pptpd (8) - Linux Manuals

pptpd: PPTP VPN daemon


pptpd - PPTP VPN daemon


pptpd [ options ]


pptpd is the Poptop PPTP daemon, which manages tunnelled PPP connections encapsulated in GRE using the PPTP VPN protocol. It may contain features like IP address management and TCP wrappers if compiled in.


Here we document the command line options. See pptpd.conf(5) for configuration directives, IP address allocation, routing, and firewall rules.

-b|--bcrelay internal-interface
specifies that broadcasts received on the server's internal network interface should be relayed to the clients.

-c|--conf conf-file
specifies the configuration file for pptpd (default /etc/pptpd.conf)

turns on debugging mode, causing more debugging messages to be sent to syslog.

-e|--ppp pppd-program
use pppd-program in place of the default pppd(8).

run in the foreground instead of detaching from terminal

display program usage.

do not send the client's IP address to ip-up scripts (required if you are using the pppd(8) ipparam option for some other purpose).

-l|--listen x.x.x.x
specifies the local interface IP address to listen on.

-o|--option ppp-conf-file
specifies that pptpd should specify an alternate configuration file for the ppp daemon (the default is normally /etc/ppp/options but may vary depending on your ppp daemon).

-p|--pidfile pid-file
specifies an alternate location to store the process ID file (default /var/run/pptpd.pid).

-s|--speed baud
specifies that the speed baud should be passed to the ppp daemon as the tty speed to use (in some cases this is ignored by the ppp daemon).

-t|--stimeout seconds
specifies the number of seconds to wait for the first packet before dropping the connection. This is a denial of service protection feature.

update wtmp(5) as users connect and disconnect. See wtmp(1).

-C|--connections n
limits the number of client connections that may be accepted. Corresponds to the connections option in pptpd.conf. If pptpd is allocating IP addresses (e.g. --delegate is not used) then the number of connections is also limited by the remoteip option in pptpd.conf.

delegates the allocation of client IP addresses to pppd(8). Without this option, which is the default, pptpd manages the list of IP addresses for clients and passes the next free address to pppd. With this option, pptpd does not pass an address, and so pppd may use radius or chap-secrets to allocate an address.

-V|--vrf vrf-name
specifies the VRF to be used for listening in.

displays the current version of the pptp daemon.




To turn on debugging, add 'debug' to /etc/pptpd.conf and your PPP options file, and restart pptpd.

Typically the PPP options file is options.pptpd in /etc/ppp, though on some distributions it may be pptpd-options. Use your package manager to find it, e.g. 'rpm -ql pptpd | grep options' or 'dpkg --listfiles pptpd | grep options'.

You may need to configure syslogd to catch debug messages. e.g. edit /etc/syslog.conf and add something similar to the example below, then restart syslogd.

# debug logging
*.debug;mail.none /var/log/debug

This will log all debug information, except mail, to the file /var/log/debug. Note that this is a lot of information and might flood your disks. If performance is an issue, you can try turning off sync during your debugging, by prefixing the destination with '-'.

# debug logging
*.debug;mail.none -/var/log/debug

Disable this line and restart syslog after you are done debugging. See the syslog man pages for more details.


Poptop is written by Matthew Ramsay <matthewr [at] moreton.com.au>, David Luyer <luyer [at] ucs.uwa.edu.au>, Kevin Thayer <tmk [at] netmagic.net>, Peter Galbavy <Peter.Galbavy [at] knowledge.com> and others. Development has been moved to SourceForge and worked on by Richard de Vroede <r.devroede [at] linvision.com> since June 26, 2002.


Copyright © 1999 Matthew Ramsay and others.

Poptop is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2, or (at your option) any later version.

Poptop is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with Poptop; see the file COPYING. If not, write to the Free Software Foundation, 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.


The most recent version of Poptop is available for download from SourceForge at http://sourceforge.net/projects/poptop.


pppd(8), pptpd(8), pptpd.conf(5).