Провайдер Билайн (пособие по настройке компьютера http://internet.beeline.ua/mediacache/2 ... 59caad.pdf) на украинском , но по скринам все понятно.
У меня каждый вечер постоянные обрывы VPN, может неправильные настройки? Помогите.
Вот мне один человек дал такую инструкцию(у меня 3 компа и спутн.ресивер - dreambox):
1. DFL-210, англ. интерфейс.
Все настройки скинуть до заводских.
Обновить firmware до 2.20.02.12-7178

2. VPN-клиент
Interfaces > PPTP/L2TP Clients > Add PPTP/L2TP Client >
Name = Beeline
Tunnel Protocol = PPTP
Remote Endpoint = dns:vpn.beeline.ua
Remote Network = all-nets
Username = dxxxxxxx@internet.beeline.ua
Password = *******
Confirm Password = *******
> Security >
None [V]
RC4 40 bit [ ]
RC4 56 bit [ ]
RC4 128 bit [ ]
OK

System > DNS >
Primary Server = wan_dns1
Secondary Server = None
Tertiary Server = None
OK

3.Адресная книга
Objects > Address Book >

Add IP address >
Name = ISP_nets
IP Address = 10.0.0.0/8
OK

Add IP address >
Name = DHCP_netmask
IP Address = 255.255.255.0
OK

Add IP address >
Name = DHCP_pool
IP Address = 192.168.1.2-192.168.1.5
OK

Add IP address >
Name = user_1_ip
IP Address = 192.168.1.2
OK

Add IP address >
Name = user_2_ip
IP Address = 192.168.1.3
OK

Add IP address >
Name = user_3_ip
IP Address = 192.168.1.4
OK

Add IP address >
Name = dreambox_ip
IP Address = 192.168.1.5
OK

Add Ethernet dddress >
Name = user_1_mac
MAC Address = xx-xx-xx-xx-xx-xx
OK

Add Ethernet dddress >
Name = user_2_mac
MAC Address = xx-xx-xx-xx-xx-xx
OK

Add Ethernet dddress >
Name = user_3_mac
MAC Address = xx-xx-xx-xx-xx-xx
OK

Add Ethernet dddress >
Name = dreambox_mac
MAC Address = xx-xx-xx-xx-xx-xx
OK

4. DHCP
System > DHCP > DHCP Servers >
Add DHCP server >
Name = DHCP
Interface Filter = lan
IP Address Pool = DHCP_pool
Netmask = DHCP_netmask
> Options >
Default GW = lan_ip
DNS Primary = Beeline _dns1
DNS Secondary = Beeline _dns2
OK

5. Cтатичные адреса в LAN
System > DHCP > DHCP Servers > Static Hosts >
Add Static Host Entry >
Host = user_1_ip
Mac = user_1_mac
OK

Add Static Host Entry >
Host = user_2_ip
Mac = user_2_mac
OK

Add Static Host Entry >
Host = user_3_ip
Mac = user_3_mac
OK

Add Static Host Entry >
Host = dreambox_ip
Mac = dreambox_mac
OK

6. IP-фильтры
Rules > IP Rules > IP Rule folder >
Name = lan_to_internet
OK

Rules > IP Rules > lan_to_internet > Add IP rule >
Name = drop_smb-all
Action = Drop
Service = smb-all
Source Interface = lan
Source Network = lannet
Destination Interface = Beeline
Destination Network = all-nets
OK

Rules > IP Rules > lan_to_internet > Add IP rule >
Name = allow_ping-outbound
Action = NAT
Service = ping-outbound
Source Interface = lan
Source Network = lannet
Destination Interface = Beeline
Destination Network = all-nets
OK

Rules > IP Rules > lan_to_internet > Add IP rule >
Name = allow_standard
Action = NAT
Service = all_tcpudp
Source Interface = lan
Source Network = lannet
Destination Interface = Beeline
Destination Network = all-nets
OK

Rules > IP Rules > lan_to_internet > Add IP rule >
Name = allow-dns
Action = NAT
Service = dns-all
Source Interface = lan
Source Network = lannet
Destination Interface = Beeline
Destination Network = all-nets
OK

Rules > IP Rules > lan_to_wan >
Видалити всі старі правила.
Записати нові.

Rules > IP Rules > lan_to_wan > Add IP rule >
Name = drop_smb-all
Action = Drop
Service = smb-all
Source Interface = lan
Source Network = lannet
Destination Interface = wan
Destination Network = ISP_nets
OK

Rules > IP Rules > lan_to_wan > Add IP rule >
Name = allow_ping-outbound
Action = NAT
Service = ping-outbound
Source Interface = lan
Source Network = lannet
Destination Interface = wan
Destination Network = ISP_nets
OK

Rules > IP Rules > lan_to_wan > Add IP rule >
Name = allow_standard
Action = NAT
Service = all_tcpudp
Source Interface = lan
Source Network = lannet
Destination Interface = wan
Destination Network = ISP_nets
OK

7. Маршруты
Routing >Routing Tables > main > Add Route >
Interface = wan
Network = ISP_nets
Gateway = wan_gw
Metric = 100
OK

8. Пинг и трассы
http://dlink.ru/technical/faq_firewall_49.php

9. Порты (для торрента)
Objects > Services > Add TCP/UDP service >
Name = torrent_40000
Type = TCP/UDP
Source = 0-65535
Destination = 40000
SYN flood protection (SYN Relay) [V]
OK

Rules > IP Rules > IP Rule folder >
Name = port_mapping
OK

Rules > IP Rules > port_mapping > Add IP rule >
Name = torrent_4000_forward
Action = SAT
Service = torrent_40000
Source Interface = any
Source Network = all-nets
Destination Interface = core
Destination Network = Beeline _ip
> SAT >
Translate the [V] Destination IP Address To: New IP Address = user_1_ip
OK

Rules > IP Rules > port_mapping > Add IP rule >
Name = torrent_40000_allow
Action = Allow
Service = torrent_40000
Source Interface = any
Source Network = all-nets
Destination Interface = core
Destination Network = Beeline _ip
OK

Если кому-то ещё, кроме user_1_ip, нужен торрент – нужно выделить отдельный порт, сделать Service и записать свою группу правил SAT/Allow.

10. Configuration > Save and Activate

Да, еще в правилах самое первое правило осталось ping_fw Allow lan lannet core lan_ip ping_ ping-inbound
Дописывал уже и DNS_Realay, но ничего нового. Помогите пожалуйста настроить.
У Билайна на Remote Endpoint = dns:vpn.beeline.ua три сервера 10.0.0.1 – 10.0.0.3
Может это пригодится для настройки
DHCP
Status: BOUND
Assigned IP: 10.44.4.244
Subnet mask: 255.255.255.0
Broadcast IP: 10.44.4.255
Gateway IP: 10.44.4.1
DNS1: 10.10.10.2
DNS2: N/A
DHCPD IP: 10.10.10.3
Leasetime: 172800s
Renew in: 4234s
Rebind in: 69034s
Expire in: 90634s