diff options
Diffstat (limited to 'accel-pppd')
-rw-r--r-- | accel-pppd/accel-ppp.conf | 16 | ||||
-rw-r--r-- | accel-pppd/accel-ppp.conf.5 | 66 |
2 files changed, 78 insertions, 4 deletions
diff --git a/accel-pppd/accel-ppp.conf b/accel-pppd/accel-ppp.conf index 31932420..76e3dee6 100644 --- a/accel-pppd/accel-ppp.conf +++ b/accel-pppd/accel-ppp.conf @@ -23,7 +23,7 @@ thread-count=4 [ppp] verbose=1 -min-mtu=1000 +min-mtu=1280 mtu=1400 mru=1400 #ccp=0 @@ -31,6 +31,11 @@ mru=1400 #check-ip=0 #single-session=replace #mppe=require +ipv4=require +ipv6=allow +ipv6-intf-id=0:0:0:1 +ipv6-peer-intf-id=0:0:0:2 +ipv6-accept-peer-intf-id=1 [lcp] echo-interval=30 @@ -42,6 +47,7 @@ verbose=1 [pppoe] interface=eth0 +interface=eth1 #ac-name=xxx #service-name=yyy #pado-delay=0 @@ -63,6 +69,11 @@ verbose=1 #dns1=172.16.0.1 #dns2=172.16.1.1 +[dnsv6] +#fc00:1::1 +#fc00:1::2 +#fc00:1::3 + [radius] #dictionary=/usr/local/share/accel-ppp/radius/dictionary nas-identifier=accel-ppp @@ -89,6 +100,9 @@ gw-ip-address=192.168.0.1 192.168.3.1-255 192.168.4.0/24 +[ipv6-pool] +fc00:0:1::/48,64 + [log] log-file=/var/log/accel-ppp/accel-ppp.log log-emerg=/var/log/accel-ppp/emerg.log diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index aee13547..6ecbd5a6 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -1,4 +1,4 @@ -.TH ACCEL-PPP.CONF 5 "6 October 2010" +.TH ACCEL-PPP.CONF 5 "23 August 2011" .SH NAME .B accel-ppp.conf - ACCEL-PPP VPN daemon configuration @@ -61,7 +61,11 @@ RADIUS interaction module. .TP .BI ippool .br -IP address assigning module. +IPv4 address assigning module. +.TP +.BI ipv6pool +.br +IPv6 address assigning module. .TP .BI sigchld Helper module to manage child processes, required by pppd_compat @@ -97,7 +101,6 @@ Prefered MRU. .BI "ccp=" n Disable CCP negotiation if this parameter is zero. .TP -.TP .BI "sid-case=" upper|lower Specifies in which case generate session identifier (default lower). .TP @@ -130,6 +133,39 @@ Specifies mppe negotioation preference. Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute. .TP +.BI "ipv4=" deny|allow|prefere|require +Specify IPv4 (IPCP) negotioation algorithm: +.br +.B deny +- don't negotiate IPv4. +.br +.B allow +- negotiate IPv4 only if client requests. +.br +.B prefere +- ask client for IPv4 negotiation, don't fail if he rejects. +.br +.B require +- require IPv4 negotiation. +.TP +.BI "ipv6=" deny|allow|prefere|require +Parameters are same as above. +.TP +.BI "ipv6-intf-id=" x:x:x:x|random +Specify fixed or random interface identifier for IPv6. +.TP +.BI "ipv6-peer-intf-id=" x:x:x:x|random|ipv4|calling-sid +Specify peer interface identifier for IPv6. +.br +.B ipv4 +- calculate interface identifier from IPv4 address, for example 192:168:0:1. +.br +.B calling-sid +- calculate interface identifier from Calling-Station-Id. +.TP +.BI "ipv6-accept-peer-intf-id=" 0|1 +Specify whether to accept peer's interface identifier. +.TP .SH [lcp] .br PPP LCP module configuration @@ -150,6 +186,11 @@ Specifies primary DNS to be sent to peer. .BI "dns2=" x.x.x.x Specifies secondary DNS to be sent to peer. .TP +.SH [dnsv6] +.TP +.BI "dns=" IPv6_address +Specifies IPv6 DNS to be sent to peer. You may specify up to 3 dns options. +.TP .SH [client-ip-range] You have to explicitly specify range of ip address from which clients can connect to server in form: .br @@ -433,3 +474,22 @@ Specifies range of remote address of ppp interfaces if form: .TP .BI "x.x.x.x/mask or x.x.x.x-y" Also specifies range of remote address of ppp interfaces. +.TP +.SH [ipv6-pool] +.br +Configuration of ipv6pool module. +.br +Format of each row is +.br +.B ipv6prefix/maks,prefix_len +for example: +.br +.B fc00:0:1::/48,64 +- specifies pool of address by dividing prefix fc00:0:1::/48 to networks with 64 prefix len, e.g: +.br +fc00:0:1:0::/64 +.br +fc00:0:1:1::/64 +.br +... +fc00:0:1:ffff::/64 |