| Age | Commit message (Collapse) | Author |
|---|
|
|
|
|
|
|
|
* ipoe: assign point-to-point addresses to non-shared physical interface (prevents route cleaning by interface renaming)
* ipoe: lua: add "vlan" field to session object
* ipoe: fixed prefix calculation from ipaddr
* ipoe: implemented ability to change ipset by CoA
* ipoe: included lua bitop library
* ipoe: implemented support for vendor specific attrbiutes
* ipoe: add client ip as route when nat=1
* shaper: fixed conditions to install limiter (may install only up or only down limiter)
* shaper: fixed bug in class id allocation procedure
* cmake: check for pcre and openssl headers are present
* implemented session count limiting
* support for openssl-1.1
* fixed connection problem with clients having nomru option
|
|
|
|
Fixed problem while connecting with clients in which mru not
negotiating lcp option is set
|
|
|
|
|
|
introduced new config option:
[ipoe]
vendor=Name
this affects to all attributes specified in attr-xxx options
|
|
new config option:
[common]
max-sessions=N
If set then accel-pppd stops reply to new connection requests if total number of sessions (active and starting) is reached specified limit.
|
|
This reverts commit e3fc927ee321ed6663d46357de0165340b792860.
|
|
this is related only for htb
|
|
new config option:
[common]
max-sessions=N
If set then accel-pppd stops reply to new connection requests if total number of sessions (active and starting) is reached specified limit.
|
|
Included bitop library http://bitop.luajit.org/index.html
It may be used to extract vlan components in username function:
function username(ses)
vid=ses:vlan()
svid=bit.rshift(vid,16)
cvid=bit.band(vid,0xffff)
...
end
|
|
For this need to send 2 attributes: L4-Redirect=1,L4-Redirect-Ipset=new-set
|
|
This reverts commit 5159276962e4305db249bbbf5eb589ec59b9e318.
|
|
|
|
|
|
|
|
|
|
resulting value is vlan | (parent_vlan << 16)
|
|
each time when accounting interim update is about to send)
|
|
|
|
down limiter)
|
|
|
|
(prevents route cleaning by interface renaming)
|
|
|
|
|
|
|
|
* general rewrite and improve ipoe/vlan_mon drivers
* ipoe: generate EUI-64 interface identifier for ipv6 addresses
* ipoe: log warning if interface was not started by vlan_mon notification
* ipoe: introduced option "start=auto"
* ipoe: translate UP session to dhcp session when dhcp request received (for shared=0 interfaces)
* ipoe: implemented starting UP session by arp request
* ipoe: log interface renaming
* pppoe: add interface name to log messages
* pppoe: implemented vlan_mon support
* pppd_compat: change mode of radattr files to 0644
* pppd_compat: check for script existance before fork
* radius: implemented handling of Framed-Route attribute
* radius: do not send NAS-Port and NAS-Port-Id if they are undefined
* radius: add Delegated-IPv6-Prefix to accounting packets
* radius: update Session-Timeout by CoA
* shaper: implemented internal class id map
* ppp: introduced unit-preallocate option
* ipv6: remove ipv6 address and routes on session termination
* vlan_mon: introduced autoclean module parameter
* iprange: implement config reload
* make termination caused by SIGTERM soft
* remove pid file on exit
* for single-session=deny make early check for duplicate username (before calling radius)
* fixed broken "noauth" mode
|
|
accel-dp will be continued in separated branch
|
|
later use
Bacause interface may not still exists in authentication phase
|
|
|
|
|
|
|
|
If set to 1 then allocate unit (interface) before authorization, so Nas-Port and Nas-Port-Id would be defined in Access-Request phase
|
|
|
|
|
|
|
|
|
|
The 'installed' bit of the allocated ipv6db_addr_t structure needs to
be initialised. This is because ap_session_ifdown() reads this bit to
know if the address or route needs to be removed from the kernel.
The 'installed' bit is set by ap_session_accounting_started() and the
ND and DHCPV6 protocol handlers, but disconnection could happen before
these steps.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
This files aren't used (and aren't even compiled) anymore.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
include/ppp_auth.h used to be a symlink to ppp/ppp_auth.h, until it was
made a copy by ebbd6f580322 ("fix typo (successed -> succeeded)").
Therefore, changes to ppp/ppp_auth.h aren't visible to files including
ppp_auth.h anymore. These files have already diverged (just a
whitespace fix for now), so let's restore the original symlink before
more changes occur.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
|
|
Hello,
small patch to avoid gcc -Wformat warnings on Debian x32 where time_t
is "long long" (64-bit signed, to be 2038 safe), not "unsigned long"
(32-bit unsigned) corresponding to "%lu" format strings.
Regards,
Marek
|
|
|
|
The kernel flag used for setting PFC is SC_COMP_PROT (SC_COMP_AC is for
Address-and-Control-Field-Compression).
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
Using a /0 prefix on an IP different from 0.0.0.0 is valid, but might
be a configuration mistake. Log warning message in this case so that
user can easily troubleshoot it.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
This is equivalent, but INADDR_BROADCAST is more descriptive.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
Move warning messages to PPTP and L2TP modules. No other module
actually uses iprange, so it's perfectly valid to disable it, or at
least to not configure any range, when PPTP and L2TP aren't used.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
