lock
noauth

refuse-eap
refuse-chap
refuse-mschap

nobsdcomp
nodeflate

require-mppe-128