pptpd - PPTP VPN daemon
is the Poptop PPTP daemon, which manages tunnelled PPP connections
encapsulated in GRE using the PPTP VPN protocol. It may contain features like
IP address management and TCP wrappers if compiled in.
Here we document the command line options. See pptpd.conf
configuration directives, IP address allocation, routing, and firewall rules.
- -b|--bcrelay internal-interface
- specifies that broadcasts received on the server's internal
network interface should be relayed to the clients.
- -c|--conf conf-file
- specifies the configuration file for pptpd (default
- turns on debugging mode, causing more debugging messages to
be sent to syslog.
- -e|--ppp pppd-program
- use pppd-program in place of the default
- run in the foreground instead of detaching from terminal
- display program usage.
- do not send the client's IP address to ip-up scripts
(required if you are using the pppd(8) ipparam option for
some other purpose).
- -l|--listen x.x.x.x
- specifies the local interface IP address to listen on.
- -o|--option ppp-conf-file
- specifies that pptpd should specify an alternate
configuration file for the ppp daemon (the default is normally
/etc/ppp/options but may vary depending on your ppp daemon).
- -p|--pidfile pid-file
- specifies an alternate location to store the process ID
file (default /var/run/pptpd.pid).
- -s|--speed baud
- specifies that the speed baud should be passed to
the ppp daemon as the tty speed to use (in some cases this is ignored by
the ppp daemon).
- -t|--stimeout seconds
- specifies the number of seconds to wait for the first
packet before dropping the connection. This is a denial of service
- update wtmp(5) as users connect and disconnect. See
- -C|--connections n
- limits the number of client connections that may be
accepted. Corresponds to the connections option in
pptpd.conf. If pptpd is allocating IP addresses (e.g.
--delegate is not used) then the number of connections is also
limited by the remoteip option in pptpd.conf.
- delegates the allocation of client IP addresses to
pppd(8). Without this option, which is the default, pptpd manages
the list of IP addresses for clients and passes the next free address to
pppd. With this option, pptpd does not pass an address, and so pppd may
use radius or chap-secrets to allocate an address.
- -V|--vrf vrf-name
- specifies the VRF to be used for listening in.
- displays the current version of the pptp daemon.
To turn on debugging, add 'debug' to /etc/pptpd.conf and your PPP options file,
and restart pptpd.
Typically the PPP options file is options.pptpd in /etc/ppp, though on some
distributions it may be pptpd-options. Use your package manager to find it,
e.g. 'rpm -ql pptpd | grep options' or 'dpkg --listfiles pptpd | grep
You may need to configure syslogd to catch debug messages. e.g. edit
/etc/syslog.conf and add something similar to the example below, then restart
# debug logging
This will log all debug information, except mail, to the file /var/log/debug.
Note that this is a lot of information and might flood your disks. If
performance is an issue, you can try turning off sync during your debugging,
by prefixing the destination with '-'.
# debug logging
Disable this line and restart syslog after you are done debugging. See the
syslog man pages for more details.
Poptop is written by Matthew Ramsay <firstname.lastname@example.org>, David Luyer
<email@example.com>, Kevin Thayer <firstname.lastname@example.org>, Peter
Galbavy <Peter.Galbavy@knowledge.com> and others. Development has been
moved to SourceForge and worked on by Richard de Vroede
<email@example.com> since June 26, 2002.
Copyright © 1999 Matthew Ramsay and others.
Poptop is free software; you can redistribute it and/or modify it under the
terms of the GNU General Public License as published by the Free Software
Foundation; either version 2, or (at your option) any later version.
Poptop is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with
Poptop; see the file COPYING. If not, write to the Free Software Foundation,
59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
The most recent version of Poptop is available for download from SourceForge at