This chapter explains the tasks for configuring the most common PPP link, the dial-up link. Major topics include the following:Configuring the Dial-out Machine Configuring the Dial-in Server Calling the Dial-in Server You set up the dial-up PPP link by configuring modems, modifying network database files, and modifying the PPP configuration files that are described in Table 22–1. The next table lists the major tasks to configure both sides of a dial-up PPP link. Typically, you configure only one end of the link, either the dial-out machine or dial-in server.Task Description For Instructions 1. Gather preconfiguration information Gather data that is needed prior to setting up the link, such as peer host names, target phone numbers, and modem speed. Planning a Dial-up PPP Link 2. Configure the dial-out machine Set up PPP on the machine that makes the call over the link. Table 17–2 3. Configure the dial-in server Set up PPP on the machine that receives incoming calls. Table 17–3 4. Call the dial-in server Type the pppd command to initiate communications. How to Call the Dial-in Server The tasks in this section explain how to configure a dial-out machine. The tasks use as an example the dial- in-from-home scenario that was introduced in Figure 16–1. You can perform the tasks at your company before passing on the machine to a prospective user. Alternatively, you can instruct experienced users in the setup of their home machines. Anyone setting up a dial-out machine must have root permission for that machine.Task Description For Instructions 1. Gather preconfiguration information Gather data that is needed prior to setting up the link, such as peer host names, target phone numbers, and modem speed. Planning a Dial-up PPP Link 2. Configure the modem and serial port Set up the modem and serial port. How to Configure the Modem and Serial Port (Dial-out Machine) 3. Configure the serial-line communication Configure the characteristics of the transmission across the serial line. How to Define Communications Over the Serial Line 4. Define the conversation between the dial-out machine and the peer Gather communications data for use when you create the chat script. How to Create the Instructions for Calling a Peer 5. Configure information about a particular peer Configure PPP options to call an individual dial-in server. How to Define the Connection With an Individual Peer 6. Call the peer Type the pppd command to initiate communications. How to Call the Dial-in Server. Solaris PPP 4.0 provides template files. Each template contains common options for a particular PPP configuration file. The next table lists the sample templates that can be used for setting up a dial-up link, and their equivalent Solaris PPP 4.0 files.Template File PPP Configuration File For Instructions /etc/ppp/options.tmpl /etc/ppp/options /etc/ppp/options.tmpl Template /etc/ppp/options.ttya.tmpl /etc/ppp/options.ttyname options.ttya.tmpl Template File /etc/ppp/myisp-chat.tmpl File with the name of your choice to contain the chat script /etc/ppp/myisp-chat.tmpl Chat Script Template /etc/ppp/peers/myisp.tmpl /etc/ppp/peers/peer-name /etc/ppp/peers/myisp.tmpl Template File If you decide to use one of the template files, be sure to rename the template to its equivalent PPP configuration file. The one exception is the chat file template /etc/ppp/myisp-chat.tmpl. You can choose any name for your chat script. The first task for setting up a dial-out PPP machine is to configure the devices on the serial line: the modem and serial port.Tasks that apply to a modem usually apply to an ISDN TA. Before performing the next procedure, you must have done the following.Installed the Solaris 9 release or Solaris 10 release on the dial-out machine Determined the optimum modem speed Decided which serial port to use on the dial-out machine Obtained the root password for the dial-out machine For planning information, see Table 16–2. Program the modem.Even though a variety of modem types is available, most modems are shipped with the correct settings for Solaris PPP 4.0. The following list shows the basic parameter settings for modems that use Solaris PPP 4.0.DCD – Follow carrier instructions DTR – Set low so that the modem hangs up and puts the modem on-hook Flow Control – Set to RTS/CTS for full-duplex hardware flow control Attention Sequences – Disable If you have problems setting up the link and suspect that the modem is at fault, first consult the modem manufacturer's documentation. Also, a number of web sites offer help with modem programming. Finally, you can find some suggestions for clearing modem problems in How to Diagnose Modem Problems. Attach the modem cables to the serial port on the dial-out machine and to the telephone jack. Become superuser on the dial-out machine or assume an equivalent role.Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration. Run the /usr/sadm/bin/smc command, as explained in Setting Up Terminals and Modems With Serial Ports Tool (Overview) in System Administration Guide: Advanced Administration. This command opens the Solaris Management Console.Use the Solaris Management Console to do the following.Select the port where you have attached the modem. Specify modem direction as dial-out only.You can set up the modem as bidirectional. However, the dial-out-only choice is more secure against possible intruders. You can set the baud rate and timeout from /usr/sadm/bin/smc. However, the pppd daemon ignores these settings. Click Okay to convey the changes. The procedures in this section show how to configure communications over the serial line of the dial-out machine. Before you can use these procedures, you must have configured the modem and serial port, as described in How to Configure the Modem and Serial Port (Dial-out Machine).The next tasks show how to enable the dial-out machine to successfully initiate communications with the dial-in server. Communications are initiated as defined in the options in the PPP configuration files. You need to create the following files:/etc/ppp/options /etc/ppp/options.ttyname Chat script /etc/ppp/peers/peer-name Solaris PPP 4.0 provides templates for the PPP configuration files, which you can customize to accommodate your needs. Refer to Dial-up PPP Template Files for detailed information about these files. Become superuser on the dial-out machine or assume an equivalent role.Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration Create a file that is called /etc/ppp/options with the following entry:lockThe /etc/ppp/options file is used for defining global parameters that apply to all communications by the local machine. The lock option enables UUCP-style locking of the form /var/spool/locks/LK.xxx.yyy.zzz.If the dial-out machine does not have an /etc/ppp/options file, only the superuser can run the pppd command. However, the /etc/ppp/options can be empty. For a complete description of /etc/ppp/options, refer to /etc/ppp/options Configuration File. Create a file that is called /etc/ppp/options.ttyname for defining how communications should be initiated from a specific serial port.The next example shows an /etc/ppp/options.ttyname file for the port with the device name /dev/cua/a.# cat /etc/ppp/options.cua.a crtsctsThe PPP option crtscts tells the pppd daemon to turn on hardware flow control for serial port a.For more information about the /etc/ppp/options.ttyname file, go to /etc/ppp/options.ttyname Configuration File. Set the modem speed, as described in How to Set the Modem Speed. Before the dial-out machine can initiate a PPP link, you must collect information about the dial-in server that is to become the peer. Then, you use this information to create the chat script, which describes the actual conversation between the dial-out machine and the peer. Determine the speed at which the dial-out machine's modem needs to run. For more information, see Configuring Modem Speed for a Dial-up Link. Obtain the following information from the dial-in server's site.Server's telephone number Authentication protocol that is used, if appropriate Login sequence that is required by the peer for the chat script Obtain the names and IP addresses of name servers at the dial-in server's site. In a chat script, provide instructions for initiating calls to the particular peer.For example, you might create the following chat script, /etc/ppp/mychat, to call the dial-in server myserver. SAY "Calling the peer\n" TIMEOUT 10 ABORT BUSY ABORT 'NO CARRIER' ABORT ERROR REPORT CONNECT "" AT&F1&M5S2=255 TIMEOUT 60 OK ATDT1-123-555-1234 CONNECT \c SAY "Connected; logging in.\n" TIMEOUT 5 ogin:--ogin: pppuser TIMEOUT 20 ABORT 'ogin incorrect' ssword: \qmypassword "% " \c SAY "Logged in. Starting PPP on peer system.\n" ABORT 'not found' "" "exec pppd" ~ \cThe script contains instructions for calling a Solaris dial-in server that requires a login sequence. For a description of each instruction, refer to Basic Chat Script Enhanced for a UNIX-Style Login. For complete details about creating a chat script, read the section Defining the Conversation on the Dial-up Link.You do not invoke the chat script directly. Rather, you use the file name of the chat script as an argument to the chat command, which invokes the script. If a peer runs Solaris or a similar operating system, consider using the previous chat script as a template for your dial-out machines. Become superuser on the dial-out machine or assume an equivalent role.Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration. Update DNS databases by creating the following /etc/resolv.conf file:domain bigcompany.com nameserver 10.10.111.15 nameserver 10.10.130.8domain bigcompany.comSpecifies that the peer's DNS domain is bigcompany.com. nameserver 10.10.111.15 and nameserver 10.10.130.8Lists the IP addresses of name servers at bigcompany.com. Edit the /etc/nsswitch.conf file to have the DNS database searched first for host information.hosts: dns [NOTFOUND=return] files Create a file for the peer.For example, you would create the following file to define the dial-in server myserver:# cat /etc/ppp/peers/myserver /dev/cua/a 57600 noipdefault defaultroute idle 120 noauth connect "chat -U 'mypassword' -T 1-123-555-1213 -f /etc/ppp/mychat"/dev/cua/aSpecifies that the device /dev/cua/a should be used as the serial interface for calls to myserver. 57600Defines the speed of the link. noipdefaultSpecifies that for transactions with peer myserver, the dial-out machine initially has an IP address of 0.0.0.0. myserver assigns an IP address to the dial-out machine for every dial-up session. idle 120Indicates that the link must time out after an idle period of 120 seconds. noauthSpecifies that the peer myserver does not need to provide authentication credentials when negotiating the connection with the dial-out machine. connect "chat -U 'mypassword' -T 1-123-555-1213 -f /etc/ppp/mychat"Specifies the connect option and its arguments, including the phone number of the peer, and the chat script /etc/ppp/mychat with calling instructions. The following list provides references to related information.To configure another dial-out machine, see How to Configure the Modem and Serial Port (Dial-out Machine). To test modem connectivity by dialing out to another computer, see cu1C and tip1 man pages. These utilities can help you test if your modem is properly configured. Also, use these utilities to test if you can establish a connection with another machine. To learn more about the configuration files and options, see Using PPP Options in Files and on the Command Line. To configure a dial-in server, see Configuring Devices on the Dial-in Server. The tasks in this section are for configuring the dial-in server. The dial-in server is a peer machine that receives the call over the PPP link from the dial-out machine. The tasks show how to configure the dial-in server myserver that was introduced in Figure 16–1. Task Description For Instructions 1. Gather preconfiguration information Gather data that is needed prior to setting up the link, such as peer host names, target phone numbers, and modem speed. Planning a Dial-up PPP Link 2. Configure the modem and serial port Set up the modem and serial port. How to Configure the Modem and Serial Port (Dial-in Server) 3. Configure calling peer information Set up the user environments and PPP options for every dial-out machine that is permitted to call the dial-in server. How to Configure Users of the Dial-in Server 4. Configure the serial-line communication Configure the characteristics of the transmission across the serial line. How to Define Communications Over the Serial Line (Dial-in Server) The following procedure explains how to configure the modem and serial port on the dial-in server.Before you do the next procedure, you must have completed the following activities on the peer dial-in server:Installed the Solaris 9 release or Solaris 10 release Determined the optimum modem speed Decided which serial port to use Program the modem, as instructed in the modem manufacturer's documentation.For other suggestions, refer to How to Configure the Modem and Serial Port (Dial-out Machine). Attach the modem to the serial port on the dial-in server. Become superuser on the dial-in server or assume an equivalent role.Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration. Configure the serial port by using the /usr/sadm/bin/smc command for the Solaris Management Console, as described in Setting Up Terminals and Modems With Serial Ports Tool (Overview) in System Administration Guide: Advanced Administration. Use the Solaris Management Console to do the following:Select the serial port where you have attached the modem. Specify modem direction as dial-in only.Solaris PPP 4.0 does support bidirectional communications for a modem. Click Okay to convey the changes. The next procedure explains how to set the modem speed for a dial-in server. For suggestions about speeds to use with Sun Microsystems' computers, see Configuring Modem Speed for a Dial-up Link. Log in to the dial-in server. Use the tip command to reach the modem.Instructions for using tip to set the modem speed are in the tip(1) man page. Configure the modem for a fixed DTE rate. Lock the serial port to that rate, using ttymon or /usr/sadm/bin/smc, as discussed in Setting Up Terminals and Modems With Serial Ports Tool (Overview) in System Administration Guide: Advanced Administration. The following list provides references to related information.How to Configure the Modem and Serial Port (Dial-in Server) How to Configure Users of the Dial-in Server Part of the process of setting up a dial-in server involves configuring information about each known remote caller. Before starting the procedures in this section, you must have done the following:Obtained the UNIX user names for all users who are permitted to log in from remote dial-out machines. Set up the modem and serial line, as described in How to Configure the Modem and Serial Port (Dial-in Server). Dedicated an IP address to be assigned to incoming calls from remote users. Consider creating a dedicated incoming IP address if the number of potential callers exceeds the number of modems and serial ports on the dial-in server. For complete information about creating dedicated IP addresses, go to Creating an IP Addressing Scheme for Callers. Become superuser on the dial-in server or assume an equivalent role.Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration. Create a new account on the dial-in server for each remote PPP user.You can use the Solaris Management Console to create a new user. The /usr/sadm/bin/smc command opens the Solaris Management Console. For instructions about creating a new user through Solaris Management Console, see Setting Up User Accounts (Task Map) in System Administration Guide: Basic Administration. Use Solaris Management Console to assign parameters for the new user.For example, the following table shows the parameters for an account that is called pppuser for user1 on the dial-out machine myhome.Parameter Value Definition User Name pppuser The user account name for the remote user. This account name should correspond to the account name that is given in the login sequence of the chat script. For example, pppuser is the account name that is found in the chat script in How to Create the Instructions for Calling a Peer. Login Shell /usr/bin/pppd The default login shell for the remote user. The login shell /usr/bin/pppd initially restricts the caller to a dedicated PPP environment. Create Home Dir Path /export/home/pppuser The home directory /export/home/pppuser is set when the caller successfully logs in to the dial-in server. Create for each caller a $HOME/.ppprc file that contains various options that are specific to the user's PPP session.For example, you might create the following .ppprc file for pppuser.# cat /export/home/pppuser/.ppprc noccpnoccp turns off compression control on the link. The following list provides references to related information.How to Configure Users of the Dial-in Server. How to Define Communications Over the Serial Line (Dial-in Server). The next task shows how to enable the dial-in server to open communications with any dial-out machine. The options that are defined in the following PPP configuration files determine how communications are established./etc/ppp/options /etc/ppp/options.ttyname For detailed information about these files, refer to Using PPP Options in Files and on the Command Line.Before you proceed, you should have done the following:Configured the serial port and modem on the dial-in server, as described in How to Configure the Modem and Serial Port (Dial-in Server). Configured information about the prospective users of the dial-in server, as described in How to Configure Users of the Dial-in Server. Become superuser on the dial-in server or assume an equivalent role.Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration. Create the /etc/ppp/options file with the following entry.nodefaultroutenodefaultroute indicates that no pppd session on the local system can establish a default route without root privileges.If the dial-in server does not have an /etc/ppp/options file, only the superuser can run the pppd command. However, the /etc/ppp/options file can be empty. Create the file /etc/options.ttyname to define how calls that are received over serial port ttyname should be handled.The following /etc/options.ttya file defines how the dial-in server's serial port /dev/ttya should handle incoming calls.:10.0.0.80 xonxoff:10.0.0.80Assigns the IP address 10.0.0.80 to all peers that are calling in over serial port ttya xonxoffAllows the serial line to handle communications from modems with software flow control enabled If you have followed all the procedures in this chapter, you have completed the configuration of the dial-up link. The following list provides references to related information.To test modem connectivity by dialing out to another computer, see cu1C and tip1 man pages. These utilities can help you test if your modem is properly configured. Also, use these utilities to test if you can establish a connection with another machine. To configure more options for the dial-in server, see Configuring the Dial-in Server. To configure more dial-out machines, see Configuring the Dial-out Machine. To have the remote machine call the dial-in server, see Calling the Dial-in Server. You establish a dial-up PPP link by having the dial-out machine call the dial-in server. You can instruct the dial-out machine to call the server by specifying the demand option in the local PPP configuration files. However, the most common method for establishing the link is for the user to run the pppd command on the dial-out machine.Before you proceed to the next task, you should have done either or both of the following:Set up the dial-out machine, as described in Configuring the Dial-out Machine Set up the dial-in server, as described in Configuring the Dial-in Server Log in to the dial-out machine by using your regular user account, not root. Call the dial-in server by running the pppd command.For example, the following command initiates a link between the dial-out machine and dial-in server myserver:% pppd 57600 call myserverpppdStarts the call by invoking the pppd daemon 57600Sets the speed of the line between host and modem call myserverInvokes the call option of pppd. pppd then reads options in the file /etc/ppp/peers/myserver, which was created in How to Define the Connection With an Individual Peer Contact a host on the server's network, for example, the host lindyhop that is shown in Figure 16–1:ping lindyhopIf the link is not working correctly, refer to Chapter 21, Fixing Common PPP Problems (Tasks). Terminate the PPP session:% pkill -x pppd If you have followed all the procedures in this chapter, you have completed the configuration of the dial-up link. The following list provides references to related informationTo have users start working on their dial-out machines, see How to Call the Dial-in Server. To fix problems on the link, see Chapter 21, Fixing Common PPP Problems (Tasks). To learn more about the files and options that are used in this chapter, see Using PPP Options in Files and on the Command Line.