docs: synchronize config sample and man page

2 files changed, 350 insertions, 4 deletions

diff --git a/accel-pppd/accel-ppp.conf b/accel-pppd/accel-ppp.conf
index 591a8ca7..c9b2017d 100644
--- a/accel-pppd/accel-ppp.conf
+++ b/accel-pppd/accel-ppp.conf
@@ -36,6 +36,7 @@ pppd_compat
 
 [core]
 log-error=/var/log/accel-ppp/core.log
+#log-debug=/var/log/accel-ppp/debug.log
 thread-count=4
 
 [common]
@@ -43,11 +44,14 @@ thread-count=4
 #single-session-ignore-case=0
 #sid-case=upper
 #sid-source=seq
+#seq-file=/var/lib/accel-ppp/seq
 #max-sessions=1000
 #max-starting=0
+#session-timeout=0
 #check-ip=0
 #nl-snd-buffer=32768
 #nl-rcv-buffer=1048576
+#netns-run-dir=/var/run/netns
 
 [ppp]
 verbose=1
@@ -57,7 +61,14 @@ mru=1400
 #accomp=deny
 #pcomp=deny
 #ccp=0
+#ccp-max-configure=3
 #mppe=require
+#timeout=3
+#max-configure=10
+#max-failure=10
+#max-terminate=2
+#max-mtu=1500
+#check-ip=0
 ipv4=require
 ipv6=deny
 ipv6-intf-id=0:0:0:1
@@ -79,7 +90,14 @@ unit-cache=1
 
 [pptp]
 verbose=1
+#bind=0.0.0.0
+#port=1723
 #echo-interval=30
+#echo-failure=3
+#timeout=5
+#mppe=allow
+#ppp-max-mtu=1436
+#session-timeout=0
 #ip-pool=pptp
 #ipv6-pool=pptp
 #ipv6-pool-delegate=pptp
@@ -89,16 +107,23 @@ verbose=1
 verbose=1
 #ac-name=xxx
 #service-name=yyy
+#accept-any-service=0
+#accept-blank-service=0
 #pado-delay=0
 #pado-delay=0,100:100,200:200,-1:500
 called-sid=mac
 #tr101=1
 #padi-limit=0
+#mac-filter=/path/to/mac-filter,allow
+#mppe=allow
+#session-timeout=0
 #ip-pool=pppoe
 #ipv6-pool=pppoe
 #ipv6-pool-delegate=pppoe
 #ifname=pppoe%d
+#ifname-in-sid=0
 #sid-uppercase=0
+#cookie-timeout=5
 #vlan-mon=eth0,10-200
 #vlan-timeout=60
 #vlan-name=%I.%N
@@ -107,6 +132,8 @@ interface=eth0
 
 [l2tp]
 verbose=1
+#bind=0.0.0.0
+#port=1701
 #dictionary=/usr/local/share/accel-ppp/l2tp/dictionary
 #hello-interval=60
 #timeout=60
@@ -117,8 +144,14 @@ verbose=1
 #host-name=accel-ppp
 #dir300_quirk=0
 #secret=
+#hide-avps=0
 #dataseq=allow
 #reorder-timeout=0
+#use-ephemeral-ports=0
+#ppp-max-mtu=1420
+#mppe=allow
+#session-timeout=0
+#avp_permissive=0
 #ip-pool=l2tp
 #ipv6-pool=l2tp
 #ipv6-pool-delegate=l2tp
@@ -126,6 +159,8 @@ verbose=1
 
 [sstp]
 verbose=1
+#bind=0.0.0.0
+#port=443
 #cert-hash-proto=sha1,sha256
 #cert-hash-sha1=
 #cert-hash-sha256=
@@ -142,6 +177,10 @@ verbose=1
 #http-error=allow
 #timeout=60
 #hello-interval=60
+#ppp-max-mtu=1452
+#sndbuf=0
+#rcvbuf=0
+#session-timeout=0
 #ip-pool=sstp
 #ipv6-pool=sstp
 #ipv6-pool-delegate=sstp
@@ -151,6 +190,7 @@ verbose=1
 verbose=1
 username=ifname
 #password=username
+#netmask=24
 lease-time=600
 #renew-time=300
 #rebind-time=525
@@ -160,6 +200,7 @@ max-lease-time=3600
 #l4-redirect-ipset=l4
 #l4-redirect-on-reject=300
 #l4-redirect-ip-pool=pool1
+#noauth=0
 shared=0
 ifcfg=1
 mode=L2
@@ -169,7 +210,12 @@ start=dhcpv4
 #proxy-arp=0
 #nat=0
 #proto=100
+#src=192.0.2.1
 #relay=10.10.10.10
+#relay-timeout=3
+#relay-retransmit=3
+#agent-remote-id=accel-ppp
+#link-selection=0.0.0.0
 #vendor=Custom
 #weight=0
 #attr-dhcp-client-ip=DHCP-Client-IP-Address
@@ -186,6 +232,7 @@ start=dhcpv4
 #attr-l4-redirect-ipset=l4-redirect
 #lua-file=/etc/accel-ppp.lua
 #offer-delay=0,100:100,200:200,-1:1000
+#offer-timeout=10
 #vlan-mon=eth0,10-200
 #vlan-timeout=60
 #vlan-name=%I.%N
@@ -197,6 +244,8 @@ start=dhcpv4
 #soft-terminate=0
 #check-mac-change=1
 #calling-sid=mac
+#ipv6=0
+#check-ip=0
 #local-net=192.168.0.0/16
 interface=eth0
 
@@ -221,6 +270,10 @@ dae-server=127.0.0.1:3799,testing123
 verbose=1
 #timeout=3
 #max-try=3
+#req-limit=0
+#fail-timeout=0
+#max-fail=10
+#interim-verbose=0
 #acct-timeout=120
 #acct-delay-time=0
 #acct-delay-start=0
@@ -230,7 +283,10 @@ verbose=1
 #default-realm=
 #strip-realm=0
 #attr-tunnel-type=My-Tunnel-Type
+#sid-in-auth=0
 #nas-port-id-in-req=1
+#bind=0.0.0.0
+#require-nas-identification=0
 blast-protection=1
 
 [client-ip-range]
@@ -267,6 +323,8 @@ level=3
 
 [log-pgsql]
 conninfo=user=log
+#connect-inteval=5
+#log-query=insert into log (timestamp, username, sessionid, msg) values ($1, $2, $3, $4)
 log-table=log
 
 [pppd-compat]
@@ -286,6 +344,10 @@ gw-ip-address=192.168.100.1
 
 [shaper]
 #attr=Filter-Id
+#vendor=Cisco
+#attr-down=PPPD-Downstream-Speed
+#attr-up=PPPD-Upstream-Speed
+#burst-factor=0.1
 #down-burst-factor=0.1
 #up-burst-factor=1.0
 #latency=50
@@ -310,6 +372,8 @@ verbose=1
 telnet=127.0.0.1:2000
 tcp=127.0.0.1:2001
 #password=123
+#prompt=accel-ppp
+#history-file=/var/lib/accel-ppp/cli-history
 #sessions-columns=ifname,username,ip,ip6,ip6-dp,type,state,uptime,uptime-raw,calling-sid,called-sid,sid,comp,inbound-if,service-name,rx-bytes,tx-bytes,rx-bytes-raw,tx-bytes-raw,rx-pkts,tx-pkts,netns,vrf
 
 [snmp]
@@ -327,6 +391,8 @@ timeout=60
 #format=prometheus
 #address=127.0.0.1:8080
 #allowed_ips=["127.0.0.1/32"]
+#read_timeout=5
+#max_clients=64
 
 [ipv6-pool]
 #gw-ip6-address=fc00:0:1::1
@@ -347,9 +413,29 @@ delegate=fc00:3::/36,48,name=pool4,next=pool3
 #fc00:1::3
 #dnssl=suffix1.local.net
 #dnssl=suffix2.local.net.
+#lifetime=600
 
 [ipv6-dhcp]
 verbose=1
 pref-lifetime=604800
 valid-lifetime=2592000
 route-via-gw=1
+#aftr-gw=aftr.example.net
+#server-id=0:0:0:1
+
+[ipv6-nd]
+#MaxRtrAdvInterval=600
+#MinRtrAdvInterval=198
+#MaxInitialRtrAdvCount=5
+#MaxInitialRtrAdvInterval=3
+#AdvManagedFlag=0
+#AdvOtherConfigFlag=0
+#AdvLinkMTU=0
+#AdvReachableTime=0
+#AdvRetransTimer=0
+#AdvCurHopLimit=64
+#AdvDefaultLifetime=1800
+#AdvValidLifetime=2592000
+#AdvPreferredLifetime=604800
+#AdvOnLinkFlag=1
+#AdvAutonomousFlag=1
diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5
index 74add8d1..fc9c0f9b 100644
--- a/accel-pppd/accel-ppp.conf.5
+++ b/accel-pppd/accel-ppp.conf.5
@@ -49,6 +49,14 @@ PPPoE discovery stage handling module.
 .br
 SSTP controlling connection handling module.
 .TP
+.BI l2tp
+.br
+L2TPv2 connection handling module.
+.TP
+.BI ipoe
+.br
+IPoE connection handling module.
+.TP
 .BI auth_pap
 PAP authentication module.
 .TP
@@ -65,6 +73,10 @@ Microsoft CHAP (version 2) authentication module.
 .br
 RADIUS interaction module.
 .TP
+.BI chap-secrets
+.br
+Authentication and address assignment from a pppd-compatible chap-secrets file.
+.TP
 .BI ippool
 .br
 IPv4 address assigning module.
@@ -77,6 +89,26 @@ IPv6 address assigning module.
 .br
 IPv6 DHCP module.
 .TP
+.BI ipv6_nd
+.br
+IPv6 Neighbor Discovery and Router Advertisement module.
+.TP
+.BI shaper
+.br
+Traffic shaping and policing module.
+.TP
+.BI net-snmp
+.br
+SNMP agent module. It must be built with NETSNMP enabled.
+.TP
+.BI logwtmp
+.br
+Module that writes session records to wtmp.
+.TP
+.BI metrics
+.br
+HTTP statistics endpoint module.
+.TP
 .BI sigchld
 Helper module to manage child processes, required by pppd_compat
 .TP
@@ -91,6 +123,9 @@ Configuration of core module
 .BI "log-error=" path
 Path to file for core module error logging.
 .TP
+.BI "log-debug=" path
+Path to file for core module debug logging.
+.TP
 .BI "thread-count=" n
 number of working threads, optimal - number of processors/cores
 .SH [common]
@@ -116,7 +151,7 @@ Specifies whether accel-ppp should ignore the case when comparing username withi
 Specifies in which case generate session identifier (default lower).
 .TP
 .BI "sid-source=" urandom|seq
-Specifies method assign session id (default urandom).
+Specifies method used to assign session IDs (default seq).
 .br
 .B urandom
 Assign session id by random method
@@ -143,6 +178,9 @@ Specifies netlink maximum send buffer size (SO_SNDBUF option) (default 32768).
 .BI "nl-rcv-buffer=" n
 Specifies netlink maximum receive buffer size (SO_RCVBUF option) (default 1048576).
 .TP
+.BI "netns-run-dir=" path
+Directory containing named network namespace handles (default /var/run/netns).
+.TP
 .BI "session-timeout=" n
 Specifies max sessions time in seconds, after this time session will be terminated.
 .br
@@ -185,7 +223,10 @@ Protocol field compression negotiation.
 Disable CCP negotiation if this parameter is zero.
 .TP
 .BI "ccp-max-configure=" n
-Specifies the maximum number of CCP Configure-Request packets sent without receiving a valid Configure-Ack, Configure-Nak or Configure-Reject before assuming the peer is unable to respond (default 10).
+Specifies the maximum number of CCP Configure-Request packets sent without receiving a valid Configure-Ack, Configure-Nak or Configure-Reject before assuming the peer is unable to respond (default 3).
+.TP
+.BI "timeout=" n
+Specifies the timeout, in seconds, used by PPP finite-state machines (default 3).
 .TP
 .BI "mppe=" require|prefer|deny
 Specifies mppe negotiation preference.
@@ -540,6 +581,81 @@ If enabled accel-ppp will terminate session when detects change of mac address o
 .TP
 .BI "calling-sid=" mac|ip
 Specifies value of Calling-Station-Id attribute.
+.TP
+.BI "netmask=" n
+Specifies the IPv4 prefix length assigned to IPoE sessions (1 through 32).
+.TP
+.BI "nat=" 0|1
+Marks IPoE sessions as requiring NAT.
+.TP
+.BI "noauth=" 0|1
+Authorizes IPoE sessions without consulting a password database. The default is 0.
+.TP
+.BI "check-ip=" 0|1
+Overrides the common duplicate-address check for IPoE sessions.
+.TP
+.BI "ipv6=" 0|1
+Enables IPv6 on IPoE interfaces by default.
+.TP
+.BI "src=" x.x.x.x
+Specifies the source address used by the IPoE service.
+.TP
+.BI "relay-timeout=" n
+Specifies the DHCP relay reply timeout in seconds (default 3).
+.TP
+.BI "relay-retransmit=" n
+Specifies the maximum number of DHCP relay retransmissions (default 3).
+.TP
+.BI "ip-pool=" pool_name
+Specifies the default IPv4 address pool.
+.TP
+.BI "ipv6-pool=" pool_name
+Specifies the default IPv6 address pool.
+.TP
+.BI "ipv6-pool-delegate=" pool_name
+Specifies the default delegated IPv6 prefix pool.
+.TP
+.BI "lua-file=" path
+Loads the Lua file that supplies IPoE Lua hooks. Lua support must be built in.
+.TP
+.BI "vendor=" vendor
+Specifies the RADIUS vendor used when resolving the IPoE attribute options below.
+.TP
+.BI "attr-dhcp-client-ip=" attribute
+Specifies the RADIUS attribute containing the DHCP client address.
+.TP
+.BI "attr-dhcp-router-ip=" attribute
+Specifies the RADIUS attribute containing the DHCP router address.
+.TP
+.BI "attr-dhcp-mask=" attribute
+Specifies the RADIUS attribute containing the DHCP subnet mask.
+.TP
+.BI "attr-dhcp-lease-time=" attribute
+Specifies the RADIUS attribute containing the DHCP lease time.
+.TP
+.BI "attr-dhcp-renew-time=" attribute
+Specifies the RADIUS attribute containing the DHCP renewal time.
+.TP
+.BI "attr-dhcp-rebind-time=" attribute
+Specifies the RADIUS attribute containing the DHCP rebinding time.
+.TP
+.BI "attr-dhcp-opt82=" attribute
+Specifies the RADIUS attribute used for the complete DHCP Option 82 value.
+.TP
+.BI "attr-dhcp-opt82-remote-id=" attribute
+Specifies the RADIUS attribute used for the Option 82 remote ID.
+.TP
+.BI "attr-dhcp-opt82-circuit-id=" attribute
+Specifies the RADIUS attribute used for the Option 82 circuit ID.
+.TP
+.BI "attr-l4-redirect=" attribute
+Specifies the RADIUS attribute that enables Layer-4 redirection.
+.TP
+.BI "attr-l4-redirect-table=" attribute
+Specifies the RADIUS attribute containing the redirection routing-table ID.
+.TP
+.BI "attr-l4-redirect-ipset=" attribute
+Specifies the RADIUS attribute containing the redirection ipset name.
 .SH [dns]
 .TP
 .BI "dns1=" x.x.x.x
@@ -561,6 +677,9 @@ Specifies IPv6 DNS to be sent to peer. You may specify up to 3 dns options.
 .TP
 .BI "dnssl=" name
 Specify DNS Search List. You may specify multiple dns and dnssl options.
+.TP
+.BI "lifetime=" n
+Specifies the RDNSS and DNSSL lifetime advertised by the ipv6_nd module.
 .SH [client-ip-range]
 You have to explicitly specify range of ip address from which clients can connect to server in form:
 .br
@@ -610,6 +729,15 @@ sessions. Default value is 1436.
 Specifies max sessions time in seconds, after this time session will be terminated.
 .br
 This timeout can be redefined with radius attribute Session-Timeout. 0 value means infinite timeout.
+.TP
+.BI "ip-pool=" pool_name
+Specifies the name of the IPv4 pool used by PPTP sessions.
+.TP
+.BI "ipv6-pool=" pool_name
+Specifies the name of the IPv6 pool used by PPTP sessions.
+.TP
+.BI "ipv6-pool-delegate=" pool_name
+Specifies the name of the delegated IPv6 prefix pool used by PPTP sessions.
 .SH [pppoe]
 .br
 Configuration of PPPoE module.
@@ -653,9 +781,11 @@ By default vlan-name=%I.%N.
 .TP
 .BI "ac-name=" ac-name
 Specifies AC-Name tag value. If absent tag will not be sent.
+The compatibility alias AC-Name=ac-name is also accepted.
 .TP
 .BI "service-name=" service-name
 Specifies Service-Name to respond. If absent any Service-Name is acceptable and client's Service-Name will be sent back.
+The compatibility alias Service-Name=service-name is also accepted.
 .TP
 .BI "accept-any-service=" n
 If service-name specified still will answer with service names, but accepts any service name in PADR request. Useful 
@@ -667,6 +797,7 @@ Useful when needs to allow only Service-Names described in the config and also b
 .TP
 .BI "pado-delay=" delay[,delay1:count1[,delay2:count2[,...]]]
 Specifies delays (also in condition of connection count) to send PADO (ms).
+The compatibility alias PADO-Delay=delay is also accepted.
 Last delay in list may be -1 which means don't accept new connections.
 List have to be sorted by count key.
 .TP
@@ -732,6 +863,9 @@ Specifies the timeout in seconds for the PPPoE cookie (PADO/PADR stage).
 .br
 Configuration of L2TP module.
 .TP
+.BI "dictionary=" path
+Specifies an alternate L2TP attribute dictionary.
+.TP
 .BI "bind=" x.x.x.x
 Specifies IP address to bind.
 .TP
@@ -882,6 +1016,9 @@ This is useful when accel-ppp is running behind a load balancer (like HAProxy or
 - \fBCalling-Station-Id\fR attribute in RADIUS and logs.
 .br
 .TP
+.BI "ssl=" 0|1
+Deprecated compatibility option that enables legacy SSL mode. Use accept=ssl instead.
+.TP
 .BI "ssl-protocol=" ssl2|ssl3|tls1|tls1.1|tls1.2|tls1.3
 Specifies the enabled SSL/TLS protocols supported by OpenSSL library.
 .TP
@@ -915,6 +1052,9 @@ If not set, secret key will be loaded from the
 .BI pemfile
 parameter.
 .TP
+.BI "ssl-ca-file=" file
+Specifies a CA bundle loaded into the SSTP TLS context.
+.TP
 .BI "cert-hash-proto=" sha1,sha256
 Specifies hashing methods that can be used to compute the Compound MAC in the Crypto Binding attribute.
 Default is sha1 and sha256 both.
@@ -981,6 +1121,9 @@ This timeout can be redefined with radius attribute Session-Timeout. 0 value mea
 .br
 Configuration of RADIUS module.
 .TP
+.BI "dictionary=" path
+Specifies an alternate RADIUS dictionary.
+.TP
 .BI "nas-identifier=" identifier
 Specifies value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests.
 .TP
@@ -1059,6 +1202,18 @@ Timeout to wait response from server (sec)
 .BI "max-try=" n
 Specifies number of tries to send Access-Request/Accounting-Request queries.
 .TP
+.BI "req-limit=" n
+Specifies the global limit of simultaneous requests per RADIUS server. Zero means unlimited.
+.TP
+.BI "fail-timeout=" n
+Specifies how long, in seconds, an unresponsive RADIUS server remains unavailable.
+.TP
+.BI "max-fail=" n
+Specifies the number of consecutive unanswered requests before a RADIUS server is marked unavailable.
+.TP
+.BI "fail-time=" n
+Deprecated alias for fail-timeout.
+.TP
 .BI "acct-timeout=" n
 Specifies timeout of accounting interim update.
 .TP
@@ -1117,6 +1272,12 @@ Path to file to write emergency messages.
 .BI "log-fail-file=" file
 Path to file to write authentication failed session log.
 .TP
+.BI "log-debug=" file
+Path to file to write debug messages.
+.TP
+.BI "color=" 0|1
+Enables ANSI color sequences in file log output.
+.TP
 .BI "log-tcp=" x.x.x.x:port
 Send logs to specified host.
 .TP
@@ -1165,6 +1326,14 @@ Configuration of log_pgsql module.
 .BI "conninfo=" conninfo
 Conninfo to connect to PostgreSQL server.
 .TP
+.BI "connect-inteval=" n
+Specifies the PostgreSQL reconnect interval in seconds (default 5).
+The option name intentionally preserves its historical spelling.
+.TP
+.BI "log-query=" query
+Specifies a custom parameterized INSERT query. Parameters $1 through $4 are
+timestamp, username, session ID, and message respectively.
+.TP
 .BI "log-table=" table
 Table to send log messages. Table must contain following field:
 .br
@@ -1179,7 +1348,7 @@ text
 .br
 .B msg
 text
-.SH [pppd_compat]
+.SH [pppd-compat]
 .br
 Configuration of pppd_compat module.
 .TP
@@ -1200,6 +1369,10 @@ Prefix of radattr files (for example /var/run/radattr, resulting files will be /
 .TP
 .BI "verbose=" n
 If specified and greater than zero pppd_module will produce verbose logging.
+.TP
+.BI "fork-limit=" n
+Limits the number of concurrently running compatibility scripts. The default is
+twice the number of online processors.
 .SH [chap-secrets]
 .br
 Configuration of chap-secrets module.
@@ -1268,8 +1441,71 @@ If attribute is vendor-specific then specify vendor name in this option.
 Note: overlapping ranges in different pools are not de-duplicated. If two pools cover the same address, that IP can be allocated from each pool independently. Use non-overlapping ranges (or a single pool with next= chaining) to avoid duplicate assignments.
 .SH [ipv6-dhcp]
 .TP
+.BI "verbose=" 0|1
+Enables verbose DHCPv6 logging.
+.TP
+.BI "pref-lifetime=" n
+Specifies the preferred address and prefix lifetime in seconds (default 604800).
+.TP
+.BI "valid-lifetime=" n
+Specifies the valid address and prefix lifetime in seconds (default 2592000).
+.TP
+.BI "route-via-gw=" 0|1
+Controls whether delegated IPv6 routes are installed through the session gateway (default 1).
+.TP
+.BI "server-id=" x:x:x:x
+Specifies the four 16-bit hexadecimal components used as the DHCPv6 server identifier.
+.TP
 .BI "aftr-gw=" name
 Specifies the AFTR-Name option value to be returned on DHCPv6 replies upon request from the client.
+.SH [ipv6-nd]
+.br
+Configuration of IPv6 Neighbor Discovery and Router Advertisements.
+.TP
+.BI "MaxRtrAdvInterval=" n
+Maximum unsolicited Router Advertisement interval in seconds (default 600).
+.TP
+.BI "MinRtrAdvInterval=" n
+Minimum unsolicited Router Advertisement interval in seconds (default one third of MaxRtrAdvInterval).
+.TP
+.BI "MaxInitialRtrAdvCount=" n
+Maximum number of initial Router Advertisements (default 5).
+.TP
+.BI "MaxInitialRtrAdvInterval=" n
+Maximum interval between initial Router Advertisements in seconds (default 3).
+.TP
+.BI "AdvManagedFlag=" 0|1
+Sets the Managed Address Configuration flag. By default it follows whether ipv6_dhcp is loaded.
+.TP
+.BI "AdvOtherConfigFlag=" 0|1
+Sets the Other Configuration flag. By default it follows whether ipv6_dhcp is loaded.
+.TP
+.BI "AdvLinkMTU=" n
+Specifies the MTU advertised in Router Advertisements. Zero omits the MTU option.
+.TP
+.BI "AdvReachableTime=" n
+Specifies the advertised reachable time in milliseconds.
+.TP
+.BI "AdvRetransTimer=" n
+Specifies the advertised retransmission timer in milliseconds.
+.TP
+.BI "AdvCurHopLimit=" n
+Specifies the advertised current hop limit (default 64).
+.TP
+.BI "AdvDefaultLifetime=" n
+Specifies the router lifetime in seconds (default three times MaxRtrAdvInterval).
+.TP
+.BI "AdvValidLifetime=" n
+Specifies the advertised prefix valid lifetime in seconds (default 2592000).
+.TP
+.BI "AdvPreferredLifetime=" n
+Specifies the advertised prefix preferred lifetime in seconds (default 604800).
+.TP
+.BI "AdvOnLinkFlag=" 0|1
+Sets the advertised prefix on-link flag (default 1).
+.TP
+.BI "AdvAutonomousFlag=" 0|1
+Sets the autonomous address-configuration flag. By default it is disabled when ipv6_dhcp is loaded and enabled otherwise.
 .SH [ipv6-pool]
 .br
 Configuration of ipv6pool module.
@@ -1350,7 +1586,7 @@ after
 .BI "read_timeout=" seconds
 Maximum time a client may take to deliver a complete HTTP request.
 Connections that have not produced a terminating
-.BR \(dq\\r\\n\\r\\n\(dq
+.B \(dq\er\en\er\en\(dq
 within this deadline are closed. Defaults to 5 seconds. Set to
 .B 0
 to disable the deadline.
@@ -1378,6 +1614,9 @@ This module controls shaper.
 .BI "attr=" name
 Specifies which radius attribute contains rate information. Default - Filter-ID.
 .TP
+.BI "vendor=" vendor
+Specifies the RADIUS vendor for vendor-specific rate attributes.
+.TP
 .BI "attr-up=" name
 .TP
 .BI "attr-down=" name
@@ -1397,6 +1636,9 @@ Specifies latency (in milliseconds) parameter of tbf qdisc.
 .BI "mpu=" n
 Specifies mpu parameter of tbf qdisc and policer.
 .TP
+.BI "mtu=" n
+Specifies the MTU used in shaper calculations.
+.TP
 .BI "r2q=" n
 Specifies r2q parameter of root htb qdisc.
 .TP
@@ -1406,6 +1648,12 @@ Specifies quantum parameter of htb classes.
 .BI "moderate-quantum=" 1|0
 If fixed quantum is not specified and this option is specified then shaper module will check for quantum value is valid (in range 1000-200000).
 .TP
+.BI "cburst=" n
+Specifies the HTB class ceil burst in bytes (default 1534).
+.TP
+.BI "ifb=" ifname
+Specifies the IFB interface used for upstream HTB shaping. Without it, upstream HTB falls back to policing.
+.TP
 .BI "fwmark=" n
 Specifies the fwmark for traffic that won't be passed through shaper.
 .TP
@@ -1428,6 +1676,9 @@ Due to accel-ppp operates with rates in kilobit basis if you send rates in diffe
 .TP
 .BI "rate-limit=" download_speed/upload_speed
 Specifies, should accel-ppp set default rate-limit for clients. Clients rate-limit will be overwritten by RADIUS filter attributes or chap-secrets rate-limit params.
+.TP
+.BI "verbose=" 0|1
+Enables verbose shaper logging.
 .SH [cli]
 .br
 Configuration of the command line interface.
@@ -1537,3 +1788,12 @@ command (defaults to
 - virtual routing and forwarding
 .br
 Invalid column names are silently discarded.
+.SH [snmp]
+.br
+Configuration of the optional net-snmp module.
+.TP
+.BI "master=" 0|1
+Runs as an AgentX subagent when set to 0 (the default), or as the SNMP master agent when set to 1.
+.TP
+.BI "agent-name=" name
+Specifies the AgentX subagent name (default accel-ppp).