version 1.1.1.1, 2012/02/21 23:32:47
|
version 1.1.1.4, 2021/03/17 00:39:23
|
Line 6
|
Line 6
|
</HEAD> |
</HEAD> |
<BODY text="#000000" bgcolor="#ffffff"> |
<BODY text="#000000" bgcolor="#ffffff"> |
|
|
<A HREF="mpd.html"><EM>Mpd 5.6 User Manual</EM></A> | <A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A> |
<b>:</b> <A HREF="mpd17.html"><EM>Configuring Mpd</EM></A> |
<b>:</b> <A HREF="mpd17.html"><EM>Configuring Mpd</EM></A> |
<b>:</b> <EM>Interface layer</EM><BR> |
<b>:</b> <EM>Interface layer</EM><BR> |
<b>Previous:</b> <A HREF="mpd27.html"><EM>IPv6CP layer</EM></A><BR> |
<b>Previous:</b> <A HREF="mpd27.html"><EM>IPv6CP layer</EM></A><BR> |
Line 22 All of these commands apply to the currently active bu
|
Line 22 All of these commands apply to the currently active bu
|
IP traffic, it is designed to support other (currently unimplemented) |
IP traffic, it is designed to support other (currently unimplemented) |
protocols such as AppleTalk, IPX, etc. This is why the Interface |
protocols such as AppleTalk, IPX, etc. This is why the Interface |
layer (which is protocol independent) is distinct from the |
layer (which is protocol independent) is distinct from the |
<A HREF="mpd26.html#ipcp">ipcp</A> which is specific to IP.</p> | <A HREF="mpd26.html#ipcp">IP Control Protocol (IPCP) layer</A> which is specific to IP.</p> |
<p> |
<p> |
<dl> |
<dl> |
|
|
Line 31 If name argument is not specified, original ngX name i
|
Line 31 If name argument is not specified, original ngX name i
|
Note that inside Netgraph original ngX name is always used.</p> |
Note that inside Netgraph original ngX name is always used.</p> |
|
|
<dt><b><code>set iface description [ <em>description</em> ]</code></b><dd><p>This command changes interface description.</p> |
<dt><b><code>set iface description [ <em>description</em> ]</code></b><dd><p>This command changes interface description.</p> |
|
<p>Template may contain conversion specifications: |
|
<pre> |
|
%% expands to single % sign; |
|
%a for interface local address; |
|
%A for peer local address; |
|
%i for system interface index; |
|
%I for interface name; |
|
%l for name of bundle's first link |
|
%M for peer MAC address of bundle's first link |
|
%o for local outer ("physical") address of bundle's first link |
|
%O for peer outer ("physical") address of bundle's first link |
|
%P for peer outer ("physical") port of bundle's first link |
|
%S for interface status (DoD/UP/DOWN) |
|
%t for type of bundle's first link (pppoe, pptp, l2tp etc.) |
|
%u for self auth name (or dash if self auth name not used) |
|
%U for peer auth name (or dash if peer has not authenticated) |
|
</pre> |
|
</p> |
|
|
<dt><b><code>set iface group [ <em>group</em> ]</code></b><dd><p>This command add interface to specific group.</p> |
<dt><b><code>set iface group [ <em>group</em> ]</code></b><dd><p>This command add interface to specific group.</p> |
|
|
Line 39 Normally, mpd configures the interface with the IP add
|
Line 57 Normally, mpd configures the interface with the IP add
|
were negotiated when connecting the link. Since dial-on-demand |
were negotiated when connecting the link. Since dial-on-demand |
configures the interface before actually connecting, mpd has to be |
configures the interface before actually connecting, mpd has to be |
told initial local and remote IP addresses to give the interface. |
told initial local and remote IP addresses to give the interface. |
These addresses don't have to correspond to the ``real'' ones; in | These addresses do not have to correspond to the ``real'' ones; in |
fact, both addresses can be completely fictional. If and when |
fact, both addresses can be completely fictional. If and when |
different addresses are negotiated later, mpd will automatically |
different addresses are negotiated later, mpd will automatically |
renumber the interface and adjust the routes.</p> |
renumber the interface and adjust the routes.</p> |
Line 57 width is omitted, a single host route is assumed (i.e.
|
Line 75 width is omitted, a single host route is assumed (i.e.
|
of 32).</p> |
of 32).</p> |
<p>Routes are automatically removed when the interface is brought down.</p> |
<p>Routes are automatically removed when the interface is brought down.</p> |
|
|
<dt><b><code>set iface mtu <em>value</em></code></b><dd><p>This command sets an upper bound on the MTU that will be configured | <dt><b><code>set iface mtu <em>value</em> [ override ]</code></b><dd><p>Without optional keyword <code><b>override</b></code>, this command |
| sets an upper bound on the MTU that will be configured |
on the interface when the bundle comes up. |
on the interface when the bundle comes up. |
This value is not used at all during link negotiation; there are |
This value is not used at all during link negotiation; there are |
separate bundle and link commands for configuring that. |
separate bundle and link commands for configuring that. |
Line 65 Even if a higher bundle MTU is negotiated, this limit
|
Line 84 Even if a higher bundle MTU is negotiated, this limit
|
<p>This command is useful when you want to manually restrict the MTU |
<p>This command is useful when you want to manually restrict the MTU |
of the interface for other reasons, e.g., if you're also doing IPSec.</p> |
of the interface for other reasons, e.g., if you're also doing IPSec.</p> |
<p>The default is 1500.</p> |
<p>The default is 1500.</p> |
|
<p>Optional keyword <code><b>override</b></code> allows you to override |
|
the result of link negotiation and set interface MTU to specified value. |
|
Such override can violate RFC 1661, so use with caution and at your own risk. |
|
This is useful when you deal with broken PPP peer negotiating too low value |
|
while higher MTU is known to work.</p> |
|
|
<dt><b><code>set iface idle <em>seconds</em></code></b><dd><p>Sets the idle timeout value for the bundle. If no incoming or |
<dt><b><code>set iface idle <em>seconds</em></code></b><dd><p>Sets the idle timeout value for the bundle. If no incoming or |
outgoing packets are transmitted for <code><em>seconds</em></code> |
outgoing packets are transmitted for <code><em>seconds</em></code> |
Line 129 set ipcp ranges 192.168.1.10/32 192.168.1.20/32</code>
|
Line 153 set ipcp ranges 192.168.1.10/32 192.168.1.20/32</code>
|
</p> |
</p> |
<p>The default is disable.</p> |
<p>The default is disable.</p> |
|
|
|
<dt><b><code>keep-timeout</code></b><dd><p>When this option is enabled, we are not clear ``session timeout'' |
|
counter. This is useful together with CoA requests.</p> |
|
<p>The default is disable.</p> |
|
|
<dt><b><code>tcpmssfix</code></b><dd><p>This option causes mpd to adjust incoming and outgoing TCP SYN |
<dt><b><code>tcpmssfix</code></b><dd><p>This option causes mpd to adjust incoming and outgoing TCP SYN |
segments so that the requested maximum segment size is not greater |
segments so that the requested maximum segment size is not greater |
than the amount allowed by the interface MTU.</p> |
than the amount allowed by the interface MTU.</p> |
Line 142 packet. The rogue router drops the ICMP message and t
|
Line 170 packet. The rogue router drops the ICMP message and t
|
never gets to discover that it must reduce the fragment size or drop |
never gets to discover that it must reduce the fragment size or drop |
the IP Don't Fragment option from its outgoing data.</p> |
the IP Don't Fragment option from its outgoing data.</p> |
<p>The code is based on tcpmssd wich was written by Ruslan Ermilov |
<p>The code is based on tcpmssd wich was written by Ruslan Ermilov |
<A href="mailto:<ru@FreeBSD.org>">mailto:<ru@FreeBSD.org></A> | <A href="mailto:<ru@FreeBSD.org>"><ru@FreeBSD.org></A> |
based on work done by Patrick Bihan-Faou |
based on work done by Patrick Bihan-Faou |
<A href="mailto:<patrick@mindstep.com>">mailto:<patrick@mindstep.com></A>.</p> | <A href="mailto:<patrick@mindstep.com>"><patrick@mindstep.com></A>.</p> |
<p>The default is disable.</p> |
<p>The default is disable.</p> |
|
|
<dt><b><code>tee</code></b><dd><p>If enabled, a ng_tee(4) node will be inserted |
<dt><b><code>tee</code></b><dd><p>If enabled, a ng_tee(4) node will be inserted |
Line 154 can be useful for debugging or traffic accounting.</p>
|
Line 182 can be useful for debugging or traffic accounting.</p>
|
|
|
<dt><b><code>nat</code></b><dd><p>Enable NAT for this bundle. |
<dt><b><code>nat</code></b><dd><p>Enable NAT for this bundle. |
See |
See |
<A HREF="mpd39.html#nat">nat</A> for more information.</p> | <A HREF="mpd39.html#nat">the NAT chapter</A> for more information.</p> |
<p>The default is disable.</p> |
<p>The default is disable.</p> |
|
|
<dt><b><code>netflow-in</code></b><dd> |
<dt><b><code>netflow-in</code></b><dd> |
<dt><b><code>netflow-out</code></b><dd> |
<dt><b><code>netflow-out</code></b><dd> |
<dt><b><code>netflow-once</code></b><dd><p>If enabled, the bundle will participate in |
<dt><b><code>netflow-once</code></b><dd><p>If enabled, the bundle will participate in |
NetFlow generation. See |
NetFlow generation. See |
<A HREF="mpd34.html#netflow">netflow</A> | <A HREF="mpd34.html#netflow">the NetFlow chapter</A> |
for more information. The netflow-out option is like netflow-in, but |
for more information. The netflow-out option is like netflow-in, but |
generates NetFlow data for outgoing packets instead of incoming. |
generates NetFlow data for outgoing packets instead of incoming. |
If netflow-once enabled - packet will be accounted only once while |
If netflow-once enabled - packet will be accounted only once while |
Line 170 in kernel.</p>
|
Line 198 in kernel.</p>
|
|
|
<dt><b><code>ipacct</code></b><dd><p>If enabled, the bundle will participate in IP accounting with ng_ipacct node. |
<dt><b><code>ipacct</code></b><dd><p>If enabled, the bundle will participate in IP accounting with ng_ipacct node. |
See |
See |
<A HREF="mpd35.html#ipacct">ipacct</A> for more information.</p> | <A HREF="mpd35.html#ipacct">the IP Accounting chapter</A> for more information.</p> |
<p>The default is disable.</p> |
<p>The default is disable.</p> |
|
|
</dl> |
</dl> |
</p> |
</p> |
<HR NOSHADE> |
<HR NOSHADE> |
<A HREF="mpd.html"><EM>Mpd 5.6 User Manual</EM></A> | <A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A> |
<b>:</b> <A HREF="mpd17.html"><EM>Configuring Mpd</EM></A> |
<b>:</b> <A HREF="mpd17.html"><EM>Configuring Mpd</EM></A> |
<b>:</b> <EM>Interface layer</EM><BR> |
<b>:</b> <EM>Interface layer</EM><BR> |
<b>Previous:</b> <A HREF="mpd27.html"><EM>IPv6CP layer</EM></A><BR> |
<b>Previous:</b> <A HREF="mpd27.html"><EM>IPv6CP layer</EM></A><BR> |