1: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
2: <HTML>
3: <HEAD>
4: <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
5: <TITLE>Encryption (ECP) layer</TITLE>
6: </HEAD>
7: <BODY text="#000000" bgcolor="#ffffff">
8:
9: <A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A>
10: <b>:</b> <A HREF="mpd17.html"><EM>Configuring Mpd</EM></A>
11: <b>:</b> <EM>Encryption (ECP) layer</EM><BR>
12: <b>Previous:</b> <A HREF="mpd22.html"><EM>Bundle layer</EM></A><BR>
13: <b>Next:</b> <A HREF="mpd24.html"><EM>Compression (CCP) layer</EM></A>
14:
15:
16: <HR NOSHADE>
17: <H2><A NAME="23"></A>4.5. Encryption (ECP) layer<A NAME="encryption"></A></H2>
18: <p>This chapter describes commands that configure the Encryption Control
19: Protocol (ECP) layer. All of these commands apply to the currently
20: active bundle.</p>
21: <p>To use ECP you should enable encryption at the bundle level.
22: To allow encryption to be negotiated you should enable here some of
23: encryption protocols.</p>
24: <p><b>Note:</b> In PPP, encryption should be handled by the ECP rather than CCP.
25: However, Microsoft combined both compression and encryption
26: into their ``compression'' algorithm (MPPC), which is confusing.</p>
27: <p>
28: <dl>
29:
30: <dt><b><code>set ecp key <em>string</em> </code></b><dd>
31: <p>Sets the encryption key.</p>
32:
33: <dt><b><code>set ecp accept <em>option ...</em> </code></b><dd>
34: <dt><b><code>set ecp deny <em>option ...</em> </code></b><dd>
35: <dt><b><code>set ecp enable <em>option ...</em> </code></b><dd>
36: <dt><b><code>set ecp disable <em>option ...</em> </code></b><dd>
37: <dt><b><code>set ecp yes <em>option ...</em> </code></b><dd>
38: <dt><b><code>set ecp no <em>option ...</em> </code></b><dd>
39: <p>These commands configure various ECP options. Each direction of
40: traffic (transmit and receive) is independent from the other.
41: All options default to <code><b>disable</b></code> and <code><b>deny</b></code>.</p>
42: <p>The <code><b>enable</b></code> and <code><b>disable</b></code> commands determine
43: whether we desire the corresponding option on received data.
44: The <code><b>accept</b></code> and <code><b>deny</b></code> commands determine
45: whether we will allow the peer to request the corresponding option
46: (which we must enable on our transmitted data).</p>
47:
48: <p>The <b><code>yes</code></b> command is the same as
49: <code><b>enable</b></code> and <code><b>accept</b></code>.
50: The <b><code>no</code></b> command is the same as
51: <code><b>disable</b></code> and <code><b>deny</b></code>.</p>
52:
53: </dl>
54: </p>
55:
56: <p>The options available at the ECP layer are:</p>
57: <p>
58: <dl>
59:
60: <dt><b><code>dese-bis</code></b><dd><p>This option enables DESE-bis (rfc 2419) encryption.
61: This algorithm implemented in user-level, so require much CPU power
62: on fast (>10Mbit/s) links.</p>
63: <p>The default is disable.</p>
64:
65: <dt><b><code>dese-old</code></b><dd><p>This option enables DESE (rfc 1969) encryption.
66: This algorithm implemented in user-level, so require much CPU power
67: on fast (>10Mbit/s) links.</p>
68: <p><b>Note:</b> DESE protocol is deprecated. Because of data padding
69: to the next 8 octets boundary, required by block nature of DES encryption,
70: dese-old option can have interoperability issues with other protocols
71: which work over it. As example, it is incompatible with Predictor-1 and
72: Deflate compressions.</p>
73: <p>The default is disable.</p>
74:
75: </dl>
76: </p>
77:
78: <HR NOSHADE>
79: <A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A>
80: <b>:</b> <A HREF="mpd17.html"><EM>Configuring Mpd</EM></A>
81: <b>:</b> <EM>Encryption (ECP) layer</EM><BR>
82: <b>Previous:</b> <A HREF="mpd22.html"><EM>Bundle layer</EM></A><BR>
83: <b>Next:</b> <A HREF="mpd24.html"><EM>Compression (CCP) layer</EM></A>
84:
85:
86:
87: </BODY>
88: </HTML>
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>