diff options
| author | Denys Fedoryshchenko <denys.f@collabora.com> | 2025-12-01 03:06:34 +0200 |
|---|---|---|
| committer | Denys Fedoryshchenko <denys.f@collabora.com> | 2025-12-01 03:06:34 +0200 |
| commit | 63292b5ae0c1cd2044d42af5484c9a3bc6ba3c1d (patch) | |
| tree | 6ea80a727181bc8922eb492cf126a3d2336cc89a | |
| parent | a1920c35a4b99c2844b9ed99800a22a6c66252ee (diff) | |
| download | accel-ppp-63292b5ae0c1cd2044d42af5484c9a3bc6ba3c1d.tar.gz accel-ppp-63292b5ae0c1cd2044d42af5484c9a3bc6ba3c1d.zip | |
radius: Improve documentation
Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
| -rw-r--r-- | accel-pppd/accel-ppp.conf.5 | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index 67b0d3d3..5a80c160 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -135,7 +135,7 @@ Specifies maximum concurrent session attempts which server may processed (defaul .TP .BI "check-ip=" 0|1 Specifies whether accel-ppp should check if IP already assigned to other client interface (default 0). -Check is global (not VRF-aware); with check-ip=1 the same IPv4/IPv6 address will be rejected even if sessions are in different VRFs/netns. With check-ip=0 overlapping addresses can be assigned (useful for isolated VRFs, but take care with overlapping pools). +Check is global (not VRF-aware); with check-ip=1 the same IPv4/IPv6 address will be rejected even if sessions are in different VRFs/netns. With check-ip=0 overlapping addresses can be assigned (useful for isolated VRFs, but take care with overlapping pools). This setting can be overridden by module-specific 'check-ip' options (e.g., in the [ppp] section). .TP .BI "nl-snd-buffer=" n Specifies netlink maximum send buffer size (SO_SNDBUF option) (default 32768). @@ -1061,14 +1061,20 @@ Specifies should accel-ppp generate and send Acct-Session-Id on Access-Request p .TP .BI "nas-port-id-in-req=" 0|1 Specifies should accel-ppp send NAS-Port-Id on Access-Request and Accounting-Request packets (default 1). -.SH [log] -.br -Configuration of log and log_file modules. +.TP +.BI "bind=" x.x.x.x +Specifies the source IP address for outgoing RADIUS packets. +.TP +.BI "require-nas-identification=" 0|1 +If enabled, checks that the NAS-Identifier or NAS-IP-Address in DM/CoA requests matches the server's configuration. .TP .BI "blast-protection=" 0|1 If this option is given and .B 1 is specified then radius module will include Message-Authenticator attribute in Access-Request packets. +.SH [log] +.br +Configuration of log and log_file modules. .TP .BI "log-file=" file Path to file to write general log. |