From 6781c4f1f38aed2bbf69ef4d3a8c92eea3946b17 Mon Sep 17 00:00:00 2001 From: DmitriyEshenko Date: Wed, 31 Jul 2019 23:00:08 +0000 Subject: T1555 Implementation shared-secret for LNS. Implementation command disabling ccp. --- src/conf_mode/accel_l2tp.py | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) (limited to 'src/conf_mode/accel_l2tp.py') diff --git a/src/conf_mode/accel_l2tp.py b/src/conf_mode/accel_l2tp.py index 5f0546d63..3a224974e 100755 --- a/src/conf_mode/accel_l2tp.py +++ b/src/conf_mode/accel_l2tp.py @@ -89,6 +89,9 @@ mppe={{authentication['mppe']}} {% if outside_addr %} bind={{outside_addr}} {% endif %} +{% if lns_shared_secret %} +secret={{lns_shared_secret}} +{% endif %} [client-ip-range] 0.0.0.0/0 @@ -117,10 +120,13 @@ chap-secrets=/etc/accel-ppp/l2tp/chap-secrets verbose=1 check-ip=1 single-session=replace -{% if idle_timeout%} +{% if idle_timeout %} lcp-echo-timeout={{idle_timeout}} {% endif %} lcp-echo-interval=30 +{% if ccp_disable %} +ccp=0 +{% endif %} {% if authentication['mode'] == 'radius' %} [radius] @@ -383,6 +389,13 @@ def get_config(): if c.exists('idle'): config_data['idle_timeout'] = c.return_value('idle') + ### LNS secret + if c.exists('lns shared-secret'): + config_data['lns_shared_secret'] = c.return_value('lns shared-secret') + + if c.exists('ccp-disable'): + config_data['ccp_disable'] = True + return config_data def verify(c): -- cgit v1.2.3