ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/doc/vped.conf.pod
(Generate patch)

Comparing gvpe/doc/vped.conf.pod (file contents):
Revision 1.2 by pcg, Mon Mar 24 15:20:24 2003 UTC vs.
Revision 1.3 by pcg, Fri Mar 28 17:05:42 2003 UTC

… …
83 83
84Since only the private key file of the current node is used and the 84Since only the private key file of the current node is used and the
85private key file should be kept secret per-host to avoid spoofings, it is 85private key file should be kept secret per-host to avoid spoofings, it is
86not recommended to use this feature. 86not recommended to use this feature.
87 87
88=item ifpersist = yes|no 88=item ifpersist = yes|true|on | no|false|off
89 89
90Should the tun/tap device be made persistent, that is, should the device 90Should the tun/tap device be made persistent, that is, should the device
91stay up even when vped exits? Some versions of the tunnel device have 91stay up even when vped exits? Some versions of the tunnel device have
92problems sending packets when vped is restarted in persistent mode, so 92problems sending packets when vped is restarted in persistent mode, so
93if the connections can be established but you cannot send packets from 93if the connections can be established but you cannot send packets from
… …
121 121
122Recommended values are 1500 (ethernet), 1492 (pppoe), 1472 (pptp). 122Recommended values are 1500 (ethernet), 1492 (pppoe), 1472 (pptp).
123 123
124This value must be the minimum of the mtu values of all hosts. 124This value must be the minimum of the mtu values of all hosts.
125 125
126=item ip-proto = numerical-ip-protocol
127
128Sets the protocol number to be used for the rawip protocol. This is a
129global option because all hosts must use the same protocol, and since
130there are no port numbers, you cannot easily run more than one vped
131instance using the same protocol, nor can you share the protocol with
132other programs.
133
134The default is 47 (GRE), which has a good chance of tunneling through
135firewalls (but note that the rawip protocol is not GRE compatible). Other
136common choices are 50 (IPSEC, ESP), 51 (IPSEC, AH), 4 (IPIP tunnels) or 98
137(ENCAP, rfc1241)
138
139=item enable-udp = yes|true|on | no|false|off
140
141Enable the UDPv4 transport using the C<udp-port> port
142(default: C<yes>). This is a good general choice since UDP tunnels well
143through many firewalls.
144
145=item enable-rawip = yes|true|on | no|false|off
146
147Enable the RAW IPv4 transport using the C<ip-proto> protocol
148(default: C<no>). This is the best choice, since the overhead per packet
149is only 38 bytes, as opposed to UDP's 58 (or TCP's 60+).
150
126=item if-up = relative-or-absolute-path 151=item if-up = relative-or-absolute-path
127 152
128Sets the path of a script that should be called immediately after the 153Sets the path of a script that should be called immediately after the
129network interface is initialized (but not neccessarily up). The following 154network interface is initialized (but not neccessarily up). The following
130environment variables are passed to it (the values are just examples): 155environment variables are passed to it (the values are just examples):
… …
251(nevr initiate a connection to the given host, but accept connections), 276(nevr initiate a connection to the given host, but accept connections),
252C<ondemand> (try to establish a connection on the first packet sent, and 277C<ondemand> (try to establish a connection on the first packet sent, and
253take it down after the keepalive interval) or C<disabled> (node is bad, 278take it down after the keepalive interval) or C<disabled> (node is bad,
254don't talk to it). 279don't talk to it).
255 280
256=item inherit-tos = yes|no 281=item inherit-tos = yes|true|on | no|false|off
257 282
258Wether to inherit the TOS settings of packets sent to the tunnel when 283Wether to inherit the TOS settings of packets sent to the tunnel when
259sending packets to this node (default: C<yes>). If set to C<yes> then 284sending packets to this node (default: C<yes>). If set to C<yes> then
260outgoing tunnel packets will have the same TOS setting as the packets sent 285outgoing tunnel packets will have the same TOS setting as the packets sent
261to the tunnel device, which is usually what you want. 286to the tunnel device, which is usually what you want.
262 287
263=item compress = yes|no 288=item compress = yes|true|on | no|false|off
264 289
265Wether to compress data packets sent to this host (default: C<yes>, 290Wether to compress data packets sent to this host (default: C<yes>).
266compression is really cheap even on slow computers and has no size 291Compression is really cheap even on slow computers and has no size
267overhead at all). 292overhead at all, so enabling this is a good idea.
268 293
269=back 294=back
270 295
271=head1 CONFIG DIRECTORY LAYOUT 296=head1 CONFIG DIRECTORY LAYOUT
272 297

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines