X-Git-Url: http://git.sameswireless.fr/l2tpns.git/blobdiff_plain/0c678c5a03bcdc601ea50bb7d8e273101cc5e557..5e65215ed4758c8fcd26ecaadc4b6121b93dab1c:/Docs/manual.html diff --git a/Docs/manual.html b/Docs/manual.html index a963e19..f52ad29 100644 --- a/Docs/manual.html +++ b/Docs/manual.html @@ -56,7 +56,6 @@ H3 {
  • Filtering
  • Clustering
  • Routing
    • -
  • Avoiding Fragmentation
  • Performance
    • @@ -185,6 +184,11 @@ the same as the LAC, or authentication will fail. Only actually be used if the LAC requests authentication. +
  • l2tp_mtu (int)
    +MTU of interface for L2TP traffic (default: 1500). Used to set link +MRU and adjust TCP MSS. +
    • +
  • ppp_restart_time (int)
    ppp_max_configure (int)
    ppp_max_failure (int)
    @@ -192,10 +196,6 @@ PPP counter and timer values, as described in §4.1 of RFC1661.
    • -
  • ppp_mru (int)
    -PPP link MRU (default: 1452). -
    • -
  • primary_dns (ip address)
  • secondary_dns (ip address)
    Whenever a PPP connection is established, DNS servers will be sent to the @@ -357,8 +357,33 @@ from the master. Determines the minumum number of up to date slaves required before the master will drop routes (default: 1).
    • + +
  • echo_timeout (int)
    +Time between last packet sent and LCP ECHO generation +(default: 10 (seconds)). +
    • + +
  • idle_echo_timeout (int)
    +Drop sessions who have not responded within idle_echo_timeout seconds +(default: 240 (seconds)) +
    • + +
  • bind_portremotelns (short)
    +Port to bind for the Remote LNS (default: 65432). +
    • + +

    The REMOTES LNS configuration is entered by the command: +

    setforward MASK IP PORT SECRET
    + +where MASK specifies the mask of users who have forwarded to +remote LNS (ex: /myISP@company.com).
    +where IP specifies the IP of the remote LNS (ex: 66.66.66.55).
    +where PORT specifies the L2TP Port of the remote LNS +(Normally should be 1701) (ex: 1701).
    +where SECRET specifies the secret password the remote LNS (ex: mysecret).
    +

    BGP routing configuration is entered by the command: The routing configuration section is entered by the command

    router bgp as
    @@ -1058,22 +1083,6 @@ ibgp" for IBGP. If this is not supported by your IOS revision, you can use "maximum-paths" (which works for EBGP) and set as_number to a private value such as 64512.

    -

    Avoiding Fragmentation

    - -Fragmentation of encapsulated return packets to the LAC may be avoided -for TCP sessions by adding a firewall rule to clamps the MSS on -outgoing SYN packets. - -The following is appropriate for interfaces with a typical MTU of -1500: - -
    -iptables -A FORWARD -i tun+ -o eth0 	\
-    -p tcp --tcp-flags SYN,RST SYN	\
-    -m tcpmss --mss 1413:1600		\
-    -j TCPMSS --set-mss 1412
-
    -

    Performance

    Performance is great.