Age | Commit message (Collapse) | Author |
|
|
|
introduced new module "vlan-mon"
|
|
|
|
This option specifies value of Calling-Station-Id value.
Available options are 'mac' and 'ip'.
|
|
Default behaviour of accel-ppp when it receives DHCP request with same Option 82 but different MAC address
is termination of old session (with previous MAC address).
This option can turn off such behaviour, so multiple sessions with same Option 82 but different MAC may coesist.
|
|
Introducesed 2 new options:
[ipoe]
attr-dhcp-opt82-remote-id=
attr-dhcp-opt82-circuit-id=
|
|
|
|
|
|
* radius: major improvments
* radius: use NAS-Port-Id in Access-Accept for interface renaming
* radius: introduced "weight" and "backup" per-server options
* radius: introduced "attr-tunnel-type" option
* radius: introduced "max-fail" option
* ipoe: introduced "ip-unnumbered" option
* ipoe: improved vlan monitor
* ipoe: introduced "attr-dhcp-lease-time" option
* ipoe: send option 82 from DHCP request to radius
* ipoe: fixed passing packets in 'redirect on reject' mode
* ipoe: implemented handling relayed DHCP clients
* ipoe: implemented "L4 redirect on reject" for DHCP sessions
* ipoe: implemneted ability to send L4 redirect table/L4 redirect ipset via radius attributes
* pppoe: introduced "called-sid" option
* pppoe: improved AC-Cookie mechanism
* ippool: introduced "shuffle" option
* core: improved "single-session=replace" handling
* shaper: apply rate multiplier to integer values
* shaper: implemented fq_codel leaf qdisc
* shaper: fixed passing quantum parameter to kernel
* shaper: introduced "moderate-quantum" option
* shaper: introduced "fwmark" option
* ipv6: add support for prefixes greater than 64
* ppp: make LCP magic number negotiation not mandatory
* ppp: implement address/control and protocol field compression
* ppp: implemented delayed unit close via unit cache
* pppd_compat: pass IPV6_PREFIX and IPV6_DELEGATED_PREFIX to ip-up/ip-down scripts
* cli: introduced verbose option
|
|
If specified then fwmark filters will be installed to bypass shaper
|
|
shaper: introduced moderate-quantum option
If fixed quantum is not specified and moderate-quantum is specified then shaper module
will check for quantum value to be in valid range (1000-200000).
This suppresses annoying kernel messages.
Remark: quantum is rate/r2q, rate is in bytes/sec.
|
|
radius attributes
Introduced following options:
attr-l4-redirect-table (type integer)
attr-l4-redirect-ipset (type string)
Please note, to enable L4 redirect attr-l4-redirect must be specified and sent
|
|
If authentication rejects session, but l4-redirect-on-reject is specified in config then
temporary session will be created and l4 redirect rule will be applied to IP of that session.
Session will be terminated after specified number of seconds.
Also if l4-redirect-ip-pool option is specified then IP will be allocated from that special pool.
|
|
|
|
Due to kernel slowly destroys interfaces closing unit file descriptor blocks working threads which causes overall stuck.
Thus (if unit-cache option is not zero) do not close unit file descriptor immediatly, but put it into unit cache.
Additional helper thread was introduced which closes descriptors from unit cache which overruns configured unit cache size.
|
|
If verbose=0 then cli won't produce any logging
if verbose=1 then log only connections
if verbose=2 then log also executed commands
|
|
|
|
Parameters are same as for tc:
[shaper]
leaf-qdisc=fq_codel [ limit PACKETS ] [flows NUMBER ] [ target TIME ] [ interval TIME ] [ quantum BYTES ] [ [no]ecn ]
|
|
To enable this specify attr-opt82 option in [ipoe] section.
Attribute must be octet type.
|
|
pass dhcp lease time (attribute must be integer)
|
|
Signed-off-by: Denys Fedoryshchenko <nuclearcat@nuclearcat.com>
|
|
If specified then accel-ppp will send tunnel type as string (pppoe,pptp,l2tp,ipoe).
|
|
Before this time accel-ppp always worked in "ip unnumbered" mode.
This option may turn this mode off (default is on)
|
|
New options are applied to server option as server=...[,weight=x][,backup]
Weight is used for multi-server configurations (larger weight takes more users).
Backup is used to mark backup server f.e. server which will be used only if all other servers are failed.
|
|
This new option will control how to represent Called-Station-ID.
Its value maybe ifname,mac or ifname:mac.
By default mac is used to keep compatibility with old versions.
Also old option ifname-in-sid is removed from documentation, but is still supported for compatibility.
|
|
* Set default retransmission timeout to 1 second. Since we now have
exponential backoff, we can afford a smaller value.
* Add the rtimeout-cap option to set the maximum value the
retransmission timer has to respect during exponential backoff.
* Store the maximun number of retransmissions in tunnel's structure
(like other retransmission parameters).
* Describe all these changes in man page and reset them to their
default values if they're removed from configuration file before a
reload.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
Add the recv-window option in accel-ppp.conf.
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
|
|
Signed-off-by: Dmitry Kozlov <xeb@mail.ru>
|
|
Signed-off-by: Dmitry Kozlov <xeb@mail.ru>
|
|
This new option is pattern for naming newly created vlans.
Pattern may contain following macros:
%I - name of parent interface
%N - number of vlan
By default vlan-name=%I.%N
Signed-off-by: Dmitry Kozlov <xeb@mail.ru>
|
|
may be overrided by radius
Signed-off-by: Dmitry Kozlov <xeb@mail.ru>
|
|
Signed-off-by: Vladislav Grishenko <themiron@mail.ru>
|
|
|
|
|
|
|
|
|
|
|
|
radius sends in different basis
|
|
Acct-Status-Type=Accounting-On on startup and Acct-Status-Type=Accounting-Off on shutdown
|
|
|
|
* l2tp: Fix allocation checking when adding octets AVP
* cli, tcp: Fix non-NULL terminated string reception
* Fix va_end() missing calls
* chap-secrets: implemented encryption
* auth_pap: make messages like other auth modules
* cli: check xmit_buf is not null at enter to write function
* pppoe: implemented regular expression support
* chap-secrets: implemented encryption
* ippool: fixed initialization order
* optional shaper compiling
* ppp: dns/wins code cleanup
|
|
|
|
|
|
|
|
|
|
If enabled accel-pppd will not destroy interface immediately after corresponding session is terminated, instead interface will be brought down and placed to cache for later use for new sessions.
It should reduce kernel interface creation/deletion rate lack and increase responsibility of daemon
|
|
|
|
|
|
containes pool name
|
|
|