mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-12-27 05:21:08 +01:00
Accept MSCHAPv2 by default.
Enable and accept MPPE by default.
This commit is contained in:
parent
ffd4007070
commit
385167a6b0
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=68906
@ -109,3 +109,7 @@ o MP autoload throughput measurements are now based on the maximum of input
|
|||||||
o When only one link is open in MP mode, MP link level compression is not
|
o When only one link is open in MP mode, MP link level compression is not
|
||||||
open and the peer MRU >= the peer MRRU, ppp sends outbound traffic as
|
open and the peer MRU >= the peer MRRU, ppp sends outbound traffic as
|
||||||
PROTO_IP traffic rather than PROTO_MP.
|
PROTO_IP traffic rather than PROTO_MP.
|
||||||
|
o MSCHAPv2 is now accepted by default. If you don't wish to negotiate
|
||||||
|
this, you must explicitly deny it.
|
||||||
|
o MPPE is enabled and accepted by default (although deflate and predictor1
|
||||||
|
are preferred.
|
||||||
|
@ -210,7 +210,7 @@ ccp_Init(struct ccp *ccp, struct bundle *bundle, struct link *l,
|
|||||||
ccp->cfg.neg[CCP_NEG_DEFLATE24] = 0;
|
ccp->cfg.neg[CCP_NEG_DEFLATE24] = 0;
|
||||||
#ifdef HAVE_DES
|
#ifdef HAVE_DES
|
||||||
ccp->cfg.mppe.keybits = 128;
|
ccp->cfg.mppe.keybits = 128;
|
||||||
ccp->cfg.neg[CCP_NEG_MPPE] = 0;
|
ccp->cfg.neg[CCP_NEG_MPPE] = NEG_ENABLED|NEG_ACCEPTED;
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
ccp_Setup(ccp);
|
ccp_Setup(ccp);
|
||||||
|
@ -246,7 +246,7 @@ lcp_Init(struct lcp *lcp, struct bundle *bundle, struct link *l,
|
|||||||
#ifdef HAVE_DES
|
#ifdef HAVE_DES
|
||||||
lcp->cfg.chap80nt = NEG_ACCEPTED;
|
lcp->cfg.chap80nt = NEG_ACCEPTED;
|
||||||
lcp->cfg.chap80lm = NEG_ACCEPTED;
|
lcp->cfg.chap80lm = NEG_ACCEPTED;
|
||||||
lcp->cfg.chap81 = 0;
|
lcp->cfg.chap81 = NEG_ACCEPTED;
|
||||||
#endif
|
#endif
|
||||||
lcp->cfg.lqr = NEG_ACCEPTED;
|
lcp->cfg.lqr = NEG_ACCEPTED;
|
||||||
lcp->cfg.pap = NEG_ACCEPTED;
|
lcp->cfg.pap = NEG_ACCEPTED;
|
||||||
|
Loading…
Reference in New Issue
Block a user