diff options
Diffstat (limited to 'accel-pppd/accel-ppp.conf.5')
| -rw-r--r-- | accel-pppd/accel-ppp.conf.5 | 55 |
1 files changed, 53 insertions, 2 deletions
diff --git a/accel-pppd/accel-ppp.conf.5 b/accel-pppd/accel-ppp.conf.5 index d9aaadb..aee1354 100644 --- a/accel-pppd/accel-ppp.conf.5 +++ b/accel-pppd/accel-ppp.conf.5 @@ -104,6 +104,32 @@ Specifies in which case generate session identifier (default lower). .BI "check-ip=" 0|1 Specifies whether accel-ppp should check if IP already assigned to other ppp interface (default 0). .TP +.BI "single-session=" replace|deny +Specifies whether accel-ppp should control sessions count. +.br +If this option is absent session count control is turned off. +If this option is +.B replace +then accel-ppp will terminate first session when second is authorized. +If this option is +.B deny +then accel-ppp will deny second session authorization. +.TP +.BI "mppe=" require|prefere|deny +Specifies mppe negotioation preference. +.br +.B require +- ask client for mppe, if it rejects drop connection +.br +.B prefere +- ask client for mppe, if it rejects don't fail. +.br +.B deny +- deny mppe. +.br +Default behavior - don't ask client for mppe, but allow it if client wants. +Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute. +.TP .SH [lcp] .br PPP LCP module configuration @@ -190,6 +216,10 @@ If this option is given and .B n is greater of zero then pppoe module will produce verbose logging. .TP +.TP +.BI "tr101=" 0|1 +Specifies whether to handle TR101 tags. +.TP .SH [l2tp] .br Configuration of L2TP module. @@ -232,10 +262,15 @@ Also DM/CoA server will bind to that address. Specifies address to use as local address of ppp interfaces if Framed-IP-Address received from RADIUS server. .TP .BI "auth-server=" x.x.x.x:port,secret -Specifies IP address, port and secret of authentication RADIUS server. +Specifies IP address, port and secret of authentication RADIUS server. (obsolete) .TP .BI "acct-server=" x.x.x.x:port,secret -Specifies IP address, port and secret of accounting RADIUS server. +Specifies IP address, port and secret of accounting RADIUS server. (obsolete) +.TP +.BI "server=" address,secret[,auth-port[,acct-port]] +Specifies IP address, ports and secret of RADIUS server. +If you want to specify only authentication or accounting server then set auth-port/acct-port to zero. +You may specify multiple radius servers. .TP .BI "dae-server=" x.x.x.x:port,secret Specifies IP address, port to bind and secret for Dynamic Authorization Extension server (DM/CoA). @@ -265,6 +300,9 @@ Specifies number of tries to send Access-Request/Accounting-Request queries. .BI "acct-timeout=" n Specifies timeout of accounting interim update. .TP +.BI "acct-delay-time=" 0|1 +Specifies whether radius client should include Acct-Delay-Time attribute to accounting requests (default 0). +.TP .SH [log] .br Configuration of log and log_file modules. @@ -275,6 +313,9 @@ Path to file to write general log. .BI "log-emerg=" file Path to file to write emergency messages. .TP +.BI "log-fail-file=" file +Path to file to write authentication failed session log. +.TP .BI "log-tcp=" x.x.x.x:port Send logs to specified host. .TP @@ -357,6 +398,16 @@ Prefix of radattr files (for example /var/run/radattr, resulting files will be / .BI "verbose=" n If specified and greated then zero pppd_module will produce verbose logging. .TP +.SH [chap-secrets] +.br +Configuration of chap-secrets module. +.TP +.BI "gw-ip-address=" x.x.x.x +Specifies address to use as local address of ppp interfaces if chap-secrets is used for IP address assignment. +.TP +.BI "chap-secrets=" file +Specifies alternate chap-secrets file location (default is /etc/ppp/chap-secrets). +.TP .SH [ip-pool] .br Configuration of ippool module. |