summaryrefslogtreecommitdiff
path: root/data/templates/sstp-client
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2022-12-17 12:48:29 +0100
committerChristian Poessinger <christian@poessinger.com>2022-12-17 12:48:29 +0100
commitd9ab07c3d7d988706cbdfc4fac16f7e2ca264f72 (patch)
treef9312bd1aee0cd7df8ebdd75d1f73c0f3f51541c /data/templates/sstp-client
parent8d5c633385407cfe1fb7a6f7b0f2243ab7deb3da (diff)
downloadvyos-1x-d9ab07c3d7d988706cbdfc4fac16f7e2ca264f72.tar.gz
vyos-1x-d9ab07c3d7d988706cbdfc4fac16f7e2ca264f72.zip
sstp: T4384: disable compression and creacke exclusive lock file
Diffstat (limited to 'data/templates/sstp-client')
-rw-r--r--data/templates/sstp-client/peer.j29
1 files changed, 8 insertions, 1 deletions
diff --git a/data/templates/sstp-client/peer.j2 b/data/templates/sstp-client/peer.j2
index 1127d0564..7a0b0e1f7 100644
--- a/data/templates/sstp-client/peer.j2
+++ b/data/templates/sstp-client/peer.j2
@@ -17,7 +17,7 @@ pty "sstpc --ipparam {{ ifname }} --nolaunchpppd {{ server }}:{{ port }} --ca-ce
# Override any connect script that may have been set in /etc/ppp/options.
connect /bin/true
-# Don't try to authenticate the remote node
+# We don't need the server to auth itself
noauth
# We won't want EAP
@@ -37,6 +37,13 @@ sstp-sock /var/run/sstpc/sstpc-{{ ifname }}
persist
debug
+# pppd should create a UUCP-style lock file for the serial device to ensure
+# exclusive access to the device. By default, pppd will not create a lock file.
+lock
+
+# Disables Deflate compression
+nodeflate
+
{% if authentication is vyos_defined %}
{{ 'user "' + authentication.user + '"' if authentication.user is vyos_defined }}
{{ 'password "' + authentication.password + '"' if authentication.password is vyos_defined }}