X-Git-Url: http://git.sameswireless.fr/l2tpns.git/blobdiff_plain/5cc3beb6c7570c2b5b425e61d66000cc0a95da17..refs/heads/fendo-mods:/Docs/manual.html?ds=sidebyside diff --git a/Docs/manual.html b/Docs/manual.html index bebc7c8..e3e19db 100644 --- a/Docs/manual.html +++ b/Docs/manual.html @@ -56,7 +56,6 @@ H3 {
  • Filtering
  • Clustering
  • Routing
  • -
  • Avoiding Fragmentation
  • Performance
  • @@ -185,6 +184,11 @@ the same as the LAC, or authentication will fail. Only actually be used if the LAC requests authentication. +
  • l2tp_mtu (int)
    +MTU of interface for L2TP traffic (default: 1500). Used to set link +MRU and adjust TCP MSS. +
  • +
  • ppp_restart_time (int)
    ppp_max_configure (int)
    ppp_max_failure (int)
    @@ -353,6 +357,17 @@ from the master. Determines the minumum number of up to date slaves required before the master will drop routes (default: 1).
  • + +
  • echo_timeout (int)
    +Time between last packet sent and LCP ECHO generation +(default: 10 (seconds)). +
  • + +
  • idle_echo_timeout (int)
    +Drop sessions who have not responded within idle_echo_timeout seconds +(default: 240 (seconds)) +
  • +

    BGP routing configuration is entered by the command: @@ -1054,22 +1069,6 @@ ibgp" for IBGP. If this is not supported by your IOS revision, you can use "maximum-paths" (which works for EBGP) and set as_number to a private value such as 64512.

    -

    Avoiding Fragmentation

    - -Fragmentation of encapsulated return packets to the LAC may be avoided -for TCP sessions by adding a firewall rule to clamps the MSS on -outgoing SYN packets. - -The following is appropriate for interfaces with a typical MTU of -1500: - -
    -iptables -A FORWARD -i tun+ -o eth0 	\
    -    -p tcp --tcp-flags SYN,RST SYN	\
    -    -m tcpmss --mss 1413:1600		\
    -    -j TCPMSS --set-mss 1412
    -
    -

    Performance

    Performance is great.