2 lines, and im using pptp for securing wifi too:) But when you go to the pptp option, the max pptp clients number is still on 16 (i think thats because the value is hardcoded?), and when i set the iprange, its still being calculated by the /28 range. Is it possible to change this somehow?

1.  Make sure your using the latest pfsense.
2.  add kern.ipc.maxpipekva="2514944" to /boot/loader.conf
3.  edit /etc/inc/globals.inc.  I am have been to set the values to what is below without experiencing any errors ONLY AFTER I did step 2.  I have not however tested it with 64 pptp concurrent clients. 

    "n_pptp_units" => 64,  /* this value can be overriden in pptp->n_pptp_units */
    "pptp_subnet" => 26,   /* this value can be overriden in pptp->pptp_subnet  */
4.  Note - Changes to /etc/inc/globals.inc are lost after every firmware upgrade.

[ssam]

thanks a lot for this guide will try it!

[ssam]

its working thanks, but im wondering what does this value mean? kern.ipc.maxpipekva="2514944" ?

[wjoyce]

its working thanks, but im wondering what does this value mean? kern.ipc.maxpipekva="2514944" ?

I suggest you do a google search, I'm not an expert on kernal tuning.  I would assume ipc stands for interprocess communication and the kern.ipc.maxpipekva is some sort of buffer.