From 4a276028a09a40854271c17ddb8057d0b69da8ee Mon Sep 17 00:00:00 2001 From: Denys Fedoryshchenko Date: Mon, 1 Dec 2025 02:58:35 +0200 Subject: l2tp: Add missing documentation Signed-off-by: Denys Fedoryshchenko --- accel-pppd/accel-ppp.conf.5 | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index c9666206..f40a4ac4 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -788,6 +788,21 @@ as a template, i.e l2tp%d => l2tp0. Specifies max sessions time in seconds, after this time session will be terminated. .br This timeout can be redefined with radius attribute Session-Timeout. 0 value means infinite timeout. +.TP +.BI "avp_permissive=" 0|1 +If set to 1, ignore the Mandatory (M) bit in unknown Attribute-Value Pairs (AVPs) instead of terminating the connection. +.TP +.BI "dir300_quirk=" 0|1 +If set to 1, enables a workaround for D-Link DIR-300 routers that send packets with Tunnel ID 0. +.TP +.BI "ip-pool=" pool_name +Specifies the name of the IPv4 pool to use for allocating client addresses. +.TP +.BI "ipv6-pool=" pool_name +Specifies the name of the IPv6 pool to use for allocating client addresses. +.TP +.BI "ipv6-pool-delegate=" pool_name +Specifies the name of the IPv6 prefix delegation pool to use. .SH [sstp] .br Configuration of SSTP module. -- cgit v1.2.3 From 2783aef226a61ee29fab172a7dbdb9c54f3d4810 Mon Sep 17 00:00:00 2001 From: Denys Fedoryshchenko Date: Mon, 1 Dec 2025 03:00:21 +0200 Subject: pppoe: Add missing documentation Signed-off-by: Denys Fedoryshchenko --- accel-pppd/accel-ppp.conf.5 | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index f40a4ac4..e97ca289 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -692,6 +692,24 @@ as a template, i.e pppoe%d => pppoe0. Specifies max sessions time in seconds, after this time session will be terminated. .br This timeout can be redefined with radius attribute Session-Timeout. 0 value means infinite timeout. +.TP +.BI "ip-pool=" pool_name +Specifies the name of the IPv4 pool to use for allocating client addresses. +.TP +.BI "ipv6-pool=" pool_name +Specifies the name of the IPv6 pool to use for allocating client addresses. +.TP +.BI "ipv6-pool-delegate=" pool_name +Specifies the name of the IPv6 prefix delegation pool to use. +.TP +.BI "ifname-in-sid=" 0|1 +If set to 1, the interface name is included in the Session ID. +.TP +.BI "sid-uppercase=" 0|1 +If set to 1, the Session ID is generated in uppercase. +.TP +.BI "cookie-timeout=" n +Specifies the timeout in seconds for the PPPoE cookie (PADO/PADR stage). .SH [l2tp] .br Configuration of L2TP module. -- cgit v1.2.3 From a1920c35a4b99c2844b9ed99800a22a6c66252ee Mon Sep 17 00:00:00 2001 From: Denys Fedoryshchenko Date: Mon, 1 Dec 2025 03:04:27 +0200 Subject: ppp: Add missing documentation, improve clarity Signed-off-by: Denys Fedoryshchenko --- accel-pppd/accel-ppp.conf.5 | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index e97ca289..67b0d3d3 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -184,6 +184,9 @@ Protocol field compression negotiation. .BI "ccp=" n Disable CCP negotiation if this parameter is zero. .TP +.BI "ccp-max-configure=" n +Specifies the maximum number of CCP Configure-Request packets sent without receiving a valid Configure-Ack, Configure-Nak or Configure-Reject before assuming the peer is unable to respond (default 10). +.TP .BI "mppe=" require|prefer|deny Specifies mppe negotiation preference. .br @@ -199,6 +202,21 @@ Specifies mppe negotiation preference. Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute. .TP +.BI "max-configure=" n +Specifies the maximum number of LCP/IPCP Configure-Request packets sent without receiving a valid Configure-Ack, Configure-Nak or Configure-Reject before assuming the peer is unable to respond (default 10). +.TP +.BI "max-failure=" n +Specifies the maximum number of LCP/IPCP Configure-Nak returned before starting to send Configure-Reject (default 10). +.TP +.BI "max-terminate=" n +Specifies the maximum number of Terminate-Request packets sent without receiving a Terminate-Ack before assuming the peer has disconnected (default 2). +.TP +.BI "max-mtu=" n +Specifies the absolute maximum MTU value that can be negotiated. +.TP +.BI "check-ip=" 0|1 +Specifies whether to check if the assigned IP address is already in use by another session (overrides [common] check-ip for PPP sessions). +.TP .BI "ipv4=" deny|allow|prefer|require Specify IPv4 (IPCP) negotiation algorithm: .br -- cgit v1.2.3 From 63292b5ae0c1cd2044d42af5484c9a3bc6ba3c1d Mon Sep 17 00:00:00 2001 From: Denys Fedoryshchenko Date: Mon, 1 Dec 2025 03:06:34 +0200 Subject: radius: Improve documentation Signed-off-by: Denys Fedoryshchenko --- accel-pppd/accel-ppp.conf.5 | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index 67b0d3d3..5a80c160 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -135,7 +135,7 @@ Specifies maximum concurrent session attempts which server may processed (defaul .TP .BI "check-ip=" 0|1 Specifies whether accel-ppp should check if IP already assigned to other client interface (default 0). -Check is global (not VRF-aware); with check-ip=1 the same IPv4/IPv6 address will be rejected even if sessions are in different VRFs/netns. With check-ip=0 overlapping addresses can be assigned (useful for isolated VRFs, but take care with overlapping pools). +Check is global (not VRF-aware); with check-ip=1 the same IPv4/IPv6 address will be rejected even if sessions are in different VRFs/netns. With check-ip=0 overlapping addresses can be assigned (useful for isolated VRFs, but take care with overlapping pools). This setting can be overridden by module-specific 'check-ip' options (e.g., in the [ppp] section). .TP .BI "nl-snd-buffer=" n Specifies netlink maximum send buffer size (SO_SNDBUF option) (default 32768). @@ -1061,14 +1061,20 @@ Specifies should accel-ppp generate and send Acct-Session-Id on Access-Request p .TP .BI "nas-port-id-in-req=" 0|1 Specifies should accel-ppp send NAS-Port-Id on Access-Request and Accounting-Request packets (default 1). -.SH [log] -.br -Configuration of log and log_file modules. +.TP +.BI "bind=" x.x.x.x +Specifies the source IP address for outgoing RADIUS packets. +.TP +.BI "require-nas-identification=" 0|1 +If enabled, checks that the NAS-Identifier or NAS-IP-Address in DM/CoA requests matches the server's configuration. .TP .BI "blast-protection=" 0|1 If this option is given and .B 1 is specified then radius module will include Message-Authenticator attribute in Access-Request packets. +.SH [log] +.br +Configuration of log and log_file modules. .TP .BI "log-file=" file Path to file to write general log. -- cgit v1.2.3