PPPoE Max Tunnels,

[John Oxley]

On Mon, Feb 20, 2006 at 05:46:15PM -0600, Porpoise Power wrote:
> Please excuse me if I make a mistake here as I'm more familar with OpenBSD's
> ppp and pf daemons.  What does your conf files look like?  Also
> Your network settings look a little funny, Can you elaborate on them?  
> It might be a source of the problem.  

OK,

I have two NIC's, bge0 with a public IP and vr0 which I've assigned the
private ip 10.42.73.37/8 which I sucked out my thumb.

I'm using the standard pppoe startup script and this is in my
/etc/rc.conf
pppoed_enable="YES"
pppoed_flags="-d -P /var/run/pppoed.pid -a yonetwork -l default"
pppoed_interface="vr0"

The contents of my /etc/ppp/ppp.conf are:
default:
   set log Chat Command Phase
   enable pap
   allow mode direct
   enable proxy
   disable ipv6cp
   set mru 1472
   set mtu 1472
   set ifaddr 10.42.73.38 10.42.73.37
   set radius /etc/radius.conf
   accept dns

The contents of /etc/radius.conf are:
auth radiusmachine:1812 "my_secret"
acct radiusmachine:1813 "my_secret"

That is all the configuration that I have for the PPPoE setup.

I have configured the machine as a gateway and there is no firewall
running on the box at the moment.  It plugs into a switch and I'm
statically routing the netblocks that my clients use to the bge
interface of the box.

All the clients use public IPs.  Here is a snippet of the output of
ifconfig:

tun26: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
        inet 10.42.73.38 --> xxx.xxx.xxx.26 netmask 0xffffffff 
        Opened by PID 490
tun27: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
        inet 10.42.73.38 --> xxx.xxx.xxx.13 netmask 0xffffffff 
        Opened by PID 754
tun28: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
        inet 10.42.73.38 --> xxx.xxx.xxx.7 netmask 0xffffffff 
        Opened by PID 563

The problem is that the machine will not take more than 30 clients.  I'm
trying to find a limit somewhere in the config files but I can't.  The
kernel has NETGRAPH, NETGRAPH_PPP and NETGRAPH_PPPOE in it.

Any ideas?

-John