version 1.1.1.2, 2013/07/22 08:44:30
|
version 1.1.1.4, 2021/03/17 00:39:23
|
Line 6
|
Line 6
|
</HEAD> |
</HEAD> |
<BODY text="#000000" bgcolor="#ffffff"> |
<BODY text="#000000" bgcolor="#ffffff"> |
|
|
<A HREF="mpd.html"><EM>Mpd 5.7 User Manual</EM></A> | <A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A> |
<b>:</b> <A HREF="mpd1.html"><EM>Introduction</EM></A> |
<b>:</b> <A HREF="mpd1.html"><EM>Introduction</EM></A> |
<b>:</b> <EM>Change history</EM><BR> |
<b>:</b> <EM>Change history</EM><BR> |
<b>Previous:</b> <A HREF="mpd3.html"><EM>Organization of this manual</EM></A><BR> |
<b>Previous:</b> <A HREF="mpd3.html"><EM>Organization of this manual</EM></A><BR> |
Line 15
|
Line 15
|
|
|
<HR NOSHADE> |
<HR NOSHADE> |
<H2><A NAME="4"></A>1.3. Change history<A NAME="changes"></A></H2> |
<H2><A NAME="4"></A>1.3. Change history<A NAME="changes"></A></H2> |
|
<p>Changes since version 5.8: |
|
<ul> |
|
<li> New features: |
|
<ul> |
|
<li> Added new option `override` for the command `set iface mtu`.</li> |
|
</ul> |
|
</li> |
|
<li> Changes: |
|
<ul> |
|
<li> Improve compatibility with new implementation of ipfw tables |
|
for FreeBSD versions when ipfw table delete command takes |
|
list of addresses.</li> |
|
<li> Use only 64-bit counters on modern FreeBSD.</li> |
|
</ul> |
|
</li> |
|
<li> Bugfixes: |
|
<ul> |
|
<li> Properly clean console mutex lock in case of thread |
|
cancellation to prevent deadlock.</li> |
|
<li> Fix buffer overflow introduced in version 5.8: |
|
processing of template %aX in a RADIUS authentication response |
|
might lead to unexpected termination of the mpd5 process. |
|
Installations not using RADIUS or not using %aX templates |
|
in RADIUS attributes were not affected.</li> |
|
<li>LCP negotiation fixed for rare case of remote peer restarting it |
|
when in phase AUTHENTICATE or NETWORK.</li> |
|
<li> Fix buffer overflow in parsing of L2TP control packets |
|
introduced in version 4.0 that initially brought in L2TP support: |
|
a specially crafted incoming L2TP control packet |
|
might lead to unexpected termination of the process. |
|
Installations not using L2TP clients nor L2TP server configuration |
|
were not affected.</li> |
|
</ul> |
|
</li> |
|
</ul> |
|
</p> |
|
<p>Changes since version 5.7: |
|
<ul> |
|
<li> New features: |
|
<ul> |
|
<li> Added JSON format output into the web console.</li> |
|
<li> Added `set l2tp pmask ...` command.</li> |
|
<li> Added `set pppoe mac-format ...` command.</li> |
|
<li> Added `set pppoe max-payload ...` command from RFC 4638.</li> |
|
<li> Added 'set radius src-addr ...' command.</li> |
|
<li> Added `set iface keep-timeout` options.</li> |
|
<li> Added `set console auth` options.</li> |
|
<li> Added `agent-cid` global option to control display |
|
PPPoE ADSL-Agent-Circuit-Id option in `show session` command. |
|
Default is disabled.</li> |
|
<li> Added `session-time` global option to control display |
|
session time in seconds in `show session` command. |
|
Default is disabled.</li> |
|
<li> Using `peer_addr` in ACL tell to use mpd-table with |
|
the peer negotiated IP address.</li> |
|
<li> Added more wildcards, passed from ACL's.</li> |
|
<li> Added more wildcards, passed from `set iface description ...` |
|
command or `mpd-iface-descr` RADIUS attribute.</li> |
|
<li> Added `Filter-Id` RADIUS attribute.</li> |
|
<li> Added support for Backtrace Access Library.</li> |
|
<li> Added support for LibreSSL Library.</li> |
|
</ul> |
|
</li> |
|
<li> Changes: |
|
<ul> |
|
<li> Rename `quit` command to `shutdown`.</li> |
|
<li> `authname ...` command can be case insensitive.</li> |
|
</ul> |
|
</li> |
|
<li> Bugfixes: |
|
<ul> |
|
<li> Restore send mac address to RADIUS server in unformatted value.</li> |
|
<li> Fix long living bug with ECP.</li> |
|
<li> Fix ability to use both IPv4 and IPv6 addresses on the same interface.</li> |
|
</ul> |
|
</li> |
|
</ul> |
|
</p> |
<p>Changes since version 5.6: |
<p>Changes since version 5.6: |
<ul> |
<ul> |
<li> New features: |
<li> New features: |
Line 23
|
Line 101
|
<li> Added `unset radius server ...` command.</li> |
<li> Added `unset radius server ...` command.</li> |
<li> Added `unset nat ...` command.</li> |
<li> Added `unset nat ...` command.</li> |
<li> Added `Class` CoA attribute from RFC 2865.</li> |
<li> Added `Class` CoA attribute from RFC 2865.</li> |
<li> New command 'show netflow' added.</li> | <li> New command `show netflow` added.</li> |
</ul> |
</ul> |
</li> |
</li> |
<li> Changes: |
<li> Changes: |
Line 92 Import required files into the MPD tree.</li>
|
Line 170 Import required files into the MPD tree.</li>
|
</li> |
</li> |
<li> Bugfixes: |
<li> Bugfixes: |
<ul> |
<ul> |
<li> Fix memory leaks on pptp and radius on some reason.</li> | <li> Fix memory leaks on PPTP and RADIUS on some reason.</li> |
<li> Really make RESULT a mandatory option in ext-auth.</li> |
<li> Really make RESULT a mandatory option in ext-auth.</li> |
</ul> |
</ul> |
</li> |
</li> |
</ul> |
</ul> |
</p> |
</p> |
<p>Changes since version 5.3 (most of this work was sponsored by |
<p>Changes since version 5.3 (most of this work was sponsored by |
<A href="http://ufanet.ru/">http://ufanet.ru/</A>): | <A href="http://ufanet.ru/">JSC 'Ufanet'</A>): |
<ul> |
<ul> |
<li> New features: |
<li> New features: |
<ul> |
<ul> |
Line 638 rewritten to support many NCPs.</li>
|
Line 716 rewritten to support many NCPs.</li>
|
<li> PPTP link type is ready to support IPv6, |
<li> PPTP link type is ready to support IPv6, |
but requires ng_pptpgre(4) to support IPv6.</li> |
but requires ng_pptpgre(4) to support IPv6.</li> |
<li> NetFlow export over IPv6 is supported.</li> |
<li> NetFlow export over IPv6 is supported.</li> |
<li> The following features don't yet support IPv6: | <li> The following features do not yet support IPv6: |
TcpMSSFix, NetFlow, Tee, DialOnDemand.</li> |
TcpMSSFix, NetFlow, Tee, DialOnDemand.</li> |
</ul> |
</ul> |
</li> |
</li> |
<li> TCP link type now compiles and works |
<li> TCP link type now compiles and works |
(but isn't yet ready for production usage).</li> | but is not yet ready for production usage.</li> |
<li> NetFlow data generation on outgoing interface is supported.</li> |
<li> NetFlow data generation on outgoing interface is supported.</li> |
<li> Added a possibility to use an existing ng_netflow(4) node.</li> |
<li> Added a possibility to use an existing ng_netflow(4) node.</li> |
<li> Added a possibility to specify network interface names |
<li> Added a possibility to specify network interface names |
Line 665 fix some aspects of multilink server functionality.</l
|
Line 743 fix some aspects of multilink server functionality.</l
|
<li> The shutdown of mpd is now much more graceful: |
<li> The shutdown of mpd is now much more graceful: |
the netgraph nodes are closed, the accounting RADIUS |
the netgraph nodes are closed, the accounting RADIUS |
packets for closing links are sent, new connections |
packets for closing links are sent, new connections |
aren't accepted during shutdown.</li> | are not accepted during shutdown.</li> |
<li> Fixed races in filling of RADIUS packets. In particular, |
<li> Fixed races in filling of RADIUS packets. In particular, |
RAD_NAS_PORT value in the RADIUS could be wrong.</li> |
RAD_NAS_PORT value in the RADIUS could be wrong.</li> |
<li> RADIUS support rewritten to use poll(2) instead of |
<li> RADIUS support rewritten to use poll(2) instead of |
Line 710 not broken anymore.</li>
|
Line 788 not broken anymore.</li>
|
is loaded once at startup.</li> |
is loaded once at startup.</li> |
<li>Added a new <code>global</code> config space for all the global |
<li>Added a new <code>global</code> config space for all the global |
settings.</li> |
settings.</li> |
<li>BugFix: don't generate new challenges, while retransmitting | <li>BugFix: do not generate new challenges while retransmitting |
them.</li> |
them.</li> |
<li>Fix <code>va_args</code> bug on certain non-i386 platforms.</li> |
<li>Fix <code>va_args</code> bug on certain non-i386 platforms.</li> |
<li>Auto-load <code>ng_ether</code> for PPPoE connections; |
<li>Auto-load <code>ng_ether</code> for PPPoE connections; |
Line 718 fix default path for undefined service.</li>
|
Line 796 fix default path for undefined service.</li>
|
<li>Rewrite the console-stuff. Multiple telnet connections are now |
<li>Rewrite the console-stuff. Multiple telnet connections are now |
allowed. There is no input-console anymore, must use telnet |
allowed. There is no input-console anymore, must use telnet |
instead.</li> |
instead.</li> |
<li>BugFix: The directly configured password wasn't taken into | <li>BugFix: The directly configured password was not taken into |
account when using PAP.</li> |
account when using PAP.</li> |
<li>Disallow empty usernames safely.</li> |
<li>Disallow empty usernames safely.</li> |
</ul> |
</ul> |
Line 736 accounting requests.</li>
|
Line 814 accounting requests.</li>
|
</ul> |
</ul> |
</p> |
</p> |
<p>Changes since version 3 (most of this work was sponsored by |
<p>Changes since version 3 (most of this work was sponsored by |
<A href="http://www.surfnet.nl/">http://www.surfnet.nl/</A>): | <A href="http://www.surfnet.nl/">SURFnet</A>): |
<ul> |
<ul> |
<li>Design changes: |
<li>Design changes: |
Mpd uses now a thread-based event system using libpdel, these libpdel parts are now |
Mpd uses now a thread-based event system using libpdel, these libpdel parts are now |
Line 771 has no special role anymore, i.e. it could be disabled
|
Line 849 has no special role anymore, i.e. it could be disabled
|
<li>RADIUS related changes: |
<li>RADIUS related changes: |
<ul> |
<ul> |
<li><b>IMPORTANT</b>: Mpd needs now an enhanced libradius, here are the patchsets: |
<li><b>IMPORTANT</b>: Mpd needs now an enhanced libradius, here are the patchsets: |
<code><A href="http://www.bretterklieber.com/freebsd/libradius.diff">http://www.bretterklieber.com/freebsd/libradius.diff</A></code> | <code><A href="http://www.bretterklieber.com/freebsd/libradius.diff">4-STABLE</A></code> |
<code><A href="http://www.bretterklieber.com/freebsd/libradius5.diff">http://www.bretterklieber.com/freebsd/libradius5.diff</A></code></li> | <code><A href="http://www.bretterklieber.com/freebsd/libradius5.diff">5-CURRENT</A></code></li> |
<li>Remember and send the RAD_STATE attribute.</li> |
<li>Remember and send the RAD_STATE attribute.</li> |
<li>Message-Authenticator support.</li> |
<li>Message-Authenticator support.</li> |
<li>EAP Proxy Support.</li> |
<li>EAP Proxy Support.</li> |
Line 834 implementing each EAP-Type into Mpd.</li>
|
Line 912 implementing each EAP-Type into Mpd.</li>
|
</ul> |
</ul> |
</p> |
</p> |
<HR NOSHADE> |
<HR NOSHADE> |
<A HREF="mpd.html"><EM>Mpd 5.7 User Manual</EM></A> | <A HREF="mpd.html"><EM>Mpd 5.9 User Manual</EM></A> |
<b>:</b> <A HREF="mpd1.html"><EM>Introduction</EM></A> |
<b>:</b> <A HREF="mpd1.html"><EM>Introduction</EM></A> |
<b>:</b> <EM>Change history</EM><BR> |
<b>:</b> <EM>Change history</EM><BR> |
<b>Previous:</b> <A HREF="mpd3.html"><EM>Organization of this manual</EM></A><BR> |
<b>Previous:</b> <A HREF="mpd3.html"><EM>Organization of this manual</EM></A><BR> |