Commit graph

73 commits

Author SHA1 Message Date
Michael Chapman
c450bdccc0 Fix RADIUS authentication on DAE responses. 2005-10-11 02:27:40 +00:00
Brendan O'Dea
d266f5fc93 fix Calling-Station-Id in RADIUS accounting records 2005-09-30 13:13:26 +00:00
Brendan O'Dea
1d2a952feb move code from signal handlers into mainloop, avoiding a race
condition when forking CLI
2005-09-19 00:29:12 +00:00
Brendan O'Dea
de9bbde824 fix protocol-reject 2005-09-16 12:13:22 +00:00
Brendan O'Dea
bde7904f92 - Add l2tp_mtu configuration option, used to define MRU, MSS.
- Adjust TCP MSS options in SYN and SYN,ACK packets to avoid
  fragmentation of tcp packets.
2005-09-16 05:04:28 +00:00
Brendan O'Dea
0c678c5a03 make MRU configurable, NAK config requests for larger values 2005-09-15 09:34:46 +00:00
Brendan O'Dea
733f582897 fix code-reject/protocol-reject 2005-09-13 14:23:07 +00:00
Brendan O'Dea
30a697b2b1 any traffic on a tunnel resets lastrec, not just control messages 2005-09-12 05:16:42 +00:00
Brendan O'Dea
a8823a7dfa restart BGP on receipt of CEASE 2005-09-02 23:39:34 +00:00
Brendan O'Dea
4b02e4442e bug fix 2005-09-01 06:59:06 +00:00
Brendan O'Dea
3fdc1ce373 avoid Code-Reject loop 2005-08-31 12:38:38 +00:00
Brendan O'Dea
bb371d8300 fix parsing of protocol rej 2005-08-29 03:21:14 +00:00
Brendan O'Dea
87a0b48170 drop level of "Unexpected CHAP message" log 2005-08-24 23:44:08 +00:00
Brendan O'Dea
567f8e3653 fail IPCP negotiation only on ConfigRej of IP-Address 2005-08-17 03:56:27 +00:00
Brendan O'Dea
0280d21184 re-instate local md5.[ch] due to issues with linking openssl to GPL code 2005-08-10 07:25:23 +00:00
Brendan O'Dea
a5cdf43cb3 fix generateload 2005-08-02 11:48:44 +00:00
Brendan O'Dea
aabf1d3fe9 - Replace flags used for LCP/IPCP with state machine.
- Use openssl MD5, fix DAE vector (Alex Kiernan).
2005-07-31 10:04:09 +00:00
Brendan O'Dea
a685501f64 add DAE support (PoD/CoA) from Vladislav Bjelic 2005-06-28 14:48:17 +00:00
Brendan O'Dea
e5695ec41c clear cluster_master on election so that slaves will accept a new master 2005-06-27 04:52:54 +00:00
Brendan O'Dea
39071c8ab5 Don't resend IPCP while still in progress 2005-06-24 07:05:03 +00:00
Brendan O'Dea
1c08f2bf3b Always initialise PRNG.
Sanity check length of random_vector.
2005-06-14 03:36:16 +00:00
Brendan O'Dea
401271b5bb - Don't send CDN for each session when shutting down tunnels (this is
implicit).
- Move tunnel shutdown from SIGQUIT signal handler to be run once from
  still_busy().  Reject new tunnels/sessions while in the process of
  shutting down.
2005-06-12 06:10:29 +00:00
Brendan O'Dea
b830a899ca Include endpoint address in accounting dump files.
Convert mainloop to use epoll rather than select.
2005-06-04 15:42:35 +00:00
Brendan O'Dea
ebfbe027e3 add "allow_duplicate_users" config option 2005-06-02 04:38:42 +00:00
Brendan O'Dea
83699acac6 merge cluster fixes from release_2_0 branch 2005-05-26 12:17:30 +00:00
Brendan O'Dea
847b4c6b1d fix RADIUS indexing (should have 16K entries with 64 sockets) 2005-05-16 04:51:16 +00:00
Brendan O'Dea
f0aa42be04 add sessionctl 2005-05-10 06:44:11 +00:00
Brendan O'Dea
68606812dc "show running-config" output contains clear-text shared secrets; require enable 2005-05-09 08:53:50 +00:00
Brendan O'Dea
d80d528b9a more chap 2005-05-08 06:28:12 +00:00
Brendan O'Dea
ecd6721a85 Don't process C_LASTSEEN unless we're a master (otherwise a crashed
master kills all slaves once restarted).
2005-05-07 10:14:33 +00:00
Brendan O'Dea
07db0c42ba - Don't use LOG() macro in initdata() until the config struct has been
allocated (uses config->debug).
- Initialise log_stream to stderr to catch errors before the config file
  is read.
2005-05-05 02:39:54 +00:00
Brendan O'Dea
a24e3186ff Add a Cisco-Avpair with intercept details to RADIUS Start/Stop records 2005-05-03 05:11:34 +00:00
Brendan O'Dea
a2056a2184 use cli_error() for error messages and help 2005-05-02 09:55:04 +00:00
Brendan O'Dea
7514d053bc Update .last_packet in cluster_handle_bytes only when there have
been bytes received from the modem (dead sessions were having the
idle timeout reset by stray packets).
2005-05-02 09:06:05 +00:00
Brendan O'Dea
4f94b2184e only send RADIUS stop in sessionshutdown if there's an ip address 2005-04-01 06:39:00 +00:00
Brendan O'Dea
7a42b7193b simplify AVP unhiding code 2005-03-10 03:08:07 +00:00
Brendan O'Dea
983b38e12f merge back 2.0 branch changes 2005-02-14 06:58:38 +00:00
Brendan O'Dea
be29ef6cb2 remove unmaintained "save_state" option 2005-02-09 00:16:17 +00:00
Brendan O'Dea
08360e49b4 finish incorporating ipv6 patches 2005-01-25 04:19:04 +00:00
Brendan O'Dea
17714a3ca7 log CLI connections at 4 from localhost; show last counter reset 2005-01-13 07:05:56 +00:00
Brendan O'Dea
4d76778200 more DoS prevention: add packet_limit option to apply a hard limit to downstream packets per session 2005-01-10 07:17:37 +00:00
Brendan O'Dea
ef828aaac5 CHAP support from Jordan Hrycaj (work in progress) 2005-01-07 07:19:19 +00:00
Brendan O'Dea
8454a49d0c sanity check that cluster_send_session is not called from a child process
throttle outgoing LASTSEEN packets to at most one per second for a given seq#
2004-12-20 07:23:41 +00:00
Brendan O'Dea
54443c26c4 start merging Jonathan's IPv6 patches (01-defines, 02-ipv6-cli) 2004-12-18 01:20:05 +00:00
Brendan O'Dea
0ab682e580 add counters for select_called, select_ready and select_processed
fix cli_print format strings
2004-12-16 23:40:30 +00:00
Brendan O'Dea
9d199a1046 use standard uintN_t types for portability 2004-12-16 08:49:52 +00:00
Brendan O'Dea
cda8d6eddd retain counters of shutdown sessions to dump once per minute 2004-12-13 02:27:30 +00:00
Brendan O'Dea
06ec43669e - Use gzip --best for man pages, include pid_file in sample
startup-config (from Jonathan's Debian package patches).
- Read multiple packets off cluster_sockfd as well as udpfd, tunfd in an
  attempt to avoid losing the cluster in high load (DoS) conditions.
2004-12-09 00:53:45 +00:00
Brendan O'Dea
38abd6684e drop "Session N is closing" message level to 4; don't process PPPIP packets in this state 2004-12-05 23:45:04 +00:00
Brendan O'Dea
f5fb6dea86 better cluster master collision resolution 2004-12-03 06:40:02 +00:00