summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenys Fedoryshchenko <denys.f@collabora.com>2025-12-07 21:27:23 +0200
committerGitHub <noreply@github.com>2025-12-07 21:27:23 +0200
commit7cf4495a7cc036a8feda6b2a6c759e345ece9e4a (patch)
tree6ea80a727181bc8922eb492cf126a3d2336cc89a
parent63165ee7fd9abec04fb5f497d11ab09e21e10b9b (diff)
parent63292b5ae0c1cd2044d42af5484c9a3bc6ba3c1d (diff)
downloadaccel-ppp-7cf4495a7cc036a8feda6b2a6c759e345ece9e4a.tar.gz
accel-ppp-7cf4495a7cc036a8feda6b2a6c759e345ece9e4a.zip
Merge pull request #272 from nuclearcat/missing-docs-more
Missing docs more
-rw-r--r--accel-pppd/accel-ppp.conf.565
1 files changed, 61 insertions, 4 deletions
diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5
index c9666206..5a80c160 100644
--- a/accel-pppd/accel-ppp.conf.5
+++ b/accel-pppd/accel-ppp.conf.5
@@ -135,7 +135,7 @@ Specifies maximum concurrent session attempts which server may processed (defaul
.TP
.BI "check-ip=" 0|1
Specifies whether accel-ppp should check if IP already assigned to other client interface (default 0).
-Check is global (not VRF-aware); with check-ip=1 the same IPv4/IPv6 address will be rejected even if sessions are in different VRFs/netns. With check-ip=0 overlapping addresses can be assigned (useful for isolated VRFs, but take care with overlapping pools).
+Check is global (not VRF-aware); with check-ip=1 the same IPv4/IPv6 address will be rejected even if sessions are in different VRFs/netns. With check-ip=0 overlapping addresses can be assigned (useful for isolated VRFs, but take care with overlapping pools). This setting can be overridden by module-specific 'check-ip' options (e.g., in the [ppp] section).
.TP
.BI "nl-snd-buffer=" n
Specifies netlink maximum send buffer size (SO_SNDBUF option) (default 32768).
@@ -184,6 +184,9 @@ Protocol field compression negotiation.
.BI "ccp=" n
Disable CCP negotiation if this parameter is zero.
.TP
+.BI "ccp-max-configure=" n
+Specifies the maximum number of CCP Configure-Request packets sent without receiving a valid Configure-Ack, Configure-Nak or Configure-Reject before assuming the peer is unable to respond (default 10).
+.TP
.BI "mppe=" require|prefer|deny
Specifies mppe negotiation preference.
.br
@@ -199,6 +202,21 @@ Specifies mppe negotiation preference.
Default behavior - don't ask client for mppe, but allow it if client wants.
Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute.
.TP
+.BI "max-configure=" n
+Specifies the maximum number of LCP/IPCP Configure-Request packets sent without receiving a valid Configure-Ack, Configure-Nak or Configure-Reject before assuming the peer is unable to respond (default 10).
+.TP
+.BI "max-failure=" n
+Specifies the maximum number of LCP/IPCP Configure-Nak returned before starting to send Configure-Reject (default 10).
+.TP
+.BI "max-terminate=" n
+Specifies the maximum number of Terminate-Request packets sent without receiving a Terminate-Ack before assuming the peer has disconnected (default 2).
+.TP
+.BI "max-mtu=" n
+Specifies the absolute maximum MTU value that can be negotiated.
+.TP
+.BI "check-ip=" 0|1
+Specifies whether to check if the assigned IP address is already in use by another session (overrides [common] check-ip for PPP sessions).
+.TP
.BI "ipv4=" deny|allow|prefer|require
Specify IPv4 (IPCP) negotiation algorithm:
.br
@@ -692,6 +710,24 @@ as a template, i.e pppoe%d => pppoe0.
Specifies max sessions time in seconds, after this time session will be terminated.
.br
This timeout can be redefined with radius attribute Session-Timeout. 0 value means infinite timeout.
+.TP
+.BI "ip-pool=" pool_name
+Specifies the name of the IPv4 pool to use for allocating client addresses.
+.TP
+.BI "ipv6-pool=" pool_name
+Specifies the name of the IPv6 pool to use for allocating client addresses.
+.TP
+.BI "ipv6-pool-delegate=" pool_name
+Specifies the name of the IPv6 prefix delegation pool to use.
+.TP
+.BI "ifname-in-sid=" 0|1
+If set to 1, the interface name is included in the Session ID.
+.TP
+.BI "sid-uppercase=" 0|1
+If set to 1, the Session ID is generated in uppercase.
+.TP
+.BI "cookie-timeout=" n
+Specifies the timeout in seconds for the PPPoE cookie (PADO/PADR stage).
.SH [l2tp]
.br
Configuration of L2TP module.
@@ -788,6 +824,21 @@ as a template, i.e l2tp%d => l2tp0.
Specifies max sessions time in seconds, after this time session will be terminated.
.br
This timeout can be redefined with radius attribute Session-Timeout. 0 value means infinite timeout.
+.TP
+.BI "avp_permissive=" 0|1
+If set to 1, ignore the Mandatory (M) bit in unknown Attribute-Value Pairs (AVPs) instead of terminating the connection.
+.TP
+.BI "dir300_quirk=" 0|1
+If set to 1, enables a workaround for D-Link DIR-300 routers that send packets with Tunnel ID 0.
+.TP
+.BI "ip-pool=" pool_name
+Specifies the name of the IPv4 pool to use for allocating client addresses.
+.TP
+.BI "ipv6-pool=" pool_name
+Specifies the name of the IPv6 pool to use for allocating client addresses.
+.TP
+.BI "ipv6-pool-delegate=" pool_name
+Specifies the name of the IPv6 prefix delegation pool to use.
.SH [sstp]
.br
Configuration of SSTP module.
@@ -1010,14 +1061,20 @@ Specifies should accel-ppp generate and send Acct-Session-Id on Access-Request p
.TP
.BI "nas-port-id-in-req=" 0|1
Specifies should accel-ppp send NAS-Port-Id on Access-Request and Accounting-Request packets (default 1).
-.SH [log]
-.br
-Configuration of log and log_file modules.
+.TP
+.BI "bind=" x.x.x.x
+Specifies the source IP address for outgoing RADIUS packets.
+.TP
+.BI "require-nas-identification=" 0|1
+If enabled, checks that the NAS-Identifier or NAS-IP-Address in DM/CoA requests matches the server's configuration.
.TP
.BI "blast-protection=" 0|1
If this option is given and
.B 1
is specified then radius module will include Message-Authenticator attribute in Access-Request packets.
+.SH [log]
+.br
+Configuration of log and log_file modules.
.TP
.BI "log-file=" file
Path to file to write general log.