BiTel

# ifconfig | grep ^ng | wc -l
     594

# cat /etc/sysctl.conf | grep -Ev '^#|^$'
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
kern.corefile=/tmp/%U.%N.%P.core
net.inet.tcp.sendspace=65535
net.inet.tcp.recvspace=65535
net.inet.udp.recvspace=65535
kern.maxfiles=65536
kern.maxfilesperproc=32768
kern.ipc.somaxconn=4096
net.inet.ip.fastforwarding=1

# cat /boot/loader.conf | grep -Ev '^#|^$'
autoboot_delay="3"
kern.maxusers=2048
kern.ipc.maxpipekva=134217728
kern.ipc.nmbclusters=65536

# cat /etc/sysctl.conf | grep -Ev '^#|^$'
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
kern.corefile=/tmp/%U.%N.%P.core
net.inet.tcp.sendspace=65535
net.inet.tcp.recvspace=65535
net.inet.udp.recvspace=65535
kern.maxfiles=65536
kern.maxfilesperproc=32768
kern.ipc.somaxconn=4096
net.inet.ip.fastforwarding=1

# cat /boot/loader.conf | grep -Ev '^#|^$'
autoboot_delay="3"
kern.maxusers=2048
kern.ipc.maxpipekva=134217728
kern.ipc.nmbclusters=65536

kern.ipc.maxsockbuf=2621440
net.graph.recvspace=1024000
net.graph.maxdgram=1024000

# sysctl net.graph.recvspace=1024000
net.graph.recvspace: 20480 -> 1024000
pppoe# sysctl net.graph.maxdgram=1024000
net.graph.maxdgram: 20480 -> 1024000
pppoe# ngctl list
ngctl: can't create node: No buffer space available
# sysctl -a | grep graph
net.graph.msg_version: 8
net.graph.abi_version: 11
net.graph.maxdata: 512
net.graph.maxalloc: 4096
net.graph.threads: 8
net.graph.control.proto: 2
net.graph.data.proto: 1
net.graph.family: 32
net.graph.recvspace: 1024000
net.graph.maxdgram: 1024000

# ifconfig | grep ^ng | wc -l
    311

# sysctl net.graph.maxdgram=20480
net.graph.maxdgram: 1024000 -> 20480
pppoe# ngctl list
ngctl: can't create node: No buffer space available
pppoe# sysctl -a | grep graph
net.graph.msg_version: 8
net.graph.abi_version: 11
net.graph.maxdata: 512
net.graph.maxalloc: 4096
net.graph.threads: 8
net.graph.control.proto: 2
net.graph.data.proto: 1
net.graph.family: 32
net.graph.recvspace: 1024000
net.graph.maxdgram: 20480

# vmstat -i
interrupt                          total       rate
irq1: atkbd0                         125          0
irq6: fdc0                             1          0
irq19: em0 uhci4++            1833023549       2154
cpu0: timer                   1700273859       1998
cpu4: timer                   1700272801       1998
cpu1: timer                   1700272801       1998
cpu3: timer                   1700272801       1998
cpu2: timer                   1700272800       1998
cpu7: timer                   1700272800       1998
cpu6: timer                   1700272801       1998
cpu5: timer                   1700272801       1998
Total                        15435207139      18138
pppoe#  netstat -m
2177/5893/8070 mbufs in use (current/cache/total)
2175/4531/6706/65536 mbuf clusters in use (current/cache/total/max)
2175/4353 mbuf+clusters out of packet secondary zone in use (current/cache)
0/183/183/66048 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/33024 9k jumbo clusters in use (current/cache/total/max)
0/0/0/16512 16k jumbo clusters in use (current/cache/total/max)
4933K/11267K/16201K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/7/33280 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
0 requests for I/O initiated by sendfile
0 calls to protocol drain routines

# uname -a
7.3-RELEASE-p3 FreeBSD 7.3-RELEASE-p3 #0: Tue Oct 12 13:14:37 VLAST 2010     :/usr/obj/usr/src/sys/GENERIC  i386

# ngctl list
ngctl: can't create node: No buffer space available

startup:
   # configure mpd users
   set user admin admin admin
   # configure the console
   set console self 0.0.0.0 5005
   set console open
   # configure the web server
   set web self 0.0.0.0 5006
   set web open

default:
   load pppoe_server

pppoe_server:
           set ippool add ine 191.206.254.100 191.206.254.200

   create bundle template B
   set ipcp ranges XXX.XXX.XXX.XXX/32 ippool ine
   set ipcp dns ДНС
   set iface idle 0
   set iface enable tcpmssfix
   set iface enable nat
   set iface addrs ХХХ.ХХХ.ХХХ.ХХХ YYY.YYY.YYY.YYY
   set ipcp yes vjcomp
   
   set bundle enable compression
   set ccp yes mppc
   set mppc yes e40
   set mppc yes e128
   set mppc yes stateless
   
   create link template common pppoe
   set pppoe iface vr0
   set link enable multilink
   set link action bundle B
   set link disable pap eap
   set link enable chap
   load radius
   set pppoe service "*"
   
   create link template PPPoE common
   set link max-children 1000
   set pppoe iface vr0
   set link enable incoming
   set link no pap eap
   set link yes chap-md5
   set link keep-alive 20 60
   set link no acfcomp protocomp
   
radius:
   set radius server 192.168.91.15 133614 1815 1816
   set radius retries 3
   set radius me 192.168.90.2
   set radius identifier mpd
   set auth acct-update 300
#   set auth disable internal
   set auth enable radius-auth
   set auth enable radius-acct
   set radius enable message-authentic