set iface description [ description ]This command changes interface description.
-Template may contain conversion specifications:
-+
Template may contain conversion specifications:
%% expands to single % sign;
%a for interface local address;
@@ -41,6 +40,9 @@ Note that inside Netgraph original ngX name is always
%I for interface name;
%l for name of bundle's first link
%M for peer MAC address of bundle's first link
+%o for local outer ("physical") address of bundle's first link
+%O for peer outer ("physical") address of bundle's first link
+%P for peer outer ("physical") port of bundle's first link
%S for interface status (DoD/UP/DOWN)
%t for type of bundle's first link (pppoe, pptp, l2tp etc.)
%u for self auth name (or dash if self auth name not used)
@@ -55,7 +57,7 @@ Normally, mpd configures the interface with the IP add
were negotiated when connecting the link. Since dial-on-demand
configures the interface before actually connecting, mpd has to be
told initial local and remote IP addresses to give the interface.
-These addresses don't have to correspond to the ``real'' ones; in
+These addresses do not have to correspond to the ``real'' ones; in
fact, both addresses can be completely fictional. If and when
different addresses are negotiated later, mpd will automatically
renumber the interface and adjust the routes.
@@ -73,7 +75,8 @@ width is omitted, a single host route is assumed (i.e.
of 32).
Routes are automatically removed when the interface is brought down.
-set iface mtu valueThis command sets an upper bound on the MTU that will be configured +
set iface mtu value [ override ]Without optional keyword override, this command
+sets an upper bound on the MTU that will be configured
on the interface when the bundle comes up.
This value is not used at all during link negotiation; there are
separate bundle and link commands for configuring that.
@@ -81,6 +84,11 @@ Even if a higher bundle MTU is negotiated, this limit
This command is useful when you want to manually restrict the MTU of the interface for other reasons, e.g., if you're also doing IPSec.
The default is 1500.
+Optional keyword override allows you to override
+the result of link negotiation and set interface MTU to specified value.
+Such override can violate RFC 1661, so use with caution and at your own risk.
+This is useful when you deal with broken PPP peer negotiating too low value
+while higher MTU is known to work.
set iface idle secondsSets the idle timeout value for the bundle. If no incoming or
outgoing packets are transmitted for seconds
@@ -145,6 +153,10 @@ set ipcp ranges 192.168.1.10/32 192.168.1.20/32
The default is disable.
+keep-timeoutWhen this option is enabled, we are not clear ``session timeout'' +counter. This is useful together with CoA requests.
+The default is disable.
+tcpmssfixThis option causes mpd to adjust incoming and outgoing TCP SYN segments so that the requested maximum segment size is not greater than the amount allowed by the interface MTU.
@@ -158,9 +170,9 @@ packet. The rogue router drops the ICMP message and t never gets to discover that it must reduce the fragment size or drop the IP Don't Fragment option from its outgoing data.The code is based on tcpmssd wich was written by Ruslan Ermilov -mailto:<ru@FreeBSD.org> +<ru@FreeBSD.org> based on work done by Patrick Bihan-Faou -mailto:<patrick@mindstep.com>.
+<patrick@mindstep.com>.The default is disable.
teeIf enabled, a ng_tee(4) node will be inserted @@ -170,14 +182,14 @@ can be useful for debugging or traffic accounting.
natEnable NAT for this bundle. See -nat for more information.
+the NAT chapter for more information.The default is disable.
netflow-innetflow-outnetflow-onceIf enabled, the bundle will participate in NetFlow generation. See -netflow +the NetFlow chapter for more information. The netflow-out option is like netflow-in, but generates NetFlow data for outgoing packets instead of incoming. If netflow-once enabled - packet will be accounted only once while @@ -186,13 +198,13 @@ in kernel.
ipacctIf enabled, the bundle will participate in IP accounting with ng_ipacct node. See -ipacct for more information.
+the IP Accounting chapter for more information.The default is disable.