[ Pobierz całość w formacie PDF ]
.-pc Disable protocol field compression negotiation (use default, protocol fieldcompression disabled).persist Do not exit after a connection is terminated; instead, try to reopen theconnection.pred1comp Attempt to request that the peer send the local system frames, which havebeen compressed by the Predictor-1 compression.The compressionprotocols must be loaded or this option is ignored.-pred1comp Do not accept Predictor-1 compression, even if the peer wants to sendthis type of compression and support has been defined in the kernel.proxyarp Add an entry to this system s ARP (Address Resolution Protocol) tablewith the IP address of the peer and the Ethernet address of this system.-proxyarp Disable the proxyarp option.The system administrator who wants toprevent users from creating proxy ARP entries with pppd can do so byplacing this option in the /etc/ppp/options file.remotename n Set the assumed name of the remote system for authentication purposesto n.+ua p Agree to authenticate using PAP (Password Authentication Protocol) ifrequested by the peer and use the data in file p for the user and passwordto send to the peer.The file contains the remote username, followed by anewline, followed by the remote password, followed by a newline.Thisoption is obsolescent.usehostname Enforce the use of the hostname as the name of the local system forauthentication purposes (overrides the name option).user u Set the username to use for authenticating this machine with the peerusing PAP to u.-vj Disable negotiation of Van Jacobson-style TCP/IP header compression(use default, no compression).-vjccomp Disable the connection-ID compression option in Van Jacobson styleTCP/IP header compression.With this option, pppd does not omit theconnection-ID byte from Van Jacobson compressed TCP/IP headers orask the peer to do so.vj-max-slots n Sets the number of connection slots to be used by the Van JacobsonTCP/IP header compression and decompression code to n, which must bebetween 2 and 16 (inclusive). Part VIII: Administration and Privileged Commands1366xonxoff Use software flow control (XON/XOFF) to control the flow of data onthe serial port.This option is only implemented on Linux systems atpresent.OPTIONS FILESOptions can be taken from files as well as the command line.pppd reads options from the files /etc/ppp/options and ~/.ppprcbefore looking at the command line.An options file is parsed into a series of words, delimited by whitespace.Whitespace canbe included in a word by enclosing the word in quotes ( ).A backslash (\) quotes the following character.A hash (#) starts acomment, which continues until the end of the line.AUTHENTICATIONpppd provides system administrators with sufficient access control so that PPP access to a server machine can be provided tolegitimate users without fear of compromising the security of the server or the network it s on.In part, this is provided by the/etc/ppp/options file, where the administrator can place options to require authentication whenever pppd is run, and in partby the PAP and CHAP secrets files, where the administrator can restrict the set of IP addresses that individual users can use.The default behavior of pppd is to agree to authenticate if requested and to not require authentication from the peer.However, pppd does not agree to authenticate itself with a particular protocol if it has no secrets that can be used to do so.Authentication is based on secrets, which are selected from secrets files (/etc/ppp/pap-secrets for PAP,/etc/ppp/chap-secrets for CHAP).Both secrets files have the same format, and both can store secrets for several combina-tions of server (authenticating peer) and client (peer being authenticated).Note that pppd can be both a server and client andthat different protocols can be used in the two directions if desired.A secrets file is parsed into words as for an options file.A secret is specified by a line containing at least three words, in theorder client name, server name, and secret.Any following words on the same line are taken to be a list of acceptable IPaddresses for that client.If there are only three words on the line, it is assumed that any IP address is okay; to disallow all IPaddresses, use -.If the secret starts with an @, what follows is assumed to be the name of a file from which to read the secret.A * as the client or server name matches any name.When selecting a secret, pppd takes the best match that is, the matchwith the fewest wildcards.A secrets file contains both secrets for use in authenticating other hosts and secrets that you use for authenticating yourself toothers.Which secret to use is chosen based on the names of the host (the local name) and its peer (the remote name).Thelocal name is set as follows:If the usehostname option is given, The local name is the hostname of this machine (with the domainappended, if given).If the name option is given Use the argument of the first name option seen.If the local IP address is specified with a Use that name [ Pobierz całość w formacie PDF ]