From owner-man-jp-reviewer@jp.freebsd.org  Mon Apr 26 00:53:44 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id AAA47168;
	Mon, 26 Apr 1999 00:53:44 +0900 (JST)
	(envelope-from owner-man-jp-reviewer@jp.FreeBSD.org)
Received: from mail.yk.rim.or.jp (root@mail.yk.rim.or.jp [202.247.130.37])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id AAA47163
	for <man-jp-reviewer@jp.freebsd.org>; Mon, 26 Apr 1999 00:53:43 +0900 (JST)
	(envelope-from k-horik@yk.rim.or.jp)
Received: from localhost (ppp868.yk.rim.or.jp [202.247.185.119])
	by mail.yk.rim.or.jp (8.8.8/3.6W-RIMNET-98-06-09) with ESMTP id AAA25569
	for <man-jp-reviewer@jp.freebsd.org>; Mon, 26 Apr 1999 00:53:26 +0900 (JST)
To: man-jp-reviewer@jp.freebsd.org
X-Mailer: Mew version 1.93 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Multipart/Mixed;
	boundary="--Next_Part(Sun_Apr_25_21:29:50_1999_41)--"
Content-Transfer-Encoding: 7bit
Message-Id: <19990426005233S.k-horik@yk.rim.or.jp>
Date: Mon, 26 Apr 1999 00:52:33 +0900
From: Kazuo Horikawa <k-horik@yk.rim.or.jp>
X-Dispatcher: imput version 980905(IM100)
Lines: 3645
Reply-To: man-jp-reviewer@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990405
X-Sequence: man-jp-reviewer 1321
Subject: [man-jp-reviewer 1321] ppp.8 for 3.1-19990417-STABLE
Errors-To: owner-man-jp-reviewer@jp.freebsd.org
Sender: owner-man-jp-reviewer@jp.freebsd.org
X-Originator: k-horik@yk.rim.or.jp

----Next_Part(Sun_Apr_25_21:29:50_1999_41)--
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit

 $BKY@n$G$9!#(B
 ppp.8 $B$N:9J,$G$9!#(B

 $BFC$K(B RADIUS $B4XO"$N$H$3$m$r3NG'$7$F$$$?$@$-$?$$$G$9!#(B


----Next_Part(Sun_Apr_25_21:29:50_1999_41)--
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Content-Description: ppp.8.diff Japanese
Content-Disposition: attachment; filename=ppp.8.diff

--- ppp.8	Sun Apr  4 01:43:09 1999
+++ ppp.8	Sat Apr 24 01:27:19 1999
@@ -1,4 +1,4 @@
-.\" %Id: ppp.8,v 1.142.2.2 1999/03/07 11:55:12 brian Exp %
+.\" %Id: ppp.8,v 1.142.2.3 1999/03/24 18:03:12 brian Exp %
 .\" jpman %Id: ppp.8,v 1.4 1997/06/08 18:41:58 saeki Stab %
 .\" WORD: expect string	$B<u?.BT$AJ8;zNs(B (chat.8)
 .\" WORD: negotiation	$B8r>D(B
@@ -19,7 +19,8 @@
 .Fl dedicated
 .Oc
 .Op Fl alias
-.Op Ar system ...
+.Op Ar system Ns
+.No ...
 .Sh $B2r@b(B
 $BK\%W%m%0%i%`$O!"%f!<%6%W%m%;%9$H$7$FF0:n$9$k(B
 .Em PPP
@@ -109,7 +110,7 @@
 $B$OI8=`F~NO(B/$BI8=`=PNO$+$i$N(B
 .Em PPP
 $B@\B3$r<u$1F~$l$k%5!<%P$H$7$FF0:n$5$;$k$3$H$,$G$-$^$9!#(B
-.It PAP $B$H(B CHAP $B$K$h$kG'>Z$r%5%]!<%H(B
+.It PAP $B$H(B CHAP (rfc 1994) $B$K$h$kG'>Z$r%5%]!<%H(B
 PAP $B$b$7$/$O(B CHAP $B$rMQ$$$k$3$H$K$h$j!"(BUnix $B%9%?%$%k$N(B
 .Xr login 1
 $B<jB3$-$r%9%-%C%W$7!"(B
@@ -119,10 +120,28 @@
 .Nm
 $B$,(B DES $B$r%5%]!<%H$9$k$h$&$K%3%s%Q%$%k$5$l$F$$$k>l9g!"E,Ev$J(B MD4/DES 
 $B1~Ez$,$J$5$l$^$9!#(B
+.It RADIUS (rfc 2138) $BG'>Z$r%5%]!<%H(B
+PAP $B$H(B CHAP $B$N3HD%$G$"$k(B
+.Em \&R Ns No emote
+.Em \&A Ns No ccess
+.Em \&D Ns No ial
+.Em \&I Ns No n
+.Em \&U Ns No ser
+.Em \&S Ns No ervice
+$B$,!"Cf1{%G!<%?%Y!<%9$^$?$OJ,;6%G!<%?%Y!<%9$K!"(B
+$B%f!<%6$4$H$N7A<0$GMM!9$J@\B3FC@-$H$H$b$KG'>Z>pJs$r3JG<2DG=$H$7$^$9!#(B
+$B%3%s%Q%$%k;~$K(B
+.Pa libradius
+$B$,MxMQ2DG=$J>l9g!"MxMQ$9$k$h$&$K@_Dj$9$k$H!"(B
+.Nm
+$B$O$3$l$r;HMQ$7$F(B
+.Em RADIUS
+$BMW5a$r:n@.$7$^$9!#(B
 .It $BBeM}(B arp (Proxy Arp) $B$r%5%]!<%H(B
-.Em PPP
-$B$,%5!<%P$H$7$FF0:n$7$F$$$k;~!"$=$N@\B3$K$D$$$FBeM}(B arp $B$r9T$&$h$&(B
-$B@_Dj$G$-$^$9!#(B
+.Nm
+$B$,Aj<j$N$?$a$K(B 1 $B8D0J>e$NBeM}(B arp $B%(%s%H%j$r:n@.$9$k$h$&$K!"@_Dj2DG=$G$9!#(B
+LAN $B>e$N3F%^%7%s$G$N@_Dj$r9T$o$:$K!"(B
+$BAj<jB&$+$i(B LAN $B$X$N%k!<%F%#%s%0$r2DG=$H$7$^$9!#(B
 .It $B%Q%1%C%H$N%U%#%k%?%j%s%0$r%5%]!<%H(B
 $B%f!<%6$O(B 4 $B<oN`$N%U%#%k%?$rDj5A$G$-$^$9!#(B
 .Em in
@@ -145,7 +164,7 @@
 .Nm
 $B$ODL>o$N%7%j%"%k%G%P%$%9$r;H$&$N$G$O$J$/!"%G!<%?E>Aw$N$?$a$N(B TCP 
 $B@\B3$r3+$-$^$9!#(B
-.It IETF $B%I%i%U%H$N(B Predictor-1 $B$H(B DEFLATE $B05=L$r%5%]!<%H(B
+.It "IETF $B%I%i%U%H$N(B Predictor-1 (rfc 1978) $B$H(B DEFLATE (rfc 1979) $B05=L$r%5%]!<%H(B
 .Nm
 $B$O(B VJ $B05=L$NB>$K(B Predictor-1 $B$H(B DEFLATE $B05=L$b%5%]!<%H$7$F$$$^$9!#(B
 $B%b%G%`$ODL>o(B ($BNc$($P(B v42.bis $B$N$h$&$J(B) $BAH$_9~$_$N05=L5!G=$r;}$C$F$*$j!"(B
@@ -167,7 +186,7 @@
 $B%9%?%C%/$r;HMQ$9$k%/%i%$%"%s%H(B ($B$D$^$j(B Win95, WinNT) $B$H$N4V$G(B
 $B%M!<%`%5!<%P$N%"%I%l%9$H(B NetBIOS $B%M!<%`%5!<%P$N%"%I%l%9$r(B
 $B8r>D$9$k$3$H$,$G$-$^$9!#(B
-.It $B%^%k%A%j%s%/(B PPP $B$r%5%]!<%H(B
+.It $B%^%k%A%j%s%/(B PPP $B$r%5%]!<%H(B (rfc 1990)
 $B@\B3@h$X$NJ#?t$NJ*M}E*$J2s@~$r%*!<%W%s$7!"$9$Y$F$N%j%s%/$N(B
 $BBS0hI}$r9g$o$;$F$h$j9b$$%9%k!<%W%C%H$rF@$k$3$H$,$G$-$^$9!#(B
 .El
@@ -178,7 +197,7 @@
 $B!"%0%k!<%W(B
 .Dv network
 $B!"%Q!<%_%C%7%g%s(B
-.Dv 4554
+.Dv 04554
 $B$G%$%s%9%H!<%k$5$l$^$9!#(B
 $B%G%U%)%k%H$G$O(B
 .Nm
@@ -228,7 +247,7 @@
 $BDL>o!"(B
 .Dq 10.0.0.1/0
 $B$N$h$&$J$b$N$,E,@Z$G$9!#Nc$H$7$F$O!"(B
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 $B$N(B
 .Dq pmdemand
 $B%7%9%F%`$r;2>H$7$F$/$@$5$$!#(B
@@ -245,7 +264,9 @@
 .It Fl direct
 $B$3$l$OF~NO@\B3$r<u$1IU$1$k$?$a$K;HMQ$7$^$9!#(B
 .Nm
-$B$O(B ``set device'' $B9T$rL5;k$7!"%j%s%/$K%G%9%/%j%W%?(B 0 $B$r;HMQ$7$^$9!#(B
+$B$O(B
+.Dq set device
+$B9T$rL5;k$7!"%j%s%/$K%G%9%/%j%W%?(B 0 $B$r;HMQ$7$^$9!#(B
 .Pp
 $B%3!<%k%P%C%/$N@_Dj$r9T$&$H!"%@%$%d%k%P%C%/;~$K(B
 .Nm
@@ -363,7 +384,7 @@
 .Nm
 $B$O(B
 .Xr syslog 3
-$B$r;HMQ$7$F>pJs$r%m%0$7$^$9!#DL>o$N%m%0%U%!%$%kL>$O(B
+$B$r;HMQ$7$F>pJs$r5-O?$7$^$9!#DL>o$N%m%0%U%!%$%kL>$O(B
 .Pa /var/log/ppp.log
 $B$G$9!#(B
 $B$3$N%U%!%$%k$K=PNO$r9T$&$?$a$K$O!"<!$N9T$r(B
@@ -427,7 +448,7 @@
 $B$G$"$k$H$7$F@bL@$7$^$9!#(B
 .Nm
 $B$r0z?tL5$7$G5/F0$9$k$H(B ($BA0=R$N(B
-.Em $B%Q!<%_%C%7%g%s(B
+.Sx $B%Q!<%_%C%7%g%s(B
 $B;2>H(B) $B<!$N%W%m%s%W%H$,I=<($5$l$^$9(B:
 .Bd -literal -offset indent
 ppp ON awfulhak>
@@ -443,22 +464,73 @@
 $B$K@\B3$7!"(B
 $B$^$@@5$7$$%Q%9%o!<%I$rF~NO$7$F$$$J$$>l9g$K$N$_$3$N$h$&$J>uBV$K$J$j$^$9!#(B
 .Pp
-$B$3$3$G!"%b%G%`$N%G%P%$%9L>!"%9%T!<%I$d%Q%j%F%#$N@_Dj!"(B
-CTS/RTS $B?.9f$r;H$&$+$I$&$+(B ($B%G%U%)%k%H$G$O(B CTS/RTS $B$,;HMQ$5$l$^$9(B) $B$r(B
-$B;XDj$7$F!"3+;O2DG=$G$9!#$b$7%O!<%I%&%'%"$,(B CTS/RTS $B?.9f$r;}$C$F$$$J$$>l9g(B
-($B$3$l$O(B PPP $B2DG=$JC<Kv%5!<%P$KD>@\$D$J$0>l9g$K5/$3$jF@$^$9(B)$B!"(B
-.Nm
-$B$O$=$N%]!<%H$rDL$7$F$I$s$J=PNO$bAw$i$:!"Mh$k$O$:$N$J$$?.9f$rBT$AB3$1$^$9!#(B
-$B$7$?$,$C$F!"D>@\@\B3$GDL?.$,$G$-$J$$$h$&$J>l9g$K$O!"(B
-CTS/RTS $B$r(B off $B$K$7$F$_$F$/$@$5$$(B:
 .Bd -literal -offset indent
-ppp ON awfulhak> set line /dev/cuaa0
+ppp ON awfulhak> set device /dev/cuaa0
 ppp ON awfulhak> set speed 38400
+.Ed
+.Pp
+$BDL>o%O!<%I%&%'%"%U%m!<@)8f(B (CTS/RTS) $B$r;HMQ$7$^$9!#(B
+$B$7$+$7!"FCDj$N>l9g(B
+($BFCDj$N(B PPP $B2DG=$JC<Kv%5!<%S%9$KD>@\@\B3$7$F$$$k>l9g$K5/$jF@$^$9(B)$B!"(B
+.Nm
+$B$,DL?.%j%s%/$K%G!<%?$r=q$-9~$b$&$H$7$?$H$-$K!"(B
+$B1J1s$KMh$J$$(B CTS ($BAw?.;~$K%/%j%"(B) $B%7%0%J%k$rBT$D$3$H$K$h$j(B
+.Nm
+$B$,%O%s%0$7$^$9!#(B
+$BD>DL@~$G@\B3$G$-$J$$>l9g$O!"(B
+.Dq set ctsrts off
+$B$G(B CTS/RTS $B$r%*%U$K$7$F$_$F$/$@$5$$!#(B
+$B$3$l$,I,MW$J>l9g!"8e=R$N(B
+.Dq set accmap
+$B$N5-=R$b;2>H$7$F$/$@$5$$(B - 
+.Dq set accmap 000a0000
+$B$bI,MW$+$b$7$l$^$;$s!#(B
+.Pp
+$BDL>o!"%Q%j%F%#$O(B
+.Dq none
+$B$K@_Dj$7$^$9!#$3$l$,(B
+.Nm ppp
+$B$N%G%U%)%k%H$G$9!#(B
+$B%Q%j%F%#$O$I$A$i$+$H$$$&$H8EIw$J%(%i!<%A%'%C%/5!9=$G$"$j!"(B
+$B:#$H$J$C$F$O;HMQ$7$^$;$s!#(B
+$B:G6a$N%b%G%`$O3F<+$N%(%i!<%A%'%C%/5!9=$r;}$C$F$*$j!"(B
+$B$[$H$s$I$N%j%s%/AX%W%m%H%3%k(B (
+.Nm
+$B$O$3$l$G$9(B) $B$O$h$j?.Mj$G$-$k%A%'%C%/5!9=$r;HMQ$7$^$9!#(B
+$B%Q%j%F%#$OAjBPE*$KBg$-$J%*!<%P%X%C%I$r;}$A$^$9$N$G(B
+($B%H%i%U%#%C%/$,(B 12.5% $BA}2C$7$^$9(B)$B!"(B
+.Dv PPP
+$B$,%*!<%W%s$5$l$k$H>o$KL58z2=(B
+.Pq set to Dq none
+$B$5$l$^$9!#(B
+$B$7$+$7!"(BISP ($B%$%s%?!<%M%C%H%5!<%S%9%W%m%P%$%@(B) $B$K$h$C$F$O!"(B
+$BFCDj$N%Q%j%F%#@_Dj$r@\B3;~(B (
+.Dv PPP
+$B$,%*!<%W%s$9$kA0(B) $B$K;HMQ$9$k$b$N$,$"$j$^$9!#(B
+$BFC$K!"(BCompuserve $B$O%m%0%$%s;~$K6v?t%Q%j%F%#$K8G<9$7$F$$$^$9(B:
+.Bd -literal -offset indent
 ppp ON awfulhak> set parity even
-ppp ON awfulhak> set ctsrts on
+.Ed
+.Pp
+$B$3$3$G!"8=:_$N%b%G%`@_Dj$,$I$N$h$&$K$J$C$F$$$k$+8+$i$l$^$9(B:
+.Bd -literal -offset indent
 ppp ON awfulhak> show modem
-* $B%b%G%`4XO"$N%Q%i%a!<%?$,!"$3$3$K<($5$l$^$9(B *
-ppp ON awfulhak>
+Name: deflink
+ State:           closed
+ Device:          N/A
+ Link Type:       interactive
+ Connect Count:   0
+ Queued Packets:  0
+ Phone Number:    N/A
+
+Defaults:
+ Device List:     /dev/cuaa0
+ Characteristics: 38400bps, cs8, even parity, CTS/RTS on
+
+Connect time: 0 secs
+0 octets in, 0 octets out
+Overall 0 bytes/sec
+ppp ON awfulhak> 
 .Ed
 .Pp
 $B$3$3$G$O!"D>@\%b%G%`$HDL?.$9$k$?$a$K(B term $B%3%^%s%I$r;HMQ2DG=$G$9(B:
@@ -468,8 +540,8 @@
 OK
 atdt123456
 CONNECT
-login: ppp
-Password:
+login: myispusername
+Password: myisppassword
 Protocol: ppp
 .Ed
 .Pp
@@ -485,18 +557,39 @@
 PPP ON awfulhak>               # IP $B%"%I%l%99g0U40N;(B
 .Ed
 .\" your end $B$G!V$"$J$?B&!W(B
+.Pp
 $B$3$N$h$&$K$J$i$J$$>l9g!"@\B3@h$,$3$A$i$N3+;O8r>D$r(B
-$BBT$C$F$$$k$+!"F~NO%Q%1%C%H$r(B
-.Em PPP
-$B%Q%1%C%H$G$"$k$H(B
-.Nm ppp
-$B$,<1JL$G$-$J$$2DG=@-$,$"$j$^$9!#(B
-$B8e<T$N>l9g!"$"$J$?B&$N%Q%j%F%#@_Dj$NLdBj$+$b$7$l$^$;$s!#(B
+$BBT$C$F$$$k2DG=@-$,$"$j$^$9!#(B
 $B6/@)E*$K(B
 .Nm
 $B$K@\B3@h$X$N(B PPP $B@_Dj%Q%1%C%H$NAw=P$r3+;O$5$;$k$?$a$K$O(B
 .Dq ~p
-$B%3%^%s%I$r;H$C$F%Q%1%C%H%b!<%I$K0\9T$7$F2<$5$$!#(B
+$B%3%^%s%I$r;H$$!"C<Kv%b!<%I$rH4$1$F%Q%1%C%H%b!<%I$K0\9T$7$F2<$5$$!#(B
+.Pp
+$B$=$l$G$b%m%0%$%s%W%m%s%W%H$,F@$i$l$J$$>l9g!"(B
+Unix $BE*$J%m%0%$%s(B/$B%Q%9%o!<%IG'>Z$G$O$J$/!"(BPAP $B$^$?$O(B CHAP $B$NG'>Z$r!"(B
+$BAj<j$OMW5a$7$F$$$k2DG=@-$,Hs>o$K9b$$$G$9!#(B
+$B@5$7$/@_Dj$9$k$?$a$K$O!"%W%m%s%W%H$KLa$j!"(B
+$BG'>ZMQ$NL>A0$H%-!<$r@_Dj$7!":FEY@\B3$7$^$9(B:
+.Bd -literal -offset indent
+~.
+ppp ON awfulhak> set authname myispusername
+ppp ON awfulhak> set authkey myisppassword
+ppp ON awfulhak> term
+at
+OK
+atdt123456
+CONNECT
+.Ed
+.Pp
+$B$3$3$G:FEY!"8r>D3+;O$9$k$h$&$K(B ppp $B$K;XDj$G$-$^$9(B:
+.Bd -literal -offset indent
+~p
+ppp ON awfulhak>               # $B%j%s%/$O3NN)$7$F$$$^$;$s(B
+Ppp ON awfulhak>               # $B@\B340N;!"(BLCP $B40N;(B
+PPp ON awfulhak>               # $BG'>Z40N;(B
+PPP ON awfulhak>               # IP $B%"%I%l%99g0U40N;(B
+.Ed
 .Pp
 $B$3$l$G@\B3$5$l$^$7$?(B!
 $B%W%m%s%W%H$N(B
@@ -506,14 +599,17 @@
 $B>.J8;z$K$J$k$^$GBT$C$F$/$@$5$$!#$b$7>.J8;z$KLa$C$?>l9g$K$O!"$=$l$O(B
 .Nm
 $B$,@\B3@h$H$N8r>D$K@.8y$7$J$+$C$?$3$H$r$r0UL#$7$^$9!#(B
-$B$?$$$F$$!"$=$N860x$O(B PAP $B$b$7$/$O(B CHAP $BG'>Z$N(B name $B$d(B key $B$,(B
-$B@5$7$/$J$$$3$H$G$9!#(B
-.Dq set log local phase
-$B$9$k$3$H$,!"$3$N;~E@$G$N%H%i%V%k%7%e!<%F%#%s%0$X$NBh0lJb$H$7$F$O(B
-$BNI$$$G$7$g$&!#(B
+$B$3$N;~E@$G$NLdBj2r7h$NBh0lJb$H$7$F$O!"<!$N$h$&$K$7!":FD)@o$7$^$9!#(B
+.Bd -literal -offset indent
+ppp ON awfulhak> set log local phase lcp ipcp
+.Ed
+.Pp
 $B>\:Y$O!"2<5-$N(B
 .Dq set log
 $B%3%^%s%I$N@bL@$r;2>H$7$F$/$@$5$$!#(B
+$B$3$N;~E@$G$b<:GT$9$k>l9g!"(B
+$B%m%0$rM-8z$K$7$F:FD)@o$9$k$3$H$,Hs>o$K=EMW$G$9!#(B
+$B%W%m%s%W%H$NJQ2=$KCm0U$7!"$"$J$?$r=u$1$F$/$l$k?M$KJs9p$9$k$3$H$b$^$?=EMW$G$9!#(B
 .Pp
 $B%j%s%/$,3NN)$7$?$i!"(Bshow $B%3%^%s%I$r;HMQ$9$k$3$H$G!"(B
 $B$I$N$h$&$K;vBV$,?J9T$7$F$$$k$N$+$,J,$j$^$9(B:
@@ -553,15 +649,29 @@
 .Ed
 .Pp
 $B$rMQ$$$k$3$H$G4{B8$N7PO)$r>e=q$-$G$-$^$9!#(B
-$B$3$3$G!"(B(ping, telnet, ftp $B$N$h$&$J(B) $B%M%C%H%o!<%/%"%W%j%1!<%7%g%s$r(B
-$BJL$N%&%#%s%I%&$G;HMQ2DG=$G$9!#(B
+$B$3$N%3%^%s%I$O!"<B:]$K@\B3$r:n@.$9$kA0$K<B9T2DG=$G$9!#(B
+$B?7$7$$(B IP $B%"%I%l%9$r@\B3;~$K8r>D$9$k>l9g!"$3$l$K=>$C$F(B
+.Nm
+$B$,%G%U%)%k%H7PO)$r99?7$7$^$9!#(B
+.Pp
+$B$3$3$G!"(B(ping, telnet, ftp $B$N$h$&$J(B) $B%M%C%H%o!<%/%"%W%j%1!<%7%g%s$r!"(B
+$B$"$J$?$N%^%7%s$NJL$N%&%#%s%I%&$^$?$OC<Kv$G;HMQ2DG=$G$9!#(B
+$B8=:_$NC<Kv$r:FMxMQ$7$?$$>l9g!"(B
+.Nm
+$B$r%P%C%/%0%i%&%s%I%b!<%I$K$9$k$?$a$K!"(B
+$BI8=`$N%7%'%k$N%5%9%Z%s%I$H%P%C%/%0%i%&%s%I%3%^%s%I(B ($BDL>o(B
+.Dq ^Z
+$B$N8e$K(B
+.Dq bg )
+$B$r;HMQ2DG=$G$9!#(B
+.Pp
 $B;HMQ2DG=%3%^%s%I$N>\:Y$O(B
-.Em PPP $B%3%^%s%I%j%9%H(B
+.Sx PPP $B%3%^%s%I%j%9%H(B
 $B$N@a$r;2>H$7$F$/$@$5$$!#(B
 .Sh $B<+F0%@%$%d%k(B
 $B<+F0%@%$%d%k$r9T$&$?$a$K$O!"%@%$%d%k$H%m%0%$%s$N%A%c%C%H%9%/%j%W%H$r(B
 $BMQ0U$7$J$1$l$P$J$j$^$;$s!#Dj5A$NNc$O(B
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 $B$r8+$F$/$@$5$$(B (
 .Pa /etc/ppp/ppp.conf
 $B$N=q<0$OHs>o$K4JC1$G$9(B)$B!#(B
@@ -646,7 +756,7 @@
 $B@\B3$,3NN)$5$l$?;~$K!"$=$NFbMF$,<B9T$5$l$^$9!#(B
 $B@\B3$,3NN)$5$l$?8e$N%P%C%/%0%i%&%s%I$G$N%9%/%j%W%H<B9T$K$D$$$F$O!"(B
 $BDs6!$5$l$F$$$k(B
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 ($B;HMQ2DG=$JCV49J8;zNs$K$D$$$F$O!"8e=R$N(B
 .Dq shell
 $B$H(B
@@ -714,7 +824,7 @@
 $B$3$l$K$O!"%j%b!<%H@\B3@h$N(B IP $B%"%I%l%9$r;XDj$9$k$?$a$N(B
 .Dq set ifaddr
 $B%3%^%s%I$b=q$+$l$F$$$J$1$l$P$J$j$^$;$s(B (
-.Pa /etc/ppp/ppp.conf.sample 
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 $B$r;2>H$7$F$/$@$5$$(B)$B!#(B
 .Bd -literal -offset indent
 # ppp -auto pmdemand
@@ -737,7 +847,7 @@
 .Pc
 $B<!$N$h$&$K?GCG%]!<%H$rDL$8$F@\B3$9$k$3$H$,$G$-$^$9!#(B
 .Bd -literal -offset indent
-# pppctl 3000	(tun0 $B$r2>Dj(B - ``set server'' $B$N5-=R$r;2>H(B)
+# pppctl 3000	(tun0 $B$r2>Dj(B)
 Password:
 PPP ON awfulhak> show who
 tcp (127.0.0.1:1028) *
@@ -760,31 +870,54 @@
 $B%@%$%d%k$,9T$o$l$^$9!#(B
 $B@\B3$K<:GT$7$?$i!"%G%U%)%k%H$NF0:n$G$O(B 30 $BIC4VBT$C$F$+$i!"(B
 $BJL$NAw?.%Q%1%C%H$,8!=P$5$l$?;~$K@\B3$7$h$&$H$7$^$9!#(B
-$B$3$NF0:n$O<!$NJ}K!$GJQ99$G$-$^$9!#(B
-.Bd -literal -offset indent
-set redial seconds|random[.nseconds|random] [dial_attempts]
-.Ed
 .Pp
-.Sq seconds
+$B$3$NF0:n$O(B
+.Dq set redial
+$B%3%^%s%I$GJQ99$G$-$^$9!#(B
+.Pp
+.No set redial Ar secs Ns Xo
+.Oo + Ns Ar inc Ns
+.Op - Ns Ar max Ns
+.Oc Op . Ns Ar next
+.Op Ar attempts
+.Xc
+.Pp
+.Bl -tag -width attempts -compact
+.It Ar secs
 $B$O!":F$S@\B3$7$h$&$H$9$k$^$G$NIC?t$G$9!#(B
-$B0z?t$,(B
-.Sq random 
-$B$N>l9g$K$O!"BT$A;~4V$r(B 0 $BIC$+$i(B 30 $BIC$N4V$G%i%s%@%`$KA*$S$^$9!#(B
-.Sq nseconds
+$B0z?t$,%j%F%i%kJ8;zNs(B
+.Sq Li random 
+$B$N>l9g$K$O!"BT$A;~4V$r(B 1 $BIC0J>e$+$i(B 30 $BIC0J2<$N4V$G%i%s%@%`$KA*$S$^$9!#(B
+.It Ar inc
+$B$OIC?t$G$"$j!"(B
+$B?75,$K%@%$%d%k$9$k$H$-$K(B
+.Ar secs
+$B$K2C$($i$l$^$9!#(B
+$B$3$N%?%$%`%"%&%HCM$,(B
+.Ar secs
+$B$KLa$k$N$O!"@\B3$,@.8yN"$K3NN)$7$?8e$@$1$G$9!#(B
+.Ar inc
+$B$N%G%U%)%k%HCM$O(B 0 $B$G$9!#(B
+.It Ar maxinc
+$B$O!"(B
+.Nm
+$B$,(B
+.Ar secs
+$B$rA}2C$5$;$k:GBg2s?t$G$9!#(B
+.Ar maxinc
+$B$N%G%U%)%k%HCM$O(B 10 $B$G$9!#(B
+.It Ar next
 $B$OEEOCHV9f%j%9%H$NCf$N<!$NHV9f$r%@%$%d%k$9$kA0$KBT$DIC?t$G$9!#(B(
 .Dq set phone
 $B%3%^%s%I$r;2>H$7$F$/$@$5$$(B)$B!#$3$l$N%G%U%)%k%H$O(B 3 $BIC$G$9!#(B
-$B7+$jJV$7$^$9$,!"0z?t$,(B
-.Sq random 
-$B$N>l9g$K$O!"BT$A;~4V$r(B 0 $BIC$+$i(B 30 $BIC$N4V$G%i%s%@%`$KA*$S$^$9!#(B
-.Sq dial_attempts
+$B7+$jJV$7$^$9$,!"0z?t$,%j%F%i%kJ8;zNs(B
+.Sq Li random 
+$B$N>l9g$K$O!"BT$A;~4V$r(B 1 $BIC0J>e(B 30 $BIC0J2<$N4V$G%i%s%@%`$KA*$S$^$9!#(B
+.It Ar attempts
 $B$O!"<u$1<h$C$?8D!9$NAw?.%Q%1%C%H$KBP$7$F!"2?2s@\B3$r;n$_$k$N$+$r<($9(B
 $B?t;z$G$9!#(B
-$B$3$N%Q%i%a!<%?$,>JN,$5$l$?>l9g$K$O!"0JA0$NCM$,$=$N$^$^;H$o$l$^$9!#(B
-.Sq dial_attempts
-$B$K(B 0 $B$,;XDj$5$l$?>l9g$K$O!"(B
-.Nm
-$B$O@\B3$G$-$k$^$G%@%$%d%k$rB3$1$^$9!#(B
+.It Ar attempts
+$B$K(B 0 $B$r;XDj$9$k$H!"@\B3$5$l$k$^$G;n$_$rB3$1$^$9!#(B
 .Bd -literal -offset indent
 set redial 10.3 4
 .Ed
@@ -794,9 +927,30 @@
 10 $BICBT$D$3$H$rI=$7$^$9!#(B
 $BJ#?t$NEEOCHV9f$,;XDj$5$l$F$$$k>l9g$G$b!"%H!<%?%k$N%@%$%d%k2s?t$O(B
 4 $B2s$N$^$^$G$9!#(B ($B$=$l$>$l$NHV9f$r(B 4 $B2s%@%$%d%k$9$k$N$G$O$"$j$^$;$s(B)$B!#(B
+.Pp
+$BBe$j$K!"(B
+.Pp
+.Bd -literal -offset indent
+set redial 10+10-5.3 20
+.Ed
+.Pp
+$B$O!"(B
+.Nm
+$B$K@\B3$r(B 20 $B2s;n$_$5$;$^$9!#:G=i$N;n$_$N8e$O!"(B
+.Nm
+$B$O(B 10 $BICBT$A$^$9!#(B
+$B<!$N;n$_$N8e$O(B 20 $BICBT$A$H$$$&$3$H$r!"(B
+6 $BHVL\$N;n$_$N8e$G$O(B 1 $BJ,BT$D$H$3$m$^$G9T$$$^$9!#(B
+$B<!$N(B 14 $B2s$NDd;_$O!"F1$8(B 1 $BJ,4V$H$J$j$^$9!#(B
+.Nm
+$B$,@\B3$7!"@ZCG$7$?8e!":FEY@\B3$K<:GT$7$?>l9g!"(B
+$B%?%$%`%"%&%HCM$O:FEY(B 10 $BIC$+$i3+;O$7$^$9!#(B
+.Pp
 $B%j%s%/$NN>C<$,(B
 .Nm
-$B$N%G%^%s%I%@%$%d%k%b!<%I$rMxMQ$7$F$$$k>l9g$O!"(B
+$B$N(B
+.Fl auto
+$B%@%$%d%k%b!<%I$rMxMQ$7$F$$$k>l9g$O!"(B
 $B%@%$%d%k4V3V$rJQ99$7$F$*$/$N$,NI$$$G$7$g$&!#(B
 $B$b$7!"%j%s%/$NN>C<$,F1$8%?%$%`%"%&%H;~4V$K@_Dj$5$l$F$$$F!"(B
 $B%j%s%/$,@Z$l$FN>J}$KAw?.BT$A$N%Q%1%C%H$,$"$C$?>l9g!"(B
@@ -1022,15 +1176,16 @@
 .Pa /etc/ppp/ppp.secret
 $B%U%!%$%k$N@_Dj$r9T$&I,MW$,$"$j$^$9!#(B
 $B$3$N%U%!%$%k$O!"%/%i%$%"%s%H$K$J$j$&$k%^%7%s$4$H$K(B 1 $B9T$r4^$_$^$9!#(B
-$B3F9T$O(B 4 $B$D$^$G$N%U%#!<%k%I$+$i$J$j$^$9(B:
-.Bd -literal -offset indent
-name key [hisaddr [label]]
-.Ed
+$B3F9T$O(B 5 $B$D$^$G$N%U%#!<%k%I$+$i$J$j$^$9(B:
+.Pp
+.Ar name Ar key Oo
+.Ar hisaddr Op Ar label Op Ar callback-number
+.Oc
 .Pp
 .Ar name
 $B$H(B
 .Ar key
-$B$O4|BT$5$l$k%/%i%$%"%s%H$r;XDj$7$^$9!#(B
+$B$O4|BT$5$l$k%/%i%$%"%s%H$N%f!<%6L>$H%Q%9%o!<%I$r;XDj$7$^$9!#(B
 .Ar key
 $B$,(B
 .Dq \&*
@@ -1041,7 +1196,7 @@
 $B$r8!:w$7$^$9!#(B
 .Pa ppp.secret
 $B$NG!2?$J$k(B
-.Ar name No / Ar key
+.Ar name Ns No / Ar key
 $B$NAH$_9g$o$;$K$*$$$F$bE,@Z$G$J$$JVEz$r%/%i%$%"%s%H$,M?$($k>l9g!"(B
 $BG'>Z$O<:GT$7$^$9!#(B
 .Pp
@@ -1062,6 +1217,24 @@
 $B$H(B
 .Pa ppp.linkdown
 $B$N8eB3$N%Q!<%:$K1F6A$,$"$j$^$9!#(B
+.Pp
+$BG'>Z$K@.8y$7(B
+.Ar callback-number
+$B$,;XDj$5$l(B
+.Dq set callback
+$B$,(B
+.Pa ppp.conf
+$B$G;XDj$5$l$?>l9g!"%/%i%$%"%s%H$O;XDj$5$l$?HV9f$G%3!<%k%P%C%/$5$l$^$9!#(B
+CBCP $B$,;HMQ$5$l$k>l9g!"(B
+.Dq set cbcp
+$B%3%^%s%I$KEO$9$N$HF1MM$N7A<0$G!"(B
+.Ar callback-number
+$B$K$b$^$?HV9f$N%j%9%H$^$?$O(B
+.Dq \&*
+$B$r4^$`$3$H$,2DG=$G$9!#(B
+$B$3$NCM$O!"(B
+.Nm
+$B$G8eB3$9$k(B CBCP $B%U%'!<%:$G;HMQ$7$^$9!#(B
 .Sh PPP $B%*!<%P(B TCP ($BJLL>(B: $B%H%s%M%j%s%0(B)
 $B%7%j%"%k%j%s%/>e0J30$N(B
 .Nm
@@ -1238,16 +1411,16 @@
 .Ar name
 .Ar rule-no
 .Ar action
-.Op Ar src_addr Ns Op / Ns Ar width
+.Oo
+.Ar src_addr Ns Op / Ns Ar width
 .Op Ar dst_addr Ns Op / Ns Ar width
-[
-.Ar proto
-.Op src Op Ar cmp No Ar port
-.Op dst Op Ar cmp No Ar port
+.Oc
+.Oo Ar proto Op src Ar cmp port
+.Op dst Ar cmp port
 .Op estab
 .Op syn
 .Op finrst
-]
+.Oc
 .Bl -enum
 .It
 .Ar name
@@ -1329,7 +1502,7 @@
 $B$r;H$C$F$/$@$5$$!#(B
 .El
 .Pp
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample .
 $B$r;2>H$7$F$/$@$5$$!#(B
 .Sh $B%"%$%I%k%?%$%^$N@_Dj(B
 $B%"%$%I%k%?%$%^$rD4$Y$?$j(B/$B@_Dj$9$k$?$a$K$O!"$=$l$>$l(B
@@ -1414,7 +1587,14 @@
 .Dq set ifaddr
 $B%3%^%s%I$r;}$C$F$$$^$9!#(B
 .Bd -literal -offset indent
-set ifaddr [src_addr [dst_addr [netmask [trigger_addr]]]]
+.No set ifaddr Oo Ar src_addr Ns
+.Op / Ns Ar \&nn
+.Oo Ar dst_addr Ns Op / Ns Ar \&nn
+.Oo Ar netmask
+.Op Ar trigger_addr
+.Oc
+.Oc
+.Oc
 .Ed
 .Pp
 $B$3$3$G!"(B
@@ -1469,13 +1649,16 @@
 .Pp
 $B$3$l$O!"N>B&$,4{$K7h$^$C$?(B IP $B%"%I%l%9$r;}$C$F$$$k>l9g$K$O(B
 $B$&$^$/$$$-$^$9$,!"B?$/$N>l9g!"0lJ}$,$9$Y$F$N(B IP $B%"%I%l%9$r@)8f$9$k(B
-$B%5!<%P$H$7$FF0:n$7$F$*$j!"$b$&0lJ}$O$=$NJ}?K$K=>$o$J$/$F$O$J$j$^$;$s!#(B
-$B$h$j=@Fp$JF0:n$r$5$;$k$?$a$K!"(B`ifaddr' $BJQ?t$N(B IP $B%"%I%l%9;XDj$r(B
-$B$b$C$H4K$d$+$K$9$k$3$H$,2DG=$G$9(B:
+$B%5!<%P$H$7$FF0:n$7$F$*$j!"$b$&0lJ}$O$=$NJ}?K$K=>$$$^$9!#(B
+$B$h$j=@Fp$JF0:n$r$5$;$k$?$a$K!"(B
+.Dq set ifaddr
+$B%3%^%s%I$G(B IP $B%"%I%l%9;XDj$r$b$C$H4K$d$+$K$9$k$3$H$,2DG=$G$9(B:
 .Pp
 .Dl set ifaddr 192.244.177.38/24 192.244.177.2/20
 .Pp
-$B%9%i%C%7%e(B (/) $B$KB3$/?t;z$O!"$3$N(B IP $B%"%I%l%9$G0UL#$N$"$k%S%C%H$N?t$r(B
+$B%9%i%C%7%e(B
+.Pq Dq /
+$B$KB3$/?t;z$O!"$3$N(B IP $B%"%I%l%9$G0UL#$N$"$k%S%C%H$N?t$r(B
 $BI=8=$7$F$$$^$9!#>e$NNc$O<!$N$3$H$r<($7$F$$$^$9!#(B
 .Pp
 .Bl -bullet -compact
@@ -1505,10 +1688,18 @@
 .Dq set phone
 $B%3%^%s%I$r;H$C$F!"%@%$%d%k%9%/%j%W%H$K%W%m%P%$%@$NEEOCHV9f$r5-=R$7$^$9!#(B
 $B%@%$%d%k$d%j%@%$%d%k$K;HMQ$9$kEEOCHV9f$O!"(B
-$B%Q%$%W(B (|) $B$^$?$O%3%m%s(B (:) $B$G6h@Z$C$F(B
-$BJ#?t;XDj$9$k$3$H$,$G$-$^$9!#Nc$($P!"<!$N$h$&$K$J$j$^$9!#(B
+$B%Q%$%W(B
+.Pq Dq \&|
+$B$^$?$O%3%m%s(B
+.Pq Dq \&:
+$B$G6h@Z$C$FJ#?t;XDj$9$k$3$H$,$G$-$^$9!#Nc$($P!"<!$N$h$&$K$J$j$^$9!#(B
+.Pq Dq \&: :
 .Bd -literal -offset indent
-set phone "111[|222]...[:333[|444]...]..."
+.No set phone Ar telno Ns Xo
+.Oo \&| Ns Ar backupnumber
+.Oc Ns ... Ns Oo : Ns Ar nextnumber
+.Oc Ns ...
+.Xc
 .Ed
 .Pp
 $B:G=i$N%Q%$%W$G6h@Z$i$l$?%j%9%H$NHV9f$O!"(B
@@ -1586,7 +1777,7 @@
 .Pp
 $B0lC6@\B3$,3NN)$5$l$k$H!"%m%0%$%s%9%/%j%W%H$,<B9T$5$l$^$9!#(B
 $B$3$N%9%/%j%W%H$O%@%$%d%k%9%/%j%W%H$HF1$8%9%?%$%k$G=q$+$l$^$9$,!"(B
-$B%Q%9%o!<%I$,%m%0$5$l$J$$$h$&$KCm0U$7$F$/$@$5$$(B:
+$B%Q%9%o!<%I$,5-O?$5$l$J$$$h$&$KCm0U$7$F$/$@$5$$(B:
 .Bd -literal -offset indent
 set authkey MySecret
 set login "TIMEOUT 15 login:-\\\\r-login: awfulhak \e
@@ -1616,13 +1807,14 @@
 .El
 .Pp
 .Dq set authkey
-(
+$B%3%^%s%I$N%m%0$OFCJL$JJ}K!$G$H$i$l$^$9!#(B
 .Ar command
-$B%m%0;HMQ;~$K$O(B) $B%3%^%s%I$N%m%0$OFCJL$JJ}K!$G$H$i$l!"(B(
-.Sq ********
-$B$H%m%0$5$l$^$9$N$G(B) $B<B:]$N%Q%9%o!<%I$,4m81$K$5$i$5$l$k$3$H$O$"$j$^$;$s!#(B
+$B$^$?$O(B
 .Ar chat
-$B%m%0;HMQ;~$K$O!"<B:]$N%Q%9%o!<%I$NBe$j$K(B '\\P' $B$H%m%0$5$l$^$9!#(B
+$B$N%m%0$,M-8z$J;~$O!"<B:]$N%Q%9%o!<%I$O5-O?$5$l$^$;$s!#(B
+$BBe$j$K(B
+.Sq ******** Ns
+$B$,5-O?$5$l$^$9!#(B
 .Pp
 $B%m%0%$%s%9%/%j%W%H$O%W%m%P%$%@$K$h$C$FBg$-$/0c$&$b$N$K$J$k$G$7$g$&!#(B
 $B;O$a$F$=$l$r@_Dj$9$k$H$-$K$O(B
@@ -1631,12 +1823,12 @@
 $BD4$Y$k$3$H$,$G$-$^$9!#(B
 .It
 $B%7%j%"%k2s@~$HDL?.B.EY$r;XDj$9$k$?$a$K$O(B
-.Dq set line
+.Dq set device
 $B$H(B
 .Dq set speed
 $B$r;H$$$^$9!#Nc$($P<!$N$h$&$K$J$j$^$9!#(B
 .Bd -literal -offset indent
-set line /dev/cuaa0
+set device /dev/cuaa0
 set speed 115200
 .Ed
 .Pp
@@ -1739,9 +1931,9 @@
 .El
 .Pp
 $B8=<B$NNc$r8+$?$$>l9g$K$O!"(B
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 $B$H(B
-.Pa /etc/ppp/ppp.linkup.sample
+.Pa /usr/share/examples/ppp/ppp.linkup.sample
 $B$r;2>H$7$F$/$@$5$$!#(B
 $B%i%Y%k(B pmdemand $B$O!"$[$H$s$I$N%W%m%P%$%@$G;HMQ$G$-$k$G$7$g$&!#(B
 .Sh $B%m%05!G=(B
@@ -1818,8 +2010,11 @@
 ($B$D$^$j!"%^%9%/$5$l$J$$7Y9p!"%(%i!<$HCm0U$N$_=PNO(B) $B$G$9!#(B
 .Pp
 .Dq set log Op local
-$B$X$N:G=i$N0z?t$,(B '+' $B$+(B  '-' $B$NJ8;z$G;O$^$k>l9g!"(B
-$B8=:_$N%m%0%l%Y%k$r>C5n$;$:$K=$@5$7$^$9!#Nc$($P(B:
+$B$X$N:G=i$N0z?t$,(B
+.Sq +
+$B$+(B
+.Sq -
+$B$NJ8;z$G;O$^$k>l9g!"8=:_$N%m%0%l%Y%k$r>C5n$;$:$K=$@5$7$^$9!#Nc$($P(B:
 .Bd -literal -offset indent
 PPP ON awfulhak> set log phase
 PPP ON awfulhak> show log
@@ -1837,7 +2032,7 @@
 $B$G$O@)8f$G$-$^$;$s!#(B
 .Pp
 .Ar Warning
-$B%l%Y%k$OFCJL$G!"%m!<%+%k$KI=<(2DG=$J>l9g$K$O%m%0$5$l$^$;$s!#(B
+$B%l%Y%k$OFCJL$G!"%m!<%+%k$KI=<(2DG=$J>l9g$K$O5-O?$5$l$^$;$s!#(B
 .Sh $B%7%0%J%k%O%s%I%j%s%0(B
 .Nm
 $B$O<!$N%7%0%J%k$r07$$$^$9(B:
@@ -2066,7 +2261,7 @@
 (Address and Control Field Compression) $B$r0UL#$7$^$9!#(B
 LCP $B%Q%1%C%H0J30$OHs>o$KNI$/;w$?%U%#!<%k%I$r;}$A$^$9$N$G!"(B
 $B4JC1$K05=L2DG=$G$9!#(B
-.It chap
+.It chap Ns Op \&05
 $B%G%U%)%k%H(B: disable $B$+$D(B accept$B!#(B
 CHAP $B$O%A%c%l%s%88r49G'>Z%W%m%H%3%k(B
 (Challenge Handshake Authentication Protocol) $B$r0UL#$7$^$9!#(B
@@ -2179,6 +2374,19 @@
 $B%3%^%s%I$N;HMQ$K$h$C$F>e=q$-$5$l$F$$$J$$>l9g$K$O!"1~Ez$O(B
 .Pa /etc/resolv.conf
 $B$+$i:N$i$l$^$9!#(B
+.It LANMan|chap80lm
+$B%G%U%)%k%H(B: disable $B$+$D(B accept$B!#(B
+$B$3$NG'>Z%W%m%H%3%k$N;HMQ$O4+$a$i$l$^$;$s!#(B
+$BC10l$N(B CHAP $B%?%$%W(B (0x80) $B$rAu$C$F!"(B
+2 $B$D$N0[$C$?5!9=(B (LANMan $B$H(B NT) $B$r<BAu$9$k$3$H$K$h$j!"(B
+$BItJ,E*$KG'>Z%W%m%H%3%k$r?/32$7$F$$$k$+$i$G$9!#(B
+.Dq LANMan
+$B$OC1=c$J(B DES $B0E9f2=5!9=$r;HMQ$9$k$b$N$G$"$j!"(B
+CHAP $BBeBX$H$7$F$O:GDc$N0BA4@-$N$b$N$G$9(B ($B$=$l$G$b(B PAP $B$h$j$O0BA4$G$9(B)$B!#(B
+.Pp
+$B99$J$k>\:Y$O8e=R$N(B
+.Dq MSChap
+$B$N5-=R$r;2>H$7$F$/$@$5$$!#(B
 .It lqr
 $B%G%U%)%k%H(B: disable $B$+$D(B accept$B!#(B
 $B$3$N%*%W%7%g%s$O%j%s%/IJ<AMW5a(B (Link Quality Request) $B$rAw?.$9$k!"(B
@@ -2210,6 +2418,43 @@
 $B%l%Y%k$G5-O?$7!"2s@~@ZCG$N860x$,@\B3Aj<j$K$"$k$b$N$H$7$F!"E,Ev$J(B
 .Dq reconnect
 $BCM$r;HMQ$7$^$9!#(B
+.It MSChap|chap80nt
+$B%G%U%)%k%H(B: disable $B$+$D(B accept$B!#(B
+$B$3$NG'>Z%W%m%H%3%k$N;HMQ$O4+$a$i$l$^$;$s!#(B
+$BC10l$N(B CHAP $B%?%$%W(B (0x80) $B$rAu$C$F!"(B
+2 $B$D$N0[$C$?5!9=(B (LANMan $B$H(B NT) $B$r<BAu$9$k$3$H$K$h$j!"(B
+$BItJ,E*$KG'>Z%W%m%H%3%k$r?/32$7$F$$$k$+$i$G$9!#(B
+$BI8=`$N(B CHAP ($B%?%$%W(B 0x05) $B$KHs>o$KNI$/;w$F$$$^$9$,!"(B
+$B%A%c%l%s%8$r8GDj(B 8 $B%P%$%HD9$GH/9T$7!"(B
+$BI8=`$N(B MD5 $B5!9=$G$O$J$/(B
+MD4 $B$H(B DES $B$rAH$_9g$o$;$F%A%c%l%s%8$r0E9f2=$9$k$H$3$m$,0c$$$^$9!#(B
+LANman $BMQ$N(B CHAP $B%?%$%W(B 0x80 $B$b$^$?%5%]!<%H$5$l$F$$$^$9(B -
+$B>\:Y$O(B
+.Dq enable LANMan
+$B$r;2>H$7$F$/$@$5$$!#(B
+.Pp
+.Dq LANMan
+$B$H(B
+.Dq NT
+$B$NN>J}$,(B CHAP $B%?%$%W(B 0x80 $B$r;HMQ$7$^$9$N$G!"N>J}$r(B
+.Dq enable
+$B$K$7$FG'>Z<T$H$7$FF0:n$9$k$H$-$K$O!"(B
+$BAj<j$,8m$C$?J}$N%W%m%H%3%k$r;HMQ$7$F1~Ez$7$?>l9g$K$O!"(B
+.Nm
+$B$O:GBg(B 3 $B2sAj<j$K:F%A%c%l%s%8$7$^$9!#(B
+$B$3$l$K$h$j!"Aj<j$,N>J}$N%W%m%H%3%k$r;HMQ$9$k5!2q$rM?$($^$9!#(B
+.Pp
+$B5U$K!"N>%W%m%H%3%k$r(B
+.Dq enable
+$B$K$7$F(B
+.Nm
+$B$,HoG'>Z<T$H$J$k>l9g!"%A%c%l%s%8$KEz$($k$?$S$K;HMQ%W%m%H%3%k$r8r49$7$^$9!#(B
+.Pp
+$BCm<a(B: LANMan $B$N$_$,(B enable $B$K$5$l$?>l9g!"(B
+.Xr pppd 8
+($B%P!<%8%g%s(B 2.3.5) $B$OHoG'>Z<T$H$7$F$O8m$C$?F0:n$r9T$$$^$9!#(B
+NT $B$H(B LANMan $B$NN>J}$N1~Ez$r9T$$$^$9$,!"(B
+NT $B$N1~Ez$N$_;HMQ$9$Y$-$3$H$b;X<($7$F$7$^$&$N$G$9!#(B
 .It pap
 $B%G%U%)%k%H(B: disable $B$+$D(B accept$B!#(B
 PAP $B$O%Q%9%o!<%IG'>Z%W%m%H%3%k(B (Password Authentication Protocol) $B$r(B
@@ -2227,6 +2472,8 @@
 .Pa /etc/ppp.secret
 $B$K=q$/I,MW$,$"$j$^$9(B ($B$?$@$7!"8e=R$N(B
 .Dq passwdauth
+$B$H(B
+.Dq set radius
 $B%*%W%7%g%s$r;2>H(B)$B!#(B
 .Pp
 $B%/%i%$%"%s%H$H$7$F(B PAP $B$r;HMQ$9$k>l9g!"(B
@@ -2314,6 +2561,16 @@
 $B$3$N%*%W%7%g%s$r(B enable $B$K$9$k$3$H$K$h$j!"(B
 .Nm
 $B$KAj<j$N$?$a$KBeM}(B ARP $B$r$5$;$^$9!#(B
+.Dv HISADDR
+$B$H(B
+.Dv HISADDR
+$B$,$$$k%m!<%+%k%M%C%H%o!<%/$N(B
+.Dv MAC
+$B%"%I%l%9$r;HMQ$7$F!"(B
+.Nm
+$B$,(B ARP $BI=$KC10l%(%s%H%j$r:n@.$9$k$3$H$r0UL#$7$^$9!#(B
+.Dv HISADDR
+$B$,(B LAN $B$+$i$N%"%I%l%9$G$O$J$$>l9g!"BeM}%(%s%H%j$O:n@.$G$-$^$;$s!#(B
 .It proxyall
 $B%G%U%)%k%H(B: disable$B!#(B
 $B$3$N%*%W%7%g%s$r(B enable $B$K$9$k$3$H$K$h$j!"(B
@@ -2322,6 +2579,13 @@
 $BDI2C$5$l$k%(%s%H%j$O!"(B
 tun $B%$%s%?%U%'!<%9$K$h$C$F%k!<%F%#%s%0$5$l$k(B
 $B$9$Y$F$N%/%i%9(B C $B$b$7$/$O$=$l0J2<$N%5%V%M%C%H$NCf$N!"A4(B IP $B%"%I%l%9$G$9!#(B
+.Pp
+$BBeM}(B arp $B%(%s%H%j$O!"(B
+.Dq add
+$B%3%^%s%I$K$h$C$FDI2C$5$l$?%9%F%#%C%-!<7PO)$KBP$7$F$N$_:n@.$5$l$^$9!#(B(
+.Dq set ifaddr
+$B%3%^%s%I$K$h$C$F:n@.$5$l$?(B)
+$B%$%s%?%U%'!<%9%"%I%l%9<+?H$KBP$7$F$O!"BeM}(B arp $B%(%s%H%j$O:n@.$5$l$^$;$s!#(B
 .It sroutes
 $B%G%U%)%k%H(B: enable$B!#(B
 .Dq add
@@ -2398,7 +2662,12 @@
 $B$b(B disable $B$7$^$9!#(B
 .El
 .Pp
-.It add[!] Ar dest[/nn] [mask] gateway
+.It add Ns Xo
+.Op \&!
+.Ar dest Ns Op / Ns Ar nn
+.Op Ar mask
+.Op Ar gateway
+.Xc
 .Ar dest
 $B$O08@h(B IP $B%"%I%l%9$G$9!#(B
 $B%M%C%H%^%9%/$O(B
@@ -2463,7 +2732,10 @@
 $B$3$N5!G=$O(B
 .Dq disable sroutes
 $B$r;HMQ$9$k$3$H$GL58z$K$G$-$^$9!#(B
-.It allow Ar command Op Ar args
+.It allow user Ns Xo
+.Op s
+.Ar logname Ns No ...
+.Xc
 $B$3$N%3%^%s%I$O(B
 .Nm
 $B$H@_Dj%U%!%$%k$X$N%"%/%;%9$r@)8f$7$^$9!#(B
@@ -2504,12 +2776,17 @@
 $B%f!<%6(B
 .Sq *
 $B$,;XDj$5$l$k$H!"A4%f!<%6$K%"%/%;%9$,5v$5$l$^$9!#(B
-.It allow mode[s] Ar modelist...
+.It allow mode Ns Xo
+.Op s
+.Ar mode Ns No ...
+.Xc
 $B%G%U%)%k%H$G$OA4(B
 .Nm
 $B%b!<%I$,;HMQ2DG=$G$9!#(B
 $B$3$N%3%^%s%I$,;HMQ$5$l$k$H!"(B
-$B$3$N%3%^%s%I$,;XDj$5$l$?%i%Y%k$N%m!<%I$K5v$5$l$k%"%/%;%9%b!<%I$,@)8B$5$l$^$9!#(B
+$B$3$N%3%^%s%I$,;XDj$5$l$?%i%Y%k$N%m!<%I$K5v$5$l$k%"%/%;%9(B
+.Ar mode
+$B$,@)8B$5$l$^$9!#(B
 .Dq allow users
 $B%3%^%s%I$HF1MM!"(B
 $B3F(B
@@ -2540,13 +2817,36 @@
 $B$"$J$?$N%7%9%F%`$G%(%$%j%"%7%s%0$,M-8z$K$J$k$H(B ($B%3%s%Q%$%k;~$K:o=|$G$-$^$9(B)$B!"(B
 $B<!$N%3%^%s%I$,;HMQ2DG=$H$J$j$^$9(B:
 .Bl -tag -width XX
-.It alias enable [yes|no]
+.It alias enable Op yes|no
 $B%(%$%j%"%7%s%0$rM-8z$b$7$/$OL58z$K$7$^$9!#(B
 .Fl alias
 $B%3%^%s%I%i%$%s%U%i%0$O(B
 .Dq alias enable yes
 $B$HF1$80UL#$G$9!#(B
-.It alias port Op Ar proto targetIP:targetPORT [aliasIP:]aliasPORT
+.It alias addr Op Ar addr_local addr_alias
+$B$3$N%3%^%s%I$K$O!"(B
+.Ar addr_alias
+$B$N%G!<%?$r(B
+.Ar addr_local
+$B$X%j%@%$%l%/%H$7$^$9!#(B
+$B>/?t$N<B(B IP $B%"%I%l%9$r;}$A!"(B
+$B$=$l$i$r%2!<%H%&%'%$$N8e$NFCDj$N%^%7%s$K%^%C%W$7$?$$>l9g$KM-MQ$G$9!#(B
+.It alias deny_incoming Op yes|no
+yes $B$K@_Dj$9$k$H!"(B
+$B%U%!%$%"%&%)!<%k$H$[$\F1MM$K%Q%1%C%H$rMn$H$9$3$H$K$h$j!"(B
+$B$3$N%3%^%s%I$OA4F~NO@\B3$r5qH]$7$^$9!#(B
+.It alias help|?
+$B$3$N%3%^%s%I$O!";HMQ2DG=$J(B alias $B%3%^%s%I$N$^$H$a$rI=<($7$^$9!#(B
+.It alias log Op yes|no
+$B$3$N%*%W%7%g%s$O!"(Balias $B$NMM!9$JE}7W$H>pJs$,%U%!%$%k(B
+.Pa /var/log/alias.log
+$B$K5-O?$5$l$k$h$&$K$7$^$9!#(B
+.It alias port Xo
+.Op Ar proto
+.Ar targetIP Ns No \&: Ns Ar targetPORT
+.Op Ar aliasIP Ns No \&: Ns
+.Ar aliasPORT
+.Xc
 $B$3$N%3%^%s%I$K$h$j!"(B
 $B%^%7%s(B
 .Ar aliasIP
@@ -2557,6 +2857,8 @@
 $B$N(B
 .Ar targetPORT
 $B$X%j%@%$%l%/%H$7$^$9!#(B
+.Ar aliasIP
+$B$N%G%U%)%k%H$O!"8=:_$N%$%s%?%U%'!<%9%"%I%l%9$G$9!#(B
 .Ar proto
 $B$O(B
 .Sq tcp
@@ -2565,37 +2867,51 @@
 $B$N$$$:$l$+$G!";XDj$7$?%W%m%H%3%k$N@\B3$N$_%^%C%A$7$^$9!#(B
 $B$"$J$?$N%2!<%H%&%'%$$N8e$N%^%7%s$G%$%s%?!<%M%C%HEEOCEy$r<B9T$7$?$$>l9g$K!"(B
 $B$3$N%*%W%7%g%s$OM-MQ$G$9!#(B
-.It alias addr Op Ar addr_local addr_alias
-$B$3$N%3%^%s%I$K$h$j!"(B
-.Ar addr_alias
-$B$X$N%G!<%?$r(B
-.Ar addr_local
-$B$X%j%@%$%l%/%H$7$^$9!#(B
-$B>/?t$N<B(B IP $B%"%I%l%9$r;}$C$F$$$F!"$3$l$i$r$"$J$?$N%2!<%H%&%'%$$N8e$N(B
-$BFCDj$N%^%7%s$K%^%C%W$7$?$$>l9g$KM-MQ$G$9!#(B
-.It alias deny_incoming [yes|no]
-yes $B$K@_Dj$7$?>l9g!"%U%!%$%"%&%)!<%k$,%Q%1%C%H$rMn$9$N$HF1MM$K!"(B
-$B$9$Y$F$NF~NO$N@\B3$r5qH]$7$^$9!#(B
-.It alias help|?
-$B$3$N%3%^%s%I$K$h$j!"(B
-$B;HMQ2DG=$J%(%$%j%"%9%3%^%s%I$N$^$H$a$rI=<($7$^$9!#(B
-.It alias log [yes|no]
-$B$3$N%*%W%7%g%s$r;XDj$9$k$3$H$K$h$j!"(B
-$B<o!9$N%(%$%j%"%7%s%0$NE}7W$H>pJs$r!"%U%!%$%k(B
-.Pa /var/log/alias.log
-$B$K%m%0$7$^$9!#(B
-.It alias same_ports [yes|no]
+.It "alias pptp" Op Ar addr
+$B$9$Y$F$N(B
+.Em G Ns No eneral
+.Em R Ns No outing
+.Em E Ns No encapsulated
+.Pq Dv IPPROTO_GRE
+$B%Q%1%C%H$r!"%m!<%+%k%$%s%?%U%'!<%9%"%I%l%9$G$O$J$/(B
+.Ar addr
+$B$r;HMQ$9$k$3$H$K$h$j!"(B
+.Nm
+$B$K%(%$%j%"%9$5$;$^$9!#(B
+$B$3$l$O!"%^%7%s$NFbIt%M%C%H%o!<%/>e$G(B
+.Em P Ns No oint
+to
+.Em P Ns No oint
+.Em T Ns No unneling
+.Em P Ns No rotocol
+$B$N;HMQ$r5v$7$^$9!#(B
+.Pp
+.Ar addr
+$B$r;XDj$7$J$$$H!"(B
+.Dv PPTP
+$B%(%$%j%"%9$OL58z$K$J$j$^$9!#(B
+.It "alias proxy cmd" Ar arg Ns No ...
+$B$3$N%3%^%s%I$O!"(B
+.Nm
+$B$KFCDj$N@\B3$KBP$9$kBeM}$r$5$;!"(B
+$B$3$l$i$N@\B3$r;XDj$7$?%5!<%P$K%j%@%$%l%/%H$7$^$9!#(B
+$B;HMQ2DG=$J%3%^%s%I$K$D$$$F$N>\:Y$O(B
+.Xr libalias 3
+$B$N(B
+.Fn PacketAliasProxyRule
+$B$N5-=R$r;2>H$7$F$/$@$5$$!#(B
+.It alias same_ports Op yes|no
 $BM-8z$K$J$k$H!"(B
 $B%(%$%j%"%9%i%$%V%i%j$,=PNO%Q%1%C%H$N%]!<%HHV9f$rJQ99$7$h$&$H$9$k$3$H$r(B
 $B;_$a$5$;$^$9!#(B
 RPC $B$d(B LPD $B$H$$$C$?!"(B
 $B%&%'%k%N%&%s%]!<%H(B (well known port) $B$+$i$N@\B3$rMW5a$9$k(B
 $B%W%m%H%3%k$r%5%]!<%H$9$k$N$KM-MQ$G$9!#(B
-.It alias use_sockets [yes|no]
+.It alias use_sockets Op yes|no
 $BM-8z$K$J$k$H!"(B
 $B%(%$%j%"%9%i%$%V%i%j$K%=%1%C%H$r:n@.$5$;!"(B
 $B@5$7$$(B ftp $B%G!<%?F~NO$d(B IRC $B@\B3$rJ]>Z$G$-$k$h$&$K$J$j$^$9!#(B
-.It alias unregistered_only [yes|no]
+.It alias unregistered_only Op yes|no
 $BEPO?$5$l$F$$$J$$Aw?.85%"%I%l%9$N=PNO%Q%1%C%H$N$_$r!"JQ99$7$^$9!#(B
 RFC1918 $B$K$h$k$H!"EPO?$5$l$F$$$J$$Aw?.85%"%I%l%9$O(B
 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 $B$G$9!#(B
@@ -2605,7 +2921,9 @@
 .Pa README.alias
 $B%U%!%$%kCf$G$b5DO@$5$l$F$$$^$9!#(B
 .Pp
-.It [!]bg Ar command
+.It Op \&! Ns Xo
+.No bg Ar command
+.Xc
 $B;XDj$7$?(B
 .Ar command
 $B$r!"<!$N8l$rCV49$7$?8e$K!"%P%C%/%0%i%&%s%I$G<B9T$7$^$9(B:
@@ -2667,7 +2985,10 @@
 .Dq link
 $B%3%^%s%I$r;2>H(B)$B!#(B
 $BBh(B 2 $B0z?t$,M?$($i$l$J$$>l9g!"$9$Y$F$NCM$,%/%j%"$5$l$^$9!#(B
-.It clone Ar name[,name]...
+.It clone Ar name Ns Xo
+.Op \&, Ns Ar name Ns
+.No ...
+.Xc
 $B;XDj$5$l$?%j%s%/$rJ#@=$7!"0z?t$N(B
 .Ar name
 $B$K4XO"$E$1$??7$7$$%j%s%/$r:n@.$7$^$9!#(B
@@ -2682,7 +3003,7 @@
 $B%G%U%)%k%H$N%j%s%/L>$O(B
 .Dq deflink
 $B$G$9!#(B
-.It close Op lcp|ccp[!]
+.It close Op lcp|ccp Ns Op \&!
 $B0z?t$,M?$($i$l$J$$$H!"E,@Z$J%W%m%H%3%kAX$,%@%&%s$7!"%j%s%/$,JD$8$i$l$^$9!#(B
 .Dq lcp
 $B$,;XDj$5$l$k$H(B LCP $BAX$,%@%&%s$7$^$9$,!"(B
@@ -2707,7 +3028,10 @@
 $B8e=R$N(B
 .Dq quit
 $B$r;2>H$7$F$/$@$5$$!#(B
-.It delete[!] Ar dest
+.It delete Ns Xo
+.Op \&!
+.Ar dest
+.Xc
 $B$3$N%3%^%s%I$O;XDj$7$?(B
 .Ar dest
 IP $B%"%I%l%9$N7PO)$r:o=|$7$^$9!#(B
@@ -2760,7 +3084,17 @@
 $BMxMQ2DG=$J%3%^%s%I$r%j%9%H$7$^$9!#(B
 .Ar command
 $B$r;XDj$7$?>l9g!"$3$N%3%^%s%I$N;HMQJ}K!$rI=<($7$^$9!#(B
-.It iface Ar command Op args
+.It iface add Ns Xo
+.Op \&!
+.Ar addr Ns Op / Ns Ar bits
+.Op Ar peer
+.Xc
+.It iface add Ns Xo
+.Op \&!
+.Ar addr
+.Ar mask
+.Ar peer
+.Xc
 $B$3$N%3%^%s%I$O!"(B
 .Nm ppp
 $B$,;HMQ$9$k%$%s%?%U%'!<%9$r@)8f$7$^$9!#(B
@@ -2807,7 +3141,11 @@
 .Fl auto
 $B%b!<%I$G$b$J$$>l9g!"A4%$%s%?%U%'!<%9%"%I%l%9$,:o=|$5$l$^$9!#(B
 .Pp
-.It iface delete[!]|rm[!] Ar addr
+.It iface delete Ns Xo
+.Op \&! Ns
+.No |rm Ns Op \&!
+.Ar addr
+.Xc
 $B$3$N%3%^%s%I$O!";XDj$7$?(B
 .Ar addr
 $B$r%$%s%?%U%'!<%9$+$i:o=|$7$^$9!#(B
@@ -2827,7 +3165,11 @@
 .Ar sub-command
 $BIU$-$G5/F0$9$k$H!";XDj$7$?(B sub-command $B$N=q<0$N$_$rI=<($7$^$9!#(B
 .El
-.It [data]link Ar name[,name...] command Op Ar args
+.It Op data Ns Xo
+.No link
+.Ar name Ns Op , Ns Ar name Ns
+.No ... Ar command Op Ar args
+.Xc
 $B%3%^%s%I$,1F6A$rM?$($k%j%s%/$rFCDj$7$?$$>l9g$K!"$3$N%3%^%s%I$r(B
 $BG$0U$NB>$N%3%^%s%I$N%W%l%U%#%C%/%9$H$7$F;H$&$3$H$,$G$-$^$9!#(B
 $B$3$l$O%^%k%A%j%s%/%b!<%I$G(B
@@ -2846,7 +3188,9 @@
 $B$N>l9g$K$O!"(B
 .Ar command
 $B$O$9$Y$F$N%j%s%/$KBP$7$F<B9T$5$l$^$9!#(B
-.It load Op Ar label ...
+.It load Op Ar label Ns Xo
+.No ...
+.Xc
 .Pa ppp.conf
 $B%U%!%$%k$+$i;XDj$5$l$?(B
 .Dq label ($BJ#?t;XDj2D(B)
@@ -2904,10 +3248,10 @@
 .Ar command
 $B%m%0$,M-8z$G$b!"CM(B
 .Ar pass
-$B$O%m%0$5$l$:!"J8;zNs(B
+$B$O5-O?$5$l$:!"J8;zNs(B
 .Sq ********
-$B$,%m%0$5$l$^$9!#(B
-.It quit|bye [all]
+$B$,5-O?$5$l$^$9!#(B
+.It quit|bye Op all
 .Dq quit
 $B$,@)8f@\B3$b$7$/$O%3%^%s%I%U%!%$%k$+$i<B9T$5$l$k$H!"(B
 ppp $B$O$9$Y$F$N@\B3$rJD$8$?8e$K=*N;$7$^$9!#$=$NB>$N>l9g!"(B
@@ -2940,7 +3284,10 @@
 $B$N$$$:$l$+$KJQ99$9$k$H!"%m%0%U%!%$%k$N2DFI@-$,8~>e$9$k$+$bCN$l$^$;$s!#(B
 .It save
 $B$3$N%*%W%7%g%s$O(B ($B$^$@(B) $B<BAu$5$l$F$$$^$;$s!#(B
-.It set[up] Ar var value
+.It set Ns Xo
+.No Op up
+.Ar var value
+.Xc
 $B$3$N%*%W%7%g%s$O<!$K<($9JQ?t$N@_Dj$N$?$a$K;HMQ$7$^$9(B:
 .Bl -tag -width XX
 .It set accmap Ar hex-value
@@ -2954,28 +3301,85 @@
 XON/XOFF $B$K$D$$$F$O(B
 .Dq set accmap 000a0000
 $B$r;HMQ$7$^$9!#(B
-.It set authkey|key Ar value
+.It set Op auth Ns Xo
+.No key Ar value
+.Xc
 $B%/%i%$%"%s%H%b!<%I$G$N(B PAP $B$^$?$O(B CHAP $B$N8r>D$G;HMQ$5$l$k(B
 $BG'>Z%-!<(B ($B$b$7$/$O%Q%9%o!<%I(B) $B$r!";XDj$7$?CM$K@_Dj$7$^$9!#(B
-$B%@%$%d%k$b$7$/$O%m%0%$%s%9%/%j%W%H$N(B '\\P' $B%7!<%1%s%9(B
-$B$G;HMQ$5$l$k%Q%9%o!<%I$r;XDj$7$^$9$,!"(B
-$B<B:]$N%Q%9%o!<%I$,%m%0$5$l$k$3$H$rKI$.$^$9!#(B
+$B%@%$%d%k$^$?$O%m%0%$%s%9%/%j%W%H$N(B
+.Sq \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\P
+$B%7!<%1%s%9$G;HMQ$9$k%Q%9%o!<%I$b$^$?;XDj$7$^$9!#(B
+$B$3$l$K$h$j<B:]$N%Q%9%o!<%I$O5-O?$5$l$^$;$s!#(B
 .Ar command
-$B%m%0$,M-8z$J>l9g!"%;%-%e%j%F%#$N4QE@$+$i!"(B
+$B$^$?$O(B
+.Ar chat
+$B$N%m%0$,M-8z$J>l9g!"%;%-%e%j%F%#$N4QE@$+$i!"(B
 .Ar value
 $B$O(B
 .Sq ********
-$B$H$7$F%m%0$5$l$^$9!#(B
+$B$H$7$F5-O?$5$l$^$9!#(B
+.Pp
+.Ar value
+$B$N:G=i$NJ8;z$,%(%/%9%/%i%a!<%7%g%s%^!<%/(B
+.Pq Dq \&
+$B$N>l9g!"(B
+.Nm
+$B$O;D$j$NJ8;zNs$r!"(B
+.Dq authname
+$B$H(B
+.Dq authkey
+$B$NCM$r3NDj$9$k$?$a$K<B9T$9$Y$-%W%m%0%i%`$H$7$F07$$$^$9!#(B
+.Pp
+.Dq \&!
+$B$rL5;k$7!"A0=R$N(B
+.Dq !bg
+$B%3%^%s%I$HF1MM$KFC<l$JL>A0$rF1MM$KCV49$7$J$,$i!"(B
+.Ar value
+$B$O<B9T$9$Y$-%W%m%0%i%`$H$7$F%Q!<%:$5$l$^$9!#(B
+$B%W%m%0%i%`$r<B9T$9$k$H!"(B
+.Nm
+$B$O$3$N%W%m%0%i%`$KBP$7$F(B 3 $B9T$NF~NO$rM?$($^$9!#(B
+$B3F9T$O2~9TJ8;z$G=*N;$7$F$$$^$9(B:
+.Bl -bullet
+.It
+CHAP $B%A%c%l%s%8$K4^$a$FAw$i$l$k%[%9%HL>!#(B
+.It
+CHAP $B%A%c%l%s%8$K4^$a$FAw$i$l$k%A%c%l%s%8J8;zNs!#(B
+.It
+$B%m!<%+%k$KDj5A$5$l$?(B
+.Dq authname
+$B!#(B
+.El
+.Pp
+2 $B9T$N=PNO$,4|BT$5$l$F$$$^$9(B:
+.Bl -bullet
+.It
+CHAP $B1~Ez$H6&$KAw$k$Y$-(B
+.Dq authname
+$B!#(B
+.It
+$B%A%c%l%s%8$HMW5a(B ID $B$G0E9f2=$7$?(B
+.Dq authkey
+$B$G$"$j!"1~Ez$O(B CHAP $B1~Ez%Q%1%C%H$K4^$a$FAw$i$l$^$9!#(B
+.El
+.Pp
+.Nm
+$B$r$3$N$h$&$K@_Dj$9$k$H$-!"(B
+$B%[%9%H%A%c%l%s%8$O(B ASCII $B$N?tCM$b$7$/$OJ8;z$G$"$k$3$H$,4|BT$5$l$^$9!#(B
+$B;XDj$5$l$?%A%c%l%s%8$KBP$9$kE,@Z$JHkL)>pJs$r!"(B
+$B0E9f2=%G%P%$%9$^$?$O(B Secure ID $B%+!<%I$,7W;;$9$k$3$H$,5a$a$i$l$F$$$^$9!#(B
 .It set authname Ar id
 $B%/%i%$%"%s%H%b!<%I$G$N(B PAP $B$^$?$O(B CHAP $B$N8r>D$G;HMQ$5$l$k(B
 $BG'>Z(B ID $B$r@_Dj$7$^$9!#(B
 .Pp
-PAP $B$b$7$/$O(B CHAP $B$r(B enable $B$K$7$F(B
+CHAP $B$r(B enable $B$K$7$F(B
 .Fl direct
 $B%b!<%I$GMxMQ$9$k$H!"(B
 .Ar id
-$B$O=i4|G'>ZMW5a$GMQ$$$i$l!"DL>o$O%m!<%+%k%^%7%sL>$K@_Dj$5$l$^$9!#(B
-.It set autoload Ar max-duration max-load [min-duration min-load]
+$B$O=i4|G'>Z%A%c%l%s%8$GMQ$$$i$l!"DL>o$O%m!<%+%k%^%7%sL>$K@_Dj$5$l$^$9!#(B
+.It set autoload Xo
+.Ar max-duration max-load Op Ar min-duration min-load
+.Xc
 $B$3$l$i$N@_Dj$O%^%k%A%j%s%/%b!<%I$G$N$_E,MQ$5$l!"(B
 $B%G%U%)%k%HCM$O$9$Y$F(B 0 $B$G$9!#(B
 1 $B$D0J>e$N(B
@@ -3012,20 +3416,27 @@
 .Ar demand-dial
 $B%j%s%/$O%P%s%I%k$5$l$?%"%$%I%k%?%$%^$,4|8B@Z$l$K$J$k$^$G(B
 $B%"%/%F%#%V$G$"$jB3$1$^$9!#(B
-.It set callback [none|auth|cbcp|E.164 *|number[,number]...]...
+.It set callback Ar option Ns No ...
 $B0z?t$,M?$($i$l$J$$>l9g!"%3!<%k%P%C%/$O(B disable $B$K$J$j$^$9!#(B
 $B$=$&$G$J$$>l9g$K$O!"(B
 .Nm
-$B$OM?$($i$l$?%W%m%H%3%k$G%3!<%k%P%C%/$rMW5a$7$^$9(B
+$B$OM?$($i$l$?(B
+.Ar option
+$B$G%3!<%k%P%C%/$rMW5a$7$^$9(B
 ($B$b$7$/$O(B
 .Ar direct
 $B%b!<%I$G$O<u$1IU$1$^$9(B)$B!#(B
-$B%/%i%$%"%s%H%b!<%I$G!"MW5a$NH]Dj1~Ez$,JV$5$l$k$H!"(B
-.Nm
-$B$OB>$KA*Br;h$,$J$/$J$k$^$GJL$NMW5a$r=P$7$^$9!#(B
-$BA*Br;h$,?T$-$k$H(B
-.Nm
-$B$O8r>D$r=*N;$7$^$9!#(B
+$B%/%i%$%"%s%H%b!<%I$G!"(B
+.Ar option
+$B$NH]Dj1~Ez$,JV$5$l$k$H!"(B
+.Nm
+$B$OB>$KA*Br;h$,$J$/$J$k$^$GJL$N(B
+.Ar option
+$BMW5a$r=P$7$^$9(B (
+.Ar option
+$B$N$R$H$D$H$7$F(B
+.Dq none
+$B$r;XDj$7$F$$$?>l9g$r=|$-$^$9(B)$B!#(B
 $B%5!<%P%b!<%I$G$O!"(B
 .Nm
 $B$OM?$($i$l$k%W%m%H%3%k$r$J$s$G$b<u$1IU$1$^$9$,!"(B
@@ -3035,7 +3446,8 @@
 .Ar none
 $B$r;XDj$9$kI,MW$,$"$j$^$9!#(B
 .Pp
-$B%*%W%7%g%s$O2<5-$NDL$j$G$9(B ($BM%@hEY=g(B):
+.Ar option
+$B$O2<5-$NDL$j$G$9(B ($BM%@hEY=g(B):
 .Pp
 .Bl -tag
 .It auth
@@ -3049,7 +3461,10 @@
 Microsoft $B%3!<%k%P%C%/@)8f%W%m%H%3%k$,MQ$$$i$l$^$9!#8e=R$N(B
 .Dq set cbcp
 $B$r;2>H$7$F$/$@$5$$!#(B
-.It E.164 *|number[,number]...
+.It E.164 *| Ns Xo
+.Ar number Ns Op , Ns Ar number Ns
+.No ...
+.Xc
 $B%3!<%k%P%C%/MW5aB&$,(B
 .Ar number
 $B$r;XDj$7$^$9!#(B
@@ -3077,7 +3492,15 @@
 $B%3!<%k%P%C%/$r%*%W%7%g%s$K$7$?$$$N$G$"$l$P!"$3$l$r;XDj$9$kI,MW$,$"$j$^$9!#(B
 .El
 .Pp
-.It set cbcp Op *|number[,number]... Op delay Op retry
+.It set cbcp Oo Xo
+.No *| Ns Ar number Ns No
+.Oo
+.No , Ns Ar number Ns
+.Oc
+.No ...
+.Op Ar delay Op Ar retry
+.Oc
+.Xc
 $B0z?t$,M?$($i$l$J$$>l9g!"(BCBCP (Microsofts CallBack Control Protocol)
 $B$O(B disable $B$G$9!#8@$$49$($l$P(B
 .Dq set callback
@@ -3107,6 +3530,37 @@
 $B$,;XDj$5$l$?>l9g$K$O!"(B
 .Nm
 $B@\B3Aj<j$,HV9f$r;XDj$9$k$b$N$HA[Dj$7$^$9!#(B
+.It set cd Ar seconds Ns Op \&!
+$BDL>o!"%m%0%$%s%9%/%j%W%H40N;$N(B 1 $BIC8e$K!"(B
+.Nm
+$B$O%-%c%j%"$NB8:_$r%A%'%C%/$7$^$9!#(B
+$B%-%c%j%"$,@_Dj$5$l$F$$$J$$$H!"(B
+$B%G%P%$%9$,%-%c%j%"$r%5%]!<%H$7$F$$$J$$(B
+($B$[$H$s$I$N%L%k%b%G%`%1!<%V%k$N>l9g$,$=$&$G$9(B) $B$H(B
+.Nm
+$B$O2>Dj$7!"$3$N;v<B$r5-O?$7$F!"%-%c%j%"$N%A%'%C%/$r;_$a$^$9!#(B
+$B$7$+$7!"%b%G%`$K$h$C$F$O%-%c%j%"$N%"%5!<%H$K;~4V$,$+$+$k$b$N$,$"$k$N$G!"(B
+$B%j%s%/$,Mn$A$?$H$-$r(B
+.Nm ppp
+$B$O8!CN$G$-$J$/$J$j$^$9!#(B
+.Ar seconds
+$B$O!"%m%0%$%s%9%/%j%W%H$,40N;$7$F$+$i:G=i$N%-%c%j%"%A%'%C%/$r9T$&A0$K!"(B
+.Nm
+$B$,BT$D$Y$-IC?t$r;XDj$7$^$9!#(B
+.Pp
+.Ar seconds
+$B$ND>8e$K%(%/%9%/%i%a!<%7%g%s%^!<%/(B
+.Pq Dq \&!
+$B$,$"$k>l9g!"(B
+.Nm
+$B$O%-%c%j%"$r(B
+.Em $BMW5a(B
+$B$7$^$9!#(B
+$B:G=i$N%A%'%C%/$G%-%c%j%"$r8!CN$7$J$$$H!"%j%s%/$O@ZCG$5$l$F$$$k$H$_$J$5$l$^$9!#(B
+.Pp
+$B%j%s%/$,(B tty $B$G$J$$>l9g!"%-%c%j%"$N(B
+.Em $BI,MW@-(B
+$B$OL5;k$5$l$^$9!#(B
 .It set choked Op Ar timeout
 $B$3$l$O(B
 .Nm
@@ -3166,7 +3620,9 @@
 $B%3%^%s%I$N5-=R$r;2>H$7$F$/$@$5$$!#K\%3%^%s%I$O(B
 .Dq enable dns
 $B$r;HMQ$7$FMW5a$5$l$k(B IP $BHV9f$K$O1F6A$rM?$($^$;$s!#(B
-.It set device|line Ar value[,value...]
+.It set device|line Xo
+.Ar value Ns No ...
+.Xc
 .Nm
 $B$,;HMQ$9$k%G%P%$%9$r!";XDj$5$l$?(B
 .Dq value
@@ -3328,7 +3784,7 @@
 $B2f!9$O=PNO$r%b%G%`$KAw$jJV$7$?$$$N$G!"(B
 1 $BHVL\$NNc$G$O=PNO$r%U%!%$%k%G%9%/%j%W%?(B 2 (stderr) $B$K%j%@%$%l%/%H$7$F(B
 .Nm
-$B<+?H$KAw?.$*$h$S%m%0$5$;!"(B
+$B<+?H$KAw?.$*$h$S5-O?$5$;!"(B
 2 $BHVL\$NNc$G$OC1$K(B stdout $B$K=PNO$7$FD>@\%b%G%`$K=PNO$5$;$^$9!#(B
 .Pp
 $B$b$A$m$sA4BN$r!"AH$_9~$_$N$b$N$G$O$J$/30It$N(B
@@ -3337,6 +3793,10 @@
 $BNI$$BeBXJ}K!$K$D$$$F$O(B
 .Xr chat 8
 $B$r;2>H$7$F$/$@$5$$!#(B
+.Pp
+$B<B9T$5$l$k30It%3%^%s%I$O!"(B
+.Dq !bg
+$B%3%^%s%I$HF1MM$K!"FC<l8l$NE83+BP>]$H$J$j$^$9!#(B
 .It set enddisc Op label|IP|MAC|magic|psn value
 $B$3$N%3%^%s%I$O!"%m!<%+%k=*E@$NA*BrCM$r@_Dj$7$^$9!#(B
 LCP $B8r>D$NA0$K@_Dj$5$l$k$H!"(B
@@ -3381,8 +3841,20 @@
 $B$3$N%*%W%7%g%s$OA0=R$N(B
 .Dq set accmap
 $B%*%W%7%g%s$K;w$F$$$^$9!#(B
-$B%j%s%/$r7PM3$9$k;~$K!V%(%9%1!<%W!W$5$l$kJ8;z$r;XDj$9$k$?$a$K;HMQ$7$^$9!#(B
-.It set filter dial|alive|in|out rule-no permit|deny Ar "[src_addr/width] [dst_addr/width] [proto [src [lt|eq|gt port]] [dst [lt|eq|gt port]] [estab] [syn] [finrst]]"
+$B%j%s%/$r7PM3$9$k;~$K(B
+.Sq $B%(%9%1!<%W(B
+$B$5$l$kJ8;z$r;XDj$9$k$?$a$K;HMQ$7$^$9!#(B
+.It set filter dial|alive|in|out Ar rule-no Xo
+.No permit|deny
+.Oo Ar src_addr Ns Op / Ns Ar width
+.Op Ar dst_addr Ns Op / Ns Ar width
+.Oc Oo tcp|udp|icmp Op src lt|eq|gt Ar port
+.Op dst lt|eq|gt Ar port
+.Op estab
+.Op syn
+.Op finrst
+.Oc
+.Xc
 .Nm
 $B$O(B 4 $B$D$N%U%#%k%?%;%C%H$r%5%]!<%H$7$^$9!#(B
 .Em alive
@@ -3417,7 +3889,9 @@
 $B%U%#%k%?$G$O%@%$%d%k$5$;$k$3$H$K$O$J$i$J$$$3$H$r0UL#$7$^$9!#(B
 $B%@%$%d%k$r0z$-5/$3$5$J$$%Q%1%C%H$O!"(B
 $B%-%e!<$5$l$k$N$G$O$J$/!"<N$F$i$l$k$3$H$KCm0U$7$F$/$@$5$$!#(B
-$B>e=R$N%Q%1%C%H$N%U%#%k%?%j%s%0$N@a$r;2>H$7$F$/$@$5$$!#(B
+$B>e=R$N(B
+.Sx $B%Q%1%C%H$N%U%#%k%?%j%s%0(B
+$B$N@a$r;2>H$7$F$/$@$5$$!#(B
 .It set hangup Ar chat-script
 $B%b%G%`$rJD$8$kA0$K$3$l$r%j%;%C%H$9$k;~$K;HMQ$9$k!"(B
 $B%A%c%C%H%9%/%j%W%H$r;XDj$7$^$9!#(B
@@ -3427,36 +3901,47 @@
 $BMxMQ2DG=$J(B set $B%3%^%s%I$N$^$H$a$rI=<($9$k$+!"(B
 .Ar command
 $B$,;XDj$5$l$k$H!"%3%^%s%I$N;HMQJ}K!$rI=<($7$^$9!#(B
-.It set ifaddr Ar [myaddr [hisaddr [netmask [triggeraddr]]]]
+.It set ifaddr Oo Ar myaddr Ns
+.Op / Ns Ar \&nn
+.Oo Ar hisaddr Ns Op / Ns Ar \&nn
+.Oo Ar netmask
+.Op Ar triggeraddr
+.Oc Oc
+.Oc
 $B$3$N%3%^%s%I$O!"(BIPCP $B8r>D$N4V;HMQ$5$l$k(B IP $B%"%I%l%9$r;XDj$7$^$9!#(B
 $B%"%I%l%9$N%U%)!<%^%C%H$O<!$NDL$j$G$9!#(B
 .Pp
-.Dl a.b.c.d/n
+.Dl a.b.c.d/nn
 .Pp
 $B$3$3$G(B
-.Ar a.b.c.d
+.Dq a.b.c.d
 $B$O4uK>$9$k(B IP $B%"%I%l%9$G$"$j!"(B
-.Ar n
+.Ar nn
 $B$O$3$N$&$A2?%S%C%H$,M-8z$G$"$k$+$r<($7$^$9!#(B
-.Ar /n
+.No / Ns Ar nn
 $B$,>JN,$5$l$?>l9g!"%G%U%)%k%H$N(B
-.Ar /32
+.Dq /32
 $B$K$J$j$^$9!#(B
 $B$?$@$7(B IP $B%"%I%l%9$,(B 0.0.0.0 $B$G$"$k>l9g$K$O!"%^%9%/$N%G%U%)%k%H$O(B
-.Ar /0
+.Dq /0
 $B$G$9!#(B
 .Pp
 .Ar hisaddr
 $B$K(B IP $BHV9f$NHO0O$H$7$F(B
-.Pp
-.Dl a.b.c.d[-d.e.f.g][,h.i.j.k[-l,m,n,o]]...
+.Bd -literal -offset indent
+.Ar \&IP Ns Oo \&- Ns Ar \&IP Ns Xo
+.Oc Oo , Ns Ar \&IP Ns
+.Op \&- Ns Ar \&IP Ns
+.Oc No ...
+.Xc
+.Ed
 .Pp
 $B$N%U%)!<%^%C%H$r;XDj$G$-$^$9!#Nc$($P(B:
 .Pp
 .Dl set ifaddr 10.0.0.1 10.0.1.2-10.0.1.10,10.0.1.20
 .Pp
 $B$O(B
-.Ar 10.0.0.1
+.Dq 10.0.0.1
 $B$N$_$r%m!<%+%k(B IP $BHV9f$H$7$F8r>D$7$^$9$,!";XDj$5$l$?(B 10 $B8D$N(B IP $BHV9f$+$i(B
 $BAj<j$K3d$jEv$F$r9T$$$^$9!#(B
 $BAj<j$,$3$l$i$NHV9f$N$&$A$N(B 1 $B$D$rMW5a$7!"$3$NHV9f$,L$;HMQ$J>l9g$K$O!"(B
@@ -3477,7 +3962,7 @@
 .Ar myaddr
 $B$NHO0O$N%"%I%l%9$N$_<u$1F~$l$i$l$^$9!#(B
 $B$3$l$,M-MQ$J$N$O!"Aj<j$,(B
-.Ar 0.0.0.0
+.Dq 0.0.0.0
 $B$rMW5a$7$J$$8B$j(B IP $B%"%I%l%9$r3d$jEv$F$h$&$H$7$J$$(B
 .Dv PPP
 $B<BAu$H8r>D$9$k$H$-$G$9!#(B
@@ -3501,25 +3986,63 @@
 $B0z?t$O(B
 .Pa ppp.secret
 $B%U%!%$%k$NBh(B 3 $B0z?t$G>e=q$-$5$l$&$k$3$H$KCm0U$7$F$/$@$5$$!#(B
-.Em $BFb8~$-@\B3$NG'>Z(B
+.Sx $BFb8~$-@\B3$NG'>Z(B
 $B$N@a$r;2>H$7$F$/$@$5$$!#(B
 .Pp
 $B$I$N>l9g$G$b!"%$%s%?%U%'!<%9$,4{$K9=@.$5$l$F$$$k>l9g$K$O!"(B
 .Nm
 $B$O%$%s%?%U%'!<%9$N(B IP $BHV9f$rJ]B8$7$F!"(B
 $B4{$K%P%$%s%I$5$l$F$$$k%=%1%C%H$,@5$7$$$^$^$G$"$k$h$&$K$7$^$9!#(B
-.It set ccpretry Ar period
-.It set chapretry Ar period
-.It set ipcpretry Ar period
-.It set lcpretry Ar period
-.It set papretry Ar period
+.It set ccpretry|ccpretries Oo Ar timeout
+.Op Ar reqtries Op Ar trmtries
+.Oc
+.It set chapretry|chapretries Oo Ar timeout
+.Op Ar reqtries
+.Oc
+.It set ipcpretry|ipcpretries Oo Ar timeout
+.Op Ar reqtries Op Ar trmtries
+.Oc
+.It set lcpretry|lcpretries Oo Ar timeout
+.Op Ar reqtries Op Ar trmtries
+.Oc
+.It set papretry|papretries Oo Ar timeout
+.Op Ar reqtries
+.Oc
 $B$3$l$i$N%3%^%s%I$O(B
 .Nm
 $B$,M-8B>uBV5!3#(B (Finite State Machine; FSM) $B$KMW5a%Q%1%C%H$rAw$kA0$K(B
 $BBT$DIC?t$r;XDj$7$^$9!#(B
-.Ar period
+.Ar timeout
 $B$N%G%U%)%k%H$O!"A4(B FSM $B$K$*$$$F(B 3 $BIC$G$9(B ($B$[$H$s$I$N>l9g==J,$G$9(B)$B!#(B
-.It set log [local] [+|-] Ns Ar value...
+.Pp
+.Ar reqtries
+$B$r;XDj$9$k$H!"(B
+$BAj<j$+$i1~Ez$r<u?.$7$J$/$F$bD|$a$k$^$G$K@_DjMW5a$r:n@.$9$k2s?t$r!"(B
+.Nm
+$B$K;X<($7$^$9!#(B
+$B%G%U%)%k%H$N;n9T2s?t$O!"(BCCP, LCP, IPCP $B$N>l9g(B 5 $B2s$G$"$j!"(B
+PAP $B$H(B CHAP $B$N>l9g(B 3 $B2s$G$9!#(B
+.Pp
+.Ar trmtries
+$B$r;XDj$9$k$H!"(B
+$BAj<j$N1~Ez$rBT$D$3$H$rD|$a$k$^$G$K=*N;MW5a$r:n@.$9$k2s?t$r!"(B
+.Nm
+$B$K;X<($7$^$9!#(B
+$B%G%U%)%k%H$N;n9T2s?t$O(B 3 $B2s$G$9!#(B
+$BG'>Z%W%m%H%3%k$O=*N;$5$l$^$;$s$N$G!"(B
+PAP $B$d(B CHAP $B$KBP$7$F;XDj$9$k$3$H$OIT@5$G$9!#(B
+.Pp
+$B9g0U$G$-$J$$Aj<j$H$N8r>D$rHr$1$k$?$a$K!"(B
+$B$I$N$h$&$J8r>D%;%C%7%g%s$G$"$C$F$bD|$a$?$jAX$r%/%m!<%:$9$kA0$K$O!"(B
+.Nm
+$B$O:GBg$G(B
+.Ar reqtries
+$B$N@_DjCM$N(B 3 $BG\$^$G$N$_Aw?.$7$^$9!#(B
+.It set log Xo
+.Op local
+.Op +|- Ns
+.Ar value Ns No ...
+.Xc
 $B$3$N%3%^%s%I$K$h$j8=:_$N%m%0%l%Y%k$r=$@5$G$-$^$9!#(B
 $B>\:Y$O%m%05!G=$N@a$r;2>H$7$F$/$@$5$$!#(B
 .It set login chat-script
@@ -3620,14 +4143,24 @@
 $B2s@~$N%Q%j%F%#$r@_Dj$G$-$^$9!#%G%U%)%k%HCM$O(B
 .Ar none
 $B$G$9!#(B
-.It set phone Ar telno[|telno]...[:telno[|telno]...]...
+.It set phone Ar telno Ns Xo
+.Oo \&| Ns Ar backupnumber
+.Oc Ns ... Ns Oo : Ns Ar nextnumber
+.Oc Ns ...
+.Xc
 $B%@%$%d%k$*$h$S%m%0%$%s$N%A%c%C%H%9%/%j%W%H$G;HMQ$5$l$k(B \\\\T $BJ8;zNs$,(B
 $BCV$-49$($i$l$kEEOCHV9f$r;XDj$G$-$^$9!#(B
-$BJ#?t$NEEOCHV9f$r%Q%$%W(B (|) $B$b$7$/$O%3%m%s(B (:) $B$G6h@Z$C$F;XDj2DG=$G$9!#(B
+$BJ#?t$NEEOCHV9f$r%Q%$%W(B
+.Pq Dq \&|
+$B$b$7$/$O%3%m%s(B
+.Pq Dq \&:
+$B$G6h@Z$C$F;XDj2DG=$G$9!#(B
+.Pp
 $B%Q%$%W$N8e$NHV9f$,%@%$%d%k$5$l$k$N$O!"(B
 $BD>A0$NHV9f$X$N%@%$%d%k$b$7$/$O%m%0%$%s$N%9%/%j%W%H$,<:GT$7$?>l9g$N$_$G$9!#(B
 $B2s@~$N@ZCG$NM}M3$K$+$+$o$i$:!"(B
 $B%3%m%s$G6h@Z$i$l$?HV9f$O=gHV$K;n9T$5$l$^$9!#(B
+.Pp
 $BJ#?t$NHV9f$r;XDj$7$?>l9g!"@\B3$,3NN)$9$k$^$G(B
 .Nm
 $B$O$3$N%k!<%k$K4p$E$$$F%@%$%d%k$7$^$9!#(B
@@ -3636,7 +4169,9 @@
 $B$G;XDj$7$^$9!#(B
 .Fl background
 $B%b!<%I$G$O3FHV9f$O:GBg(B 1 $B2s;n9T$5$l$^$9!#(B
-.It set [proc]title Op Ar value
+.It set Op proc Ns Xo
+.No title Op Ar value
+.Xc
 .Xr ps 1
 $B$,I=<($9$k8=:_$N%W%m%;%9%?%$%H%k$r!"(B
 .Ar value
@@ -3654,6 +4189,105 @@
 $BCf$KEP>l$9$kI,MW$,$"$k$3$H$KCm0U$7$F$/$@$5$$!#(B
 .Pa ppp.conf
 $B$,<B9T$5$l$F$$$k$H$-$K$O!"J,$+$i$J$$$+$i$G$9!#(B
+.It set radius Op Ar config-file
+$B$3$N%3%^%s%I$O(B RADIUS $B%5%]!<%H$r(B ($BAH$_9~$^$l$F$$$l$P(B) $BM-8z$K$7$^$9!#(B
+.Ar config-file
+$B$O!"(B
+.Xr radius.conf 5
+$B$K5-=R$5$l$F$$$k(B radius $B%/%i%$%"%s%H@_Dj%U%!%$%k$r;2>H$7$^$9!#(B
+PAP $B$^$?$O(B CHAP $B$,(B
+.Dq enable
+$B$K$5$l$F$$$k>l9g!"(B
+.Nm
+$B$O(B
+.Em \&N Ns No etwork
+.Em \&A Ns No ccess
+.Em \&S Ns No erver
+$B$H$7$F?6Iq$$!"@_Dj$5$l$F$$$k(B RADIUS $B%5!<%P$r;HMQ$7$FG'>Z$7!"(B
+.Pa ppp.secret
+$B%U%!%$%k$d%Q%9%o!<%I%G!<%?%Y!<%9$K$h$kG'>Z$O9T$$$^$;$s!#(B
+.Pp
+PAP $B$H(B CHAP $B$N$$$:$l$bM-8z$K$J$C$F$$$J$$>l9g!"(B
+.Dq set radius
+$B$O8z2L$,$"$j$^$;$s!#(B
+.Pp
+.Nm
+$B$O!"(BRADIUS $B1~EzCf$N!"<!$NB0@-$r;HMQ$7$^$9(B:
+.Bl -tag -width XXX -offset XXX
+.It RAD_FRAMED_IP_ADDRESS
+$BAj<j$N(B IP $B%"%I%l%9$O;XDj$5$l$?CM$K@_Dj$5$l$^$7$?!#(B
+.It RAD_FRAMED_IP_NETMASK
+tun $B%$%s%?%U%'!<%9$N%M%C%H%^%9%/$O;XDj$5$l$?CM$K@_Dj$5$l$^$7$?!#(B
+.It RAD_FRAMED_MTU
+$B;XDj$5$l$?(B MTU $B$,(B LCP $B8r>D$G9g0U$5$l$?Aj<j$N(B MRU $B$h$j>.$5$$>l9g$G$"$j!"(B
+*$B$+$D(B* $B@_Dj$5$l$?(B MTU $B$N$$$:$l$h$j$b>.$5$$>l9g(B (
+.Dq set mru
+$B%3%^%s%I;2>H(B)$B!"(B
+tun $B%$%s%?%U%'!<%9$N(B MTU $B$O;XDj$7$?CM$K@_Dj$5$l$^$9!#(B
+.It RAD_FRAMED_COMPRESSION
+$B<u?.$7$?05=L%?%$%W$,(B
+.Dq 1
+$B$N>l9g!"(B
+.Dq disable vj
+$B@_Dj%3%^%s%I$,;XDj$5$l$F$$$?$H$7$F$b!"(BIPCP $B8r>D$K$*$$$F(B
+.Nm
+$B$O(B VJ $B05=L$rMW5a$7$^$9!#(B
+.It RAD_FRAMED_ROUTE
+$B<u?.$7$?J8;zNs$O!"(B
+.Ar dest Ns Op / Ns Ar bits
+.Ar gw
+.Op Ar metrics
+$B$H$$$&=q<0$G$"$k$H4|BT$7$^$9!#(B
+$B;XDj$7$?(B metrics $B$OL5;k$5$l$^$9!#(B
+.Dv MYADDR
+$B$H(B
+.Dv HISADDR
+$B$O!"(B
+.Ar dest
+$B$H(B
+.Ar gw
+$B$N@5Ev$JCM$H$7$FM}2r$5$l$^$9!#(B
+.Dq default
+$B$r(B
+.Ar dest
+$B$K;HMQ2DG=$G$"$j!"%G%U%)%k%H7PO)$r;XDj$7$^$9!#(B
+.Dq 0.0.0.0
+$B$O!"(B
+.Ar dest
+$B$KBP$9$k(B
+.Dq default
+$B$HF1$8$G$"$k$H2r<a$5$l!"(B
+.Ar gw
+$B$KBP$9$k(B
+.Dv HISADDR
+$B$HF1$8$G$"$k$H2r<a$5$l$^$9!#(B
+.Pp
+$BNc$($P!"La$jCM(B
+.Dq 1.2.3.4/24 0.0.0.0 1 2 -1 3 400
+$B$O(B 1.2.3.0/24 $B%M%C%H%o!<%/$X$O(B
+.Dv HISADDR
+$B$r2p$9$k$H$$$&7PO)I=%(%s%H%j$K$J$j!"(B
+$BLa$jCM(B
+.Dq 0.0.0.0 0.0.0.0
+$B$^$?$O(B
+.Dq default HISADDR
+$B$O(B
+.Dv HISADDR
+$B9T$-$N%G%U%)%k%H7PO)$K$J$j$^$9!#(B
+.Pp
+$B$9$Y$F$N(B RADIUS $B$N7PO)$O!"(B
+$B$9$Y$F$N%9%F%#%C%-!<$J7PO)$,E,MQ$5$l$?8e$GE,MQ$5$l$^$9!#(B
+$B$3$l$K$h$j!"(BRADIUS $B$N7PO)$,!"@_Dj:Q$_$N7PO)$KM%@h$7$^$9!#(B
+$B$3$l$O!"(B
+.Dv MYADDR
+$B$^$?$O(B
+.Dv HISADDR
+$B$H$$$&%-!<%o!<%I$r4^$^$J$$(B RADIUS $B$N7PO)$K$b$"$F$O$^$j$^$9!#(B
+.Pp
+.El
+RADIUS $B%5!<%P$+$i<u?.$7$?CM$O!"(B
+.Dq show bundle
+$B$r;HMQ$7$F8+$i$l$^$9!#(B
 .It set reconnect Ar timeout ntries
 (CD $B$NAS<:$b$7$/$O(B LQR $B$N<:GT$K$h$j(B) $BM=A[30$N2s@~@ZCG$H$J$C$?>l9g!"(B
 $B;XDj$7$?(B
@@ -3667,13 +4301,18 @@
 .Ar timeout
 $B$K(B
 .Ar random
-$B$r;XDj$9$k$H!"(B0 $B$+$i(B 30 $BIC$N4V$NG$0U;~4V$NDd;_$H$J$j$^$9!#(B
+$B$r;XDj$9$k$H!"(B1 $B$+$i(B 30 $BIC$N4V$NG$0U;~4V$NDd;_$H$J$j$^$9!#(B
 .It set recvpipe Op Ar value
 $B%k!<%F%#%s%0%F!<%V%k$N(B RECVPIPE $BCM$r@_Dj$7$^$9!#(B
 $B:GE,$JCM$O!"(BMTU $BCM$r(B 2 $BG\$7$?CM$rCzEY1[$($kCM$G$9!#(B
 .Ar value
 $B$,;XDj$5$l$J$$$^$?$O(B 0 $B$N>l9g!"%G%U%)%k%H$N!"%+!<%M%k$,@)8f$9$kCM$r;HMQ$7$^$9!#(B
-.It set redial Ar seconds[.nseconds] [attempts]
+.It set redial Ar secs Ns Xo
+.Oo + Ns Ar inc Ns
+.Op - Ns Ar max Ns
+.Oc Op . Ns Ar next
+.Op Ar attempts
+.Xc
 .Nm
 $B$K(B
 .Ar attempts
@@ -3682,20 +4321,34 @@
 .Ar set phone
 $B;2>H(B)$B!"(B
 $B3FHV9f$K%@%$%d%k$9$kA0$K!"(B
-.Ar nseconds
+.Ar next
 $B$@$1Dd;_$7$^$9!#(B
 $B:G=i$NHV9f$KLa$C$F%@%$%d%k3+;O$9$kA0$K(B
-.Ar seconds
-$B$@$1Dd;_$7$^$9!#(B
-.Dq random
+.Ar secs
+$B$@$1Dd;_$7$^$9!#%j%F%i%kCM(B
+.Dq Li random
 $B$r(B
-.Ar seconds
+.Ar secs
 $B$*$h$S(B
-.Ar nseconds
-$B$N$H$3$m$G;HMQ$G$-!"(B0 $B$+$i(B 30 $BIC$N4V$NG$0U;~4V$NDd;_$H$J$j$^$9!#(B
+.Ar next
+$B$N$H$3$m$G;HMQ$G$-!"(B1 $B$+$i(B 30 $BIC$N4V$NG$0U;~4V$NDd;_$H$J$j$^$9!#(B
 .Pp
+.Ar inc
+$B$,;XDj$5$l$k$H!"(B
+.Nm
+$B$,?75,HV9f$r;n$9$?$S$K!"$3$NCM$,(B
+.Ar secs
+$B$K2C$($i$l$^$9!#(B
+.Ar secs
+$B$,A}2C$5$l$k$N$O!":GBg(B
+.Ar maxinc
+$B2s$@$1$G$9!#(B
+.Ar maxinc
+$B$N%G%U%)%k%HCM$O(B 10 $B$G$9!#(B
 .Ar attempts
-$B$,7P2a$7$?8e$G$b$3$NCY1d$O8z2L$,$"$k$N$G!"(B
+$B$,7P2a$7$?8e$G$b(B
+.Ar secs
+$B$NCY1d$O8z2L$,$"$k$N$G!"(B
 $B$9$0$K<jF0$G%@%$%d%k$7$F$b2?$b5/$C$F$J$$$h$&$K8+$($k$+$b$7$l$^$;$s!#(B
 $B$9$0$K%@%$%d%k$9$kI,MW$,$"$k>l9g!"(B
 .Dq \&!
@@ -3765,7 +4418,7 @@
 $B$K0MB8$7$J$$$h$&$K$7$F$/$@$5$$!#(B
 .It set speed Ar value
 $B%7%j%"%k%G%P%$%9$NB.EY$r;XDj$7$^$9!#(B
-.It set stopped Ar [LCPseconds [CCPseconds]]
+.It set stopped Op Ar LCPseconds Op Ar CCPseconds
 $B$3$N%*%W%7%g%s$,;XDj$5$l$k$H!"(B
 $B;XDj$7$?(B FSM ($BM-8B>uBV5!3#(B; Finite State Machine) $B$,Dd;_>uBV$K$J$C$F$+$i(B
 .Dq seconds
@@ -3781,7 +4434,7 @@
 .Dq set log +lcp +ccp
 $B$r;HMQ$9$k$H!"(B
 .Nm
-$B$OE,@Z$J>uBVA+0\$r%m%0$7$^$9!#(B
+$B$OE,@Z$J>uBVA+0\$r5-O?$7$^$9!#(B
 .Pp
 $B%G%U%)%k%HCM$O(B 0 $B$G$"$j!"(B
 $BDd;_>uBV$K$h$k(B
@@ -3794,7 +4447,7 @@
 .It set timeout Ar idleseconds
 $B$3$N%3%^%s%I$O%"%$%I%k%?%$%^$NCM$r;XDj$7$^$9!#(B
 $B99$J$k>\:Y$K$D$$$F$O(B
-.Dq $B%"%$%I%k%?%$%^$N@_Dj(B
+.Sx $B%"%$%I%k%?%$%^$N@_Dj(B
 $B$H$$$&%?%$%H%k$N@a$r;2>H$7$F$/$@$5$$!#(B
 .It set vj slotcomp on|off
 $B$3$N%3%^%s%I$O(B
@@ -3868,7 +4521,9 @@
 $B8=:_$N(B IPCP $BE}7W$rI=<($7$^$9!#(B
 .It show lcp
 $B8=:_$N(B LCP $BE}7W$rI=<($7$^$9!#(B
-.It show [data]link
+.It show Op data Ns Xo
+.No link
+.Xc
 $B9b%l%Y%k%j%s%/>pJs$rI=<($7$^$9!#(B
 .It show links
 $BMxMQ2DG=$JO@M}%j%s%/$N%j%9%H$rI=<($7$^$9!#(B
@@ -3998,11 +4653,13 @@
 .Xr login 1 ,
 .Xr tcpdump 1 ,
 .Xr telnet 1 ,
+.Xr libalias 3 ,
 .Xr syslog 3 ,
 .Xr uucplock 3 ,
 .Xr crontab 5 ,
 .Xr group 5 ,
 .Xr passwd 5 ,
+.Xr radius.conf 5 ,
 .Xr resolv.conf 5 ,
 .Xr syslog.conf 5 ,
 .Xr adduser 8 ,

----Next_Part(Sun_Apr_25_21:29:50_1999_41)--
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Description: ppp.8.diff English
Content-Disposition: attachment; filename=ppp.8.eng.diff

diff -urNP man8/ppp.8 man8/ppp.8
--- man8/ppp.8	Fri Mar 12 14:55:16 1999
+++ man8/ppp.8	Sat Apr 17 19:37:40 1999
@@ -1,4 +1,4 @@
-.\" $Id: ppp.8,v 1.142.2.2 1999/03/07 11:55:12 brian Exp $
+.\" $Id: ppp.8,v 1.142.2.3 1999/03/24 18:03:12 brian Exp $
 .Dd 20 September 1995
 .nr XX \w'\fC00'
 .Os FreeBSD
@@ -16,7 +16,8 @@
 .Fl dedicated
 .Oc
 .Op Fl alias
-.Op Ar system ...
+.Op Ar system Ns
+.No ...
 .Sh DESCRIPTION
 This is a user process
 .Em PPP
@@ -31,7 +32,7 @@
 tunnel device driver (tun).
 .Sh Major Features
 .Bl -diag
-.It Provides interactive user interface.
+.It Provides an interactive user interface.
 Using its command mode, the user can
 easily enter commands to establish the connection with the remote end, check
 the status of connection and close the connection.  All functions can
@@ -67,7 +68,7 @@
 .Fl dedicated
 mode is also available.  This mode is targeted at a dedicated link
 between two machines.
-.Nm Ppp
+.Nm
 will never voluntarily quit from dedicated mode - you must send it the
 .Dq quit all
 command via its diagnostic socket.  A
@@ -76,7 +77,7 @@
 .Dv SIGTERM
 will force it to exit.
 .It Supports client callback.
-.Nm Ppp
+.Nm
 can use either the standard LCP callback protocol or the Microsoft
 CallBack Control Protocol (ftp://ftp.microsoft.com/developr/rfc/cbcp.txt).
 .It Supports packet aliasing.
@@ -99,7 +100,7 @@
 acts as server which accepts incoming
 .Em PPP
 connections on stdin/stdout.
-.It Supports PAP and CHAP authentication.
+.It Supports PAP and CHAP (rfc 1994) authentication.
 With PAP or CHAP, it is possible to skip the Unix style
 .Xr login 1
 procedure, and use the
@@ -109,11 +110,28 @@
 .Nm
 is compiled with DES support, an appropriate MD4/DES response will be
 made.
+.It Supports RADIUS (rfc 2138) authentication.
+An extension to PAP and CHAP,
+.Em \&R Ns No emote
+.Em \&A Ns No ccess
+.Em \&D Ns No ial
+.Em \&I Ns No n
+.Em \&U Ns No ser
+.Em \&S Ns No ervice
+allows authentication information to be stored in a central or
+distributed database along with various per-user framed connection
+characteristics.  If
+.Pa libradius
+is available at compile time,
+.Nm
+will use it to make
+.Em RADIUS
+requests when configured to do so.
 .It Supports Proxy Arp.
-When
-.Em PPP
-is set up as server, you can also configure it to do proxy arp for your
-connection.
+.Nm
+can be configured to make one or more proxy arp entries on behalf of
+the peer.  This allows routing from the peer to the LAN without
+configuring each machine on that LAN.
 .It Supports packet filtering.
 User can define four kinds of filters: the
 .Em in
@@ -136,7 +154,7 @@
 .Nm
 will open a TCP connection for transporting data rather than using a
 conventional serial device.
-.It Supports IETF draft Predictor-1 and DEFLATE compression.
+.It "Supports IETF draft Predictor-1 (rfc 1978) and DEFLATE (rfc 1979) compression."
 .Nm
 supports not only VJ-compression but also Predictor-1 and DEFLATE compression.
 Normally, a modem has built-in compression (e.g. v42.bis) and the system
@@ -154,20 +172,20 @@
 with clients using the Microsoft
 .Em PPP
 stack (ie. Win95, WinNT)
-.It Supports Multi-link PPP
+.It Supports Multi-link PPP (rfc 1990)
 It is possible to configure
 .Nm
 to open more than one physical connection to the peer, combining the
 bandwidth of all links for better throughput.
 .El
 .Sh PERMISSIONS
-.Nm Ppp
+.Nm
 is installed as user
 .Dv root
 and group
 .Dv network ,
 with permissions
-.Dv 4554 .
+.Dv 04554 .
 By default, 
 .Nm
 will not run if the invoking user id is not zero.  This may be overridden
@@ -191,7 +209,7 @@
 .Nm ppp :
 .Bl -tag -width XXX -offset XXX
 .It Fl auto
-.Nm Ppp
+.Nm
 opens the tun interface, configures it then goes into the background.
 The link isn't brought up until outgoing data is detected on the tun
 interface at which point
@@ -214,7 +232,7 @@
 is usually appropriate.  See the
 .Dq pmdemand
 system in
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 for an example.
 .It Fl background
 Here,
@@ -228,8 +246,10 @@
 exits with a non-zero result.
 .It Fl direct
 This is used for receiving incoming connections.
-.Nm Ppp
-ignores the ``set device'' line and uses descriptor 0 as the link.
+.Nm
+ignores the
+.Dq set device
+line and uses descriptor 0 as the link.
 .Pp
 If callback is configured,
 .Nm
@@ -239,7 +259,7 @@
 .It Fl dedicated
 This option is designed for machines connected with a dedicated
 wire.
-.Nm Ppp
+.Nm
 will always keep the device open and will never use any configured
 chat scripts.
 .It Fl ddial
@@ -251,7 +271,7 @@
 .It Fl interactive
 This is a no-op, and gives the same behaviour as if none of the above
 flags have been specified.
-.Nm Ppp
+.Nm
 loads any systems specified on the command line then provides an
 interactive prompt.
 .It Fl alias
@@ -279,7 +299,7 @@
 .Sq system
 is a configuration entry in
 .Pa /etc/ppp/ppp.conf .
-.Nm Ppp
+.Nm
 will read the
 .Dq default
 system from
@@ -295,7 +315,7 @@
 and
 .Fl interactive
 switches may be specified.
-.Nm Ppp Ns No 's
+.Nm ppp Ns No 's
 .Sq mode
 may subsequently be changed with the
 .Dq set mode
@@ -347,7 +367,7 @@
 .Pa /etc/ppp/ppp.conf .
 .It
 Create a log file.
-.Nm Ppp
+.Nm
 uses 
 .Xr syslog 3
 to log information.  A common log file name is
@@ -412,7 +432,7 @@
 when you invoke
 .Nm
 (see
-.Em PERMISSIONS
+.Sx PERMISSIONS
 above) with no arguments, you are presented with a prompt:
 .Bd -literal -offset indent
 ppp ON awfulhak>
@@ -427,34 +447,79 @@
 .Nm
 and have not authenticated yourself using the correct password.
 .Pp
-You can start by specifying the device name, speed and parity for your modem,
-and whether CTS/RTS signalling should be used (CTS/RTS is used by
-default).  If your hardware does not provide CTS/RTS lines (as
-may happen when you are connected directly to certain PPP-capable
-terminal servers),
-.Nm
-will never send any output through the port; it waits for a signal
-which never comes.  Thus, if you have a direct line and can't seem
-to make a connection, try turning CTS/RTS off:
+You can start by specifying the device name and speed:
 .Bd -literal -offset indent
-ppp ON awfulhak> set line /dev/cuaa0
+ppp ON awfulhak> set device /dev/cuaa0
 ppp ON awfulhak> set speed 38400
+.Ed
+.Pp
+Normally, hardware flow control (CTS/RTS) is used.  However, under
+certain circumstances (as may happen when you are connected directly
+to certain PPP-capable terminal servers), this may result in
+.Nm
+hanging as soon as it tries to write data to your communications link
+as it is waiting for the CTS (clear to send) signal - which will never
+come.  Thus, if you have a direct line and can't seem to make a
+connection, try turning CTS/RTS off with
+.Dq set ctsrts off .
+If you need to do this, check the
+.Dq set accmap
+description below too - you'll probably need to
+.Dq set accmap 000a0000 .
+.Pp
+Usually, parity is set to
+.Dq none ,
+and this is
+.Nm ppp Ns No s
+default.  Parity is a rather archaic error checking mechanism that is no
+longer used because modern modems do their own error checking, and most
+link-layer protocols (that's what
+.Nm
+is) use much more reliable checking mechanisms.  Parity has a relatively
+huge overhead (a 12.5% increase in traffic) and as a result, it is always
+disabled
+.Pq set to Dq none
+when
+.Dv PPP
+is opened.  However, some ISPs (Internet Service Providers) may use
+specific parity settings at connection time (before
+.Dv PPP
+is opened).  Notably, Compuserve insist
+on even parity when logging in:
+.Bd -literal -offset indent
 ppp ON awfulhak> set parity even
-ppp ON awfulhak> set ctsrts on
+.Ed
+.Pp
+You can now see what your current modem settings look like:
+.Bd -literal -offset indent
 ppp ON awfulhak> show modem
-* Modem related information is shown here *
-ppp ON awfulhak>
+Name: deflink
+ State:           closed
+ Device:          N/A
+ Link Type:       interactive
+ Connect Count:   0
+ Queued Packets:  0
+ Phone Number:    N/A
+
+Defaults:
+ Device List:     /dev/cuaa0
+ Characteristics: 38400bps, cs8, even parity, CTS/RTS on
+
+Connect time: 0 secs
+0 octets in, 0 octets out
+Overall 0 bytes/sec
+ppp ON awfulhak> 
 .Ed
 .Pp
-The term command can now be used to talk directly with your modem:
+The term command can now be used to talk directly to your modem:
 .Bd -literal -offset indent
 ppp ON awfulhak> term
 at
 OK
 atdt123456
 CONNECT
-login: ppp
-Password:
+login: myispusername
+Password: myisppassword
 Protocol: ppp
 .Ed
 .Pp
@@ -469,33 +534,58 @@
 PPP ON awfulhak>               # We've agreed IP numbers
 .Ed
 .Pp
-If it does not, it's possible that the peer is waiting for your end to
-start negotiating or that
-.Nm ppp
-can't identify the incoming packets as being
-.Em PPP
-packets, perhaps due to your parity settings.  To force
+If it does not, it's probable that the peer is waiting for your end to
+start negotiating.  To force
 .Nm
 to start sending
 .Em PPP
 configuration packets to the peer, use the
 .Dq ~p
-command to enter packet mode.
+command to drop out of terminal mode and enter packet mode.
+.Pp
+If you never even receive a login prompt, it is quite likely that the
+peer wants to use PAP or CHAP authentication instead of using Unix-style
+login/password authentication.  To set things up properly, drop back to
+the prompt and set your authentication name and key, then reconnect:
+.Bd -literal -offset indent
+~.
+ppp ON awfulhak> set authname myispusername
+ppp ON awfulhak> set authkey myisppassword
+ppp ON awfulhak> term
+at
+OK
+atdt123456
+CONNECT
+.Ed
+.Pp
+You may need to tell ppp to initiate negotiations with the peer here too:
+.Bd -literal -offset indent
+~p
+ppp ON awfulhak>               # No link has been established
+Ppp ON awfulhak>               # We've connected & finished LCP
+PPp ON awfulhak>               # We've authenticated
+PPP ON awfulhak>               # We've agreed IP numbers
+.Ed
 .Pp
 You are now connected!  Note that
 .Sq PPP
 in the prompt has changed to capital letters to indicate that you have
-a peer connection.  If only some of the three Ps go uppercase, wait 'till
+a peer connection.  If only some of the three Ps go uppercase, wait until
 either everything is uppercase or lowercase.  If they revert to lowercase,
 it means that
 .Nm
-couldn't successfully negotiate with the peer.  This is probably because
-your PAP or CHAP authentication name or key is incorrect.  A good first step
+couldn't successfully negotiate with the peer.  A good first step
 for troubleshooting at this point would be to
-.Dq set log local phase .
-Refer to the
+.Bd -literal -offset indent
+ppp ON awfulhak> set log local phase lcp ipcp
+.Ed
+.Pp
+and try again.  Refer to the
 .Dq set log
-command description below for further details.
+command description below for further details.  If things fail at this point,
+it is quite important that you turn logging on and try again.  It is also
+important that you note any prompt changes and report them to anyone trying
+to help you.
 .Pp
 When the link is established, the show command can be used to see how
 things are going:
@@ -536,15 +626,28 @@
 PPP ON awfulhak> add! default HISADDR
 .Ed
 .Pp
+This command can also be executed before actually making the connection.
+If a new IP address is negotiated at connection time,
+.Nm
+will update your default route accordingly.
+.Pp
 You can now use your network applications (ping, telnet, ftp etc.)
-in other windows on your machine.
+in other windows or terminals on your machine.  If you wish to reuse
+the current terminal, you can put
+.Nm
+into the background using your standard shell suspend and background
+commands (usually
+.Dq ^Z
+followed by
+.Dq bg ) .
+.Pp
 Refer to the
-.Em PPP COMMAND LIST
+.Sx PPP COMMAND LIST
 section for details on all available commands.
 .Sh AUTOMATIC DIALING
 To use automatic dialing, you must prepare some Dial and Login chat scripts.
 See the example definitions in
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 (the format of
 .Pa /etc/ppp/ppp.conf
 is pretty simple).
@@ -629,7 +732,7 @@
 connection is established.  See the provided
 .Dq pmdemand
 example in
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 which runs a script in the background after the connection is established
 (refer to the
 .Dq shell
@@ -646,7 +749,7 @@
 it was necessary to re-add routes such as the default route in the
 .Pa ppp.linkup
 file.
-.Nm Ppp
+.Nm
 now supports
 .Sq sticky routes ,
 where all routes that contain the
@@ -694,7 +797,7 @@
 to use.  It must contain the
 .Dq set ifaddr
 command to define the remote peers IP address. (refer to
-.Pa /etc/ppp/ppp.conf.sample )
+.Pa /usr/share/examples/ppp/ppp.conf.sample )
 .Bd -literal -offset indent
 # ppp -auto pmdemand
 .Ed
@@ -713,7 +816,7 @@
 .Pq for example, Dq set server +3000 mypasswd
 and connecting to the diagnostic port as follows:
 .Bd -literal -offset indent
-# pppctl 3000	(assuming tun0 - see the ``set server'' description)
+# pppctl 3000	(assuming tun0)
 Password:
 PPP ON awfulhak> show who
 tcp (127.0.0.1:1028) *
@@ -737,43 +840,90 @@
 to be down.
 If the connect fails, the default behaviour is to wait 30 seconds
 and then attempt to connect when another outgoing packet is detected.
-This behaviour can be changed with
-.Bd -literal -offset indent
-set redial seconds|random[.nseconds|random] [dial_attempts]
-.Ed
+This behaviour can be changed using the
+.Dq set redial
+command:
 .Pp
-.Sq Seconds
+.No set redial Ar secs Ns Xo
+.Oo + Ns Ar inc Ns
+.Op - Ns Ar max Ns
+.Oc Op . Ns Ar next
+.Op Ar attempts
+.Xc
+.Pp
+.Bl -tag -width attempts -compact
+.It Ar secs
 is the number of seconds to wait before attempting
-to connect again. If the argument is
-.Sq random ,
-the delay period is a random value between 0 and 30 seconds.
-.Sq Nseconds
+to connect again. If the argument is the literal string
+.Sq Li random ,
+the delay period is a random value between 1 and 30 seconds inclusive.
+.It Ar inc
+is the number of seconds that
+.Ar secs
+should be incremented each time a new dial attempt is made.  The timeout
+reverts to
+.Ar secs
+only after a successful connection is established.  The default value for
+.Ar inc
+is zero.
+.It Ar maxinc
+is the maximun number of times
+.Nm
+should increment
+.Ar secs .
+The default value for
+.Ar maxinc
+is 10.
+.It Ar next
 is the number of seconds to wait before attempting
 to dial the next number in a list of numbers (see the
 .Dq set phone
-command).  The default is 3 seconds.  Again, if the argument is
-.Sq random ,
-the delay period is a random value between 0 and 30 seconds.
-.Sq dial_attempts
-is the number of times to try to connect for each outgoing packet
-that is received. The previous value is unchanged if this parameter
+command).  The default is 3 seconds.  Again, if the argument is the literal
+string
+.Sq Li random ,
+the delay period is a random value between 1 and 30 seconds.
+.It Ar attempts
+is the maximum number of times to try to connect for each outgoing packet
+that triggers a dial.  The previous value is unchanged if this parameter
 is omitted.  If a value of zero is specified for
-.Sq dial_attempts ,
+.Ar attempts ,
 .Nm
 will keep trying until a connection is made.
+.El
+.Pp
+So, for example;
 .Bd -literal -offset indent
 set redial 10.3 4
 .Ed
 .Pp
-will attempt to connect 4 times for each outgoing packet that is
-detected with a 3 second delay between each number and a 10 second
+will attempt to connect 4 times for each outgoing packet that causes
+a dial attempt with a 3 second delay between each number and a 10 second
 delay after all numbers have been tried.  If multiple phone numbers
 are specified, the total number of attempts is still 4 (it does not
 attempt each number 4 times).
+.Pp
+Alternatively,
+.Pp
+.Bd -literal -offset indent
+set redial 10+10-5.3 20
+.Ed
+.Pp
+tells
+.Nm
+to attempt to connect 20 times.  After the first attempt,
+.Nm
+pauses for 10 seconds.  After the next attempt it pauses for 20 seconds
+and so on until after the sixth attempt it pauses for 1 minute.  The next
+14 pauses will also have a duration of one minute.  If
+.Nm
+connects, disconnects and fails to connect again, the timeout starts again
+at 10 seconds.
+.Pp
 Modifying the dial delay is very useful when running
 .Nm
-in demand
-dial mode on both ends of the link. If each end has the same timeout,
+in
+.Fl auto
+mode on both ends of the link. If each end has the same timeout,
 both ends wind up calling each other at the same time if the link
 drops and both ends have packets queued.
 At some locations, the serial link may not be reliable, and carrier
@@ -995,16 +1145,17 @@
 You must then configure the
 .Pa /etc/ppp/ppp.secret
 file.  This file contains one line per possible client, each line
-containing up to four fields:
-.Bd -literal -offset indent
-name key [hisaddr [label]]
-.Ed
+containing up to five fields:
+.Pp
+.Ar name Ar key Oo
+.Ar hisaddr Op Ar label Op Ar callback-number
+.Oc
 .Pp
 The
 .Ar name
 and
 .Ar key
-specify the client as expected.  If
+specify the client username and password.  If
 .Ar key
 is
 .Dq \&*
@@ -1014,7 +1165,7 @@
 .Pq Xr passwd 5
 when authenticating.  If the client does not offer a suitable
 response based on any
-.Ar name No / Ar key
+.Ar name Ns No / Ns Ar key
 combination in
 .Pa ppp.secret ,
 authentication fails.
@@ -1035,6 +1186,22 @@
 and
 .Pa ppp.linkdown
 files.
+.Pp
+If authentication is successful and
+.Ar callback-number
+is specified and
+.Dq set callback
+has been used in
+.Pa ppp.conf ,
+the client will be called back on the given number.  If CBCP is being used,
+.Ar callback-number
+may also contain a list of numbers or a
+.Dq \&* ,
+as if passed to the
+.Dq set cbcp
+command.  The value will be used in
+.Nm ppp Ns No s
+subsequent CBCP phase.
 .Sh PPP OVER TCP (a.k.a Tunnelling)
 Instead of running
 .Nm
@@ -1204,16 +1371,16 @@
 .Ar name
 .Ar rule-no
 .Ar action
-.Op Ar src_addr Ns Op / Ns Ar width
+.Oo
+.Ar src_addr Ns Op / Ns Ar width
 .Op Ar dst_addr Ns Op / Ns Ar width
-[
-.Ar proto
-.Op src Op Ar cmp No Ar port
-.Op dst Op Ar cmp No Ar port
+.Oc
+.Oo Ar proto Op src Ar cmp port
+.Op dst Ar cmp port
 .Op estab
 .Op syn
 .Op finrst
-]
+.Oc
 .Bl -enum
 .It
 .Ar Name
@@ -1295,7 +1462,7 @@
 .El
 .Pp
 See
-.Pa /etc/ppp/ppp.conf.sample .
+.Pa /usr/share/examples/ppp/ppp.conf.sample .
 .Sh SETTING THE IDLE TIMER
 To check/set the idle timer, use the
 .Dq show bundle
@@ -1328,7 +1495,7 @@
 program itself remains running.  Another trigger packet will cause it to
 attempt to re-establish the link.
 .Sh PREDICTOR-1 and DEFLATE COMPRESSION
-.Nm Ppp
+.Nm
 supports both Predictor type 1 and deflate compression.
 By default,
 .Nm
@@ -1379,7 +1546,14 @@
 .Dq set ifaddr
 command for defining the local and remote IP address:
 .Bd -literal -offset indent
-set ifaddr [src_addr [dst_addr [netmask [trigger_addr]]]]
+.No set ifaddr Oo Ar src_addr Ns
+.Op / Ns Ar \&nn
+.Oo Ar dst_addr Ns Op / Ns Ar \&nn
+.Oo Ar netmask
+.Op Ar trigger_addr
+.Oc
+.Oc
+.Oc
 .Ed
 .Pp
 where,
@@ -1432,14 +1606,17 @@
 .Pp
 This is all fine when each side has a pre-determined IP address, however
 it is often the case that one side is acting as a server which controls
-all IP addresses and the other side should obey the direction from it.
-In order to allow more flexible behaviour, `ifaddr' variable allows the
-user to specify IP address more loosely:
+all IP addresses and the other side should go along with it.  In order
+to allow more flexible behaviour, the
+.Dq set ifaddr
+command allows the user to specify IP addresses more loosely:
 .Pp
 .Dl set ifaddr 192.244.177.38/24 192.244.177.2/20
 .Pp
-A number followed by a slash (/) represent the number of bits significant in
-the IP address.  The above example signifies that:
+A number followed by a slash
+.Pq Dq /
+represents the number of bits significant in the IP address.  The above
+example means:
 .Pp
 .Bl -bullet -compact
 .It
@@ -1469,9 +1646,16 @@
 Describe your providers phone number(s) in the dial script using the
 .Dq set phone
 command.  This command allows you to set multiple phone numbers for
-dialing and redialing separated by either a pipe (|) or a colon (:)
-.Bd -literal -offset indent
-set phone "111[|222]...[:333[|444]...]...
+dialing and redialing separated by either a pipe
+.Pq Dq \&|
+or a colon
+.Pq Dq \&: :
+.Bd -literal -offset indent
+.No set phone Ar telno Ns Xo
+.Oo \&| Ns Ar backupnumber
+.Oc Ns ... Ns Oo : Ns Ar nextnumber
+.Oc Ns ...
+.Xc
 .Ed
 .Pp
 Numbers after the first in a pipe-separated list are only used if the
@@ -1577,14 +1761,13 @@
 .Pp
 The
 .Dq set authkey
-command is logged specially (when using
+command is logged specially.  When
 .Ar command
-logging) so that the actual password is not compromised
-(it is logged as
-.Sq ******** Ns
-), and the '\\P' is logged when
+or
 .Ar chat
-logging is active rather than the actual password.
+logging is enabled, the actual password is not logged;
+.Sq ******** Ns
+is logged instead.
 .Pp
 Login scripts vary greatly between ISPs.  If you're setting one up
 for the first time,
@@ -1592,12 +1775,12 @@
 so that you can see if your script is behaving as you expect.
 .It
 Use
-.Dq set line
+.Dq set device
 and
 .Dq set speed
 to specify your serial line and speed, for example:
 .Bd -literal -offset indent
-set line /dev/cuaa0
+set device /dev/cuaa0
 set speed 115200
 .Ed
 .Pp
@@ -1695,13 +1878,13 @@
 .El
 .Pp
 Please refer to
-.Pa /etc/ppp/ppp.conf.sample
+.Pa /usr/share/examples/ppp/ppp.conf.sample
 and
-.Pa /etc/ppp/ppp.linkup.sample
+.Pa /usr/share/examples/ppp/ppp.linkup.sample
 for some real examples.  The pmdemand label should be appropriate for most
 ISPs.
 .Sh LOGGING FACILITY
-.Nm Ppp
+.Nm
 is able to generate the following log info either via
 .Xr syslog 3
 or directly to the screen:
@@ -1775,7 +1958,11 @@
 .Pp
 If The first argument to
 .Dq set log Op local
-begins with a '+' or a '-' character, the current log levels are
+begins with a
+.Sq +
+or a
+.Sq -
+character, the current log levels are
 not cleared, for example:
 .Bd -literal -offset indent
 PPP ON awfulhak> set log phase
@@ -1798,7 +1985,7 @@
 level is special in that it will not be logged if it can be displayed
 locally.
 .Sh SIGNAL HANDLING
-.Nm Ppp
+.Nm
 deals with the following signals:
 .Bl -tag -width XX
 .It INT
@@ -2013,7 +2200,7 @@
 Default: Enabled and Accepted.  ACFComp stands for Address and Control
 Field Compression.  Non LCP packets usually have very similar address
 and control fields - making them easily compressible.
-.It chap
+.It chap Ns Op \&05
 Default: Disabled and Accepted.  CHAP stands for Challenge Handshake
 Authentication Protocol.  Only one of CHAP and PAP (below) may be
 negotiated.  With CHAP, the authenticator sends a "challenge" message
@@ -2058,7 +2245,7 @@
 - a
 .Em PPP
 implementation available under many operating systems.
-.Nm Pppd
+.Nm pppd
 (version 2.3.1) incorrectly attempts to negotiate
 .Ar deflate
 compression using type
@@ -2073,7 +2260,7 @@
 .Dq PPP Magna-link Variable Resource Compression
 in
 .Pa rfc1975 Ns No !
-.Nm Ppp
+.Nm
 is capable of negotiating with
 .Nm pppd ,
 but only if
@@ -2112,6 +2299,18 @@
 unless the
 .Dq set dns
 command is used as an override.
+.It LANMan|chap80lm
+Default: Disabled and Accepted.  The use of this authentication protocol
+is discouraged as it partially violates the authentication protocol by
+implementing two different mechanisms (LANMan & NT) under the guise of
+a single CHAP type (0x80).
+.Dq LANMan
+uses a simple DES encryption mechanism and is the least secure of the
+CHAP alternatives (although is still more secure than PAP).
+.Pp
+Refer to the
+.Dq MSChap
+description below for more details.
 .It lqr
 Default: Disabled and Accepted.  This option decides if Link Quality
 Requests will be sent or accepted.  LQR is a protocol that allows
@@ -2140,6 +2339,39 @@
 .Dq reconnect
 values are honoured as if the peer were responsible for dropping the
 connection.
+.It MSChap|chap80nt
+Default: Disabled and Accepted.  The use of this authentication protocol
+is discouraged as it partially violates the authentication protocol by
+implementing two different mechanisms (LANMan & NT) under the guise of
+a single CHAP type (0x80).  It is very similar to standard CHAP (type 0x05)
+except that it issues challenges of a fixed 8 bytes in length and uses a
+combination of MD4 and DES to encrypt the challenge rather than using the
+standard MD5 mechanism.  CHAP type 0x80 for LANMan is also supported - see
+.Dq enable LANMan
+for details.
+.Pp
+Because both
+.Dq LANMan
+and
+.Dq NT
+use CHAP type 0x80, when acting as authenticator with both
+.Dq enable Ns No d ,
+.Nm
+will rechallenge the peer up to three times if it responds using the wrong
+one of the two protocols.  This gives the peer a chance to attempt using
+both protocols.
+.Pp
+Conversely, when
+.Nm
+acts as the authenticatee with both protocols
+.Dq accept Ns No ed ,
+the protocols are used alternately in response to challenges.
+.Pp
+Note:  If only LANMan is enabled,
+.Xr pppd 8
+(version 2.3.5) misbehaves when acting as authenticatee.  It provides both
+the NT and the LANMan answers, but also suggests that only the NT answer
+should be used.
 .It pap
 Default: Disabled and Accepted.  PAP stands for Password Authentication
 Protocol.  Only one of PAP and CHAP (above) may be negotiated.  With
@@ -2155,7 +2387,9 @@
 .Pa /etc/ppp/ppp.secret
 for the peer (although see the
 .Dq passwdauth
-option below).
+and
+.Dq set radius
+options below).
 .Pp
 When using PAP as the client, you need only specify
 .Dq AuthName
@@ -2231,12 +2465,30 @@
 .It proxy
 Default: Disabled.  Enabling this option will tell
 .Nm
-to proxy ARP for the peer.
+to proxy ARP for the peer.  This means that
+.Nm
+will make an entry in the ARP table using
+.Dv HISADDR
+and the
+.Dv MAC
+address of the local network in which
+.Dv HISADDR
+appears.  The proxy entry cannot be made unless
+.Dv HISADDR
+is an address from a LAN.
 .It proxyall
 Default: Disabled.  Enabling this will tell
 .Nm
 to add proxy arp entries for every IP address in all class C or
 smaller subnets routed via the tun interface.
+.Pp
+Proxy arp entries are only made for sticky routes that are added
+using the
+.Dq add
+command.  No proxy arp entries are made for the interface address itself
+(as created by the
+.Dq set ifaddr
+command).
 .It sroutes
 Default: Enabled.  When the
 .Dq add
@@ -2305,7 +2557,12 @@
 .Sq iface-alias .
 .El
 .Pp
-.It add[!] Ar dest[/nn] [mask] gateway
+.It add Ns Xo
+.Op \&!
+.Ar dest Ns Op / Ns Ar nn
+.Op Ar mask
+.Op Ar gateway
+.Xc
 .Ar Dest
 is the destination IP address.  The netmask is specified either as a
 number of bits with
@@ -2383,7 +2640,10 @@
 .Pp
 User id 0 is immune to these commands.
 .Bl -tag -width XX
-.It allow user[s] Ar logname...
+.It allow user Ns Xo
+.Op s
+.Ar logname Ns No ...
+.Xc
 By default, only user id 0 is allowed access to
 .Nm ppp .
 If this command is used, all of the listed users are allowed access to
@@ -2402,16 +2662,20 @@
 If user
 .Sq *
 is specified, access is allowed to all users.
-.It allow mode[s] Ar modelist...
+.It allow mode Ns Xo
+.Op s
+.Ar mode Ns No ...
+.Xc
 By default, access using any
 .Nm
 mode is possible.  If this command is used, it restricts the access
-mode allowed to load the label under which this command is specified.
+.Ar modes
+allowed to load the label under which this command is specified.
 Again, as with the
 .Dq allow users
 command, each
 .Dq allow modes
-command overrides the previous, and the
+command overrides any previous settings, and the
 .Sq default
 section is always checked first.
 .Pp
@@ -2437,13 +2701,34 @@
 If aliasing is enabled on your system (it may be omitted at compile time),
 the following commands are possible:
 .Bl -tag -width XX
-.It alias enable [yes|no]
+.It alias enable Op yes|no
 This command either switches aliasing on or turns it off.
 The
 .Fl alias
 command line flag is synonymous with
 .Dq alias enable yes .
-.It alias port Op Ar proto targetIP:targetPORT [aliasIP:]aliasPORT
+.It alias addr Op Ar addr_local addr_alias
+This command allows data for
+.Ar addr_alias
+to be redirected to
+.Ar addr_local .
+It is useful if you own a small number of real IP numbers that
+you wish to map to specific machines behind your gateway.
+.It alias deny_incoming Op yes|no
+If set to yes, this command will refuse all incoming connections
+by dropping the packets in much the same way as a firewall would.
+.It alias help|?
+This command gives a summary of available alias commands.
+.It alias log Op yes|no
+This option causes various aliasing statistics and information to
+be logged to the file
+.Pa /var/log/alias.log .
+.It alias port Xo
+.Op Ar proto
+.Ar targetIP Ns No \&: Ns Ar targetPORT
+.Op Ar aliasIP Ns No \&: Ns
+.Ar aliasPORT
+.Xc
 This command allows us to redirect connections arriving at
 .Ar aliasPORT
 for machine
@@ -2452,6 +2737,8 @@
 .Ar targetPORT
 on
 .Ar targetIP .
+.Ar AliasIP
+defaults to the current interface address.
 .Ar Proto
 may be either
 .Sq tcp
@@ -2460,32 +2747,48 @@
 and only connections of the given protocol
 are matched.  This option is useful if you wish to run things like
 Internet phone on the machines behind your gateway.
-.It alias addr Op Ar addr_local addr_alias
-This command allows data for
-.Ar addr_alias
-to be redirected to
-.Ar addr_local .
-It is useful if you own a small number of real IP numbers that
-you wish to map to specific machines behind your gateway.
-.It alias deny_incoming [yes|no]
-If set to yes, this command will refuse all incoming connections
-by dropping the packets in much the same way as a firewall would.
-.It alias help|?
-This command gives a summary of available alias commands.
-.It alias log [yes|no]
-This option causes various aliasing statistics and information to
-be logged to the file
-.Pa /var/log/alias.log .
-.It alias same_ports [yes|no]
+.It "alias pptp" Op Ar addr
+This tells
+.Nm
+to alias any
+.Em G Ns No eneral
+.Em R Ns No outing
+.Em E Ns No encapsulated
+.Pq Dv IPPROTO_GRE
+packets using
+.Ar addr
+rather than the local interface address.  This allows the uses of the
+.Em P Ns No oint
+to
+.Em P Ns No oint
+.Em T Ns No unneling
+.Em P Ns No rotocol
+on a machine on the internal network.
+.Pp
+If
+.Ar addr
+is not specified,
+.Dv PPTP
+aliasing is disabled.
+.It "alias proxy cmd" Ar arg Ns No ...
+This command tells
+.Nm
+to proxy certain connections, redirecting them to a given server.  Refer
+to the description of
+.Fn PacketAliasProxyRule
+in
+.Xr libalias 3
+for details of the available commands.
+.It alias same_ports Op yes|no
 When enabled, this command will tell the alias library attempt to
 avoid changing the port number on outgoing packets.  This is useful
 if you want to support protocols such as RPC and LPD which require
 connections to come from a well known port.
-.It alias use_sockets [yes|no]
+.It alias use_sockets Op yes|no
 When enabled, this option tells the alias library to create a
 socket so that it can guarantee a correct incoming ftp data or
 IRC connection.
-.It alias unregistered_only [yes|no]
+.It alias unregistered_only Op yes|no
 Only alter outgoing packets with an unregistered source ad-
 dress.  According to RFC 1918, unregistered source addresses
 are 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16.
@@ -2495,7 +2798,9 @@
 .Pa README.alias
 which comes with the source distribution.
 .Pp
-.It [!]bg Ar command
+.It Op \&! Ns Xo
+.No bg Ar command
+.Xc
 The given
 .Ar command
 is executed in the background with the following words replaced:
@@ -2557,7 +2862,10 @@
 .Dq link
 command below).  If no second argument is given, all values are
 cleared.
-.It clone Ar name[,name]...
+.It clone Ar name Ns Xo
+.Op \&, Ns Ar name Ns
+.No ...
+.Xc
 Clone the specified link, creating one or more new links according to the
 .Ar name
 argument(s).  This command must be used from the
@@ -2569,7 +2877,7 @@
 .Pp
 The default link name is
 .Dq deflink .
-.It close Op lcp|ccp[!]
+.It close Op lcp|ccp Ns Op \&!
 If no arguments are given, the relevant protocol layers will be brought
 down and the link will be closed.  If
 .Dq lcp
@@ -2594,7 +2902,10 @@
 See the
 .Dq quit
 command below.
-.It delete[!] Ar dest
+.It delete Ns Xo
+.Op \&!
+.Ar dest
+.Xc
 This command deletes the route with the given
 .Ar dest
 IP address.  If
@@ -2647,7 +2958,17 @@
 .Ar Command
 may be one of the following:
 .Bl -tag -width XX
-.It iface add[!] Ar addr[[/bits| mask] peer]
+.It iface add Ns Xo
+.Op \&!
+.Ar addr Ns Op / Ns Ar bits
+.Op Ar peer
+.Xc
+.It iface add Ns Xo
+.Op \&!
+.Ar addr
+.Ar mask
+.Ar peer
+.Xc
 Add the given
 .Ar addr mask peer
 combination to the interface.  Instead of specifying
@@ -2685,7 +3006,11 @@
 .Fl auto
 mode, all interface addresses are deleted.
 .Pp
-.It iface delete[!]|rm[!] Ar addr
+.It iface delete Ns Xo
+.Op \&! Ns
+.No |rm Ns Op \&!
+.Ar addr
+.Xc
 This command deletes the given
 .Ar addr
 from the interface.  If the
@@ -2705,7 +3030,11 @@
 .Ar sub-command ,
 only the synopsis for the given sub-command is shown.
 .El
-.It [data]link Ar name[,name...] command Op Ar args
+.It Op data Ns Xo
+.No link
+.Ar name Ns Op , Ns Ar name Ns
+.No ... Ar command Op Ar args
+.Xc
 This command may prefix any other command if the user wishes to
 specify which link the command should affect.  This is only
 applicable after multiple links have been created in Multi-link
@@ -2724,7 +3053,9 @@
 .Dq * ,
 .Ar command
 is executed on all links.
-.It load Op Ar label ...
+.It load Op Ar label Ns Xo
+.No ...
+.Xc
 Load the given
 .Ar label(s)
 from the
@@ -2787,7 +3118,7 @@
 logging is active, instead, the literal string
 .Sq ********
 is logged.
-.It quit|bye [all]
+.It quit|bye Op all
 If
 .Dq quit
 is executed from the controlling connection or from a command file,
@@ -2823,7 +3154,10 @@
 may make the log file more readable.
 .It save
 This option is not (yet) implemented.
-.It set[up] Ar var value
+.It set Ns Xo
+.No Op up
+.Ar var value
+.Xc
 This option allows the setting of any of the following variables:
 .Bl -tag -width XX
 .It set accmap Ar hex-value
@@ -2834,27 +3168,84 @@
 .Pp
 For the XON/XOFF scenario, use
 .Dq set accmap 000a0000 .
-.It set authkey|key Ar value
+.It set Op auth Ns Xo
+.No key Ar value
+.Xc
 This sets the authentication key (or password) used in client mode
-PAP or CHAP negotiation to the given value.  It can also be used to
-specify the password to be used in the dial or login scripts in place
-of the '\\P' sequence, preventing the actual password from being logged.  If
+PAP or CHAP negotiation to the given value.  It also specifies the
+password to be used in the dial or login scripts in place of the
+.Sq \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\P
+sequence, preventing the actual password from being logged.  If
 .Ar command
+or
+.Ar chat
 logging is in effect,
 .Ar value
 is logged as
 .Sq ********
 for security reasons.
+.Pp
+If the first character of
+.Ar value
+is an exclaimation mark
+.Pq Dq \&! ,
+.Nm
+treats the remainder of the string as a program that must be executed
+to determine the
+.Dq authname
+and
+.Dq authkey
+values.
+.Pp
+Ignoring the
+.Dq \&! ,
+.Ar value
+is parsed as a program to execute in the same was as the
+.Dq !bg
+command above, substituting special names in the same manner.  Once executed,
+.Nm
+will feed the program three lines of input, each terminated by a newline
+character:
+.Bl -bullet
+.It
+The host name as sent in the CHAP challenge.
+.It
+The challenge string as sent in the CHAP challenge.
+.It
+The locally defined
+.Dq authname .
+.El
+.Pp
+Two lines of output are expected:
+.Bl -bullet
+.It
+The
+.Dq authname
+to be sent with the CHAP response.
+.It
+The
+.Dq authkey ,
+which is encrypted with the challenge and request id, the answer being sent
+in the CHAP response packet.
+.El
+.Pp
+When configuring
+.Nm
+in this manner, it's expected that the host challenge is a series of ascii
+digits or characters.  An encryption device or Secure ID card is usually
+required to calculate the secret appropriate for the given challenge.
 .It set authname Ar id
 This sets the authentication id used in client mode PAP or CHAP negotiation.
 .Pp
 If used in
 .Fl direct
-mode with PAP or CHAP enabled,
+mode with CHAP enabled,
 .Ar id
-is used in the initial authentication request and is normally set to
+is used in the initial authentication challenge and should normally be set to
 the local machine name.
-.It set autoload Ar max-duration max-load [min-duration min-load]
+.It set autoload Xo
+.Ar max-duration max-load Op Ar min-duration min-load
+.Xc
 These settings apply only in multi-link mode and all default to zero.
 When more than one
 .Ar demand-dial
@@ -2884,17 +3275,26 @@
 is zero, this timer is disabled.  Because both values default to zero,
 .Ar demand-dial
 links will stay active until the bundle idle timer expires.
-.It set callback [none|auth|cbcp|E.164 *|number[,number]...]...
+.It set callback Ar option Ns No ...
 If no arguments are given, callback is disabled, otherwise,
 .Nm
 will request (or in
 .Fl direct
-mode, will accept) one of the given protocols.  In client mode, if a
-request is NAK'd
-.Nm
-will request another, until no options remain at which point
-.Nm
-will terminate negotiations.  In server mode,
+mode, will accept) one of the given
+.Ar option Ns No s .
+In client mode, if an
+.Ar option
+is NAK'd
+.Nm
+will request a different
+.Ar option ,
+until no options remain at which point
+.Nm
+will terminate negotiations (unless
+.Dq none
+is one of the specified
+.Ar option Ns No ).
+In server mode,
 .Nm
 will accept any of the given protocols - but the client
 .Em must
@@ -2902,7 +3302,9 @@
 .Ar none
 as an option.
 .Pp
-The options are as follows (in this order of preference):
+The
+.Ar option Ns No s
+are as follows (in this order of preference):
 .Pp
 .Bl -tag
 .It auth
@@ -2916,7 +3318,10 @@
 Microsofts callback control protocol is used.  See
 .Dq set cbcp
 below.
-.It E.164 *|number[,number]...
+.It E.164 *| Ns Xo
+.Ar number Ns Op , Ns Ar number Ns
+.No ...
+.Xc
 The caller specifies the
 .Ar number .
 If
@@ -2942,7 +3347,15 @@
 the connection.  This is required if you wish callback to be optional.
 .El
 .Pp
-.It set cbcp Op *|number[,number]... Op delay Op retry
+.It set cbcp Oo Xo
+.No *| Ns Ar number Ns No
+.Oo
+.No , Ns Ar number Ns
+.Oc
+.No ...
+.Op Ar delay Op Ar retry
+.Oc
+.Xc
 If no arguments are given, CBCP (Microsofts CallBack Control Protocol)
 is disabled - ie, configuring CBCP in the
 .Dq set callback
@@ -2969,6 +3382,37 @@
 is specified,
 .Nm
 will expect the peer to specify the number.
+.It set cd Ar seconds Ns Op \&!
+Normally,
+.Nm
+checks for the existence of carrier one second after the login script is
+complete.  If it's not set,
+.Nm
+assumes that this is because the device doesn't support carrier (which
+is true for most NULL-modem cables), logs the fact and stops checking
+for carrier.  However, some modems take some time to assert the carrier
+signal, resulting in
+.Nm ppp Ns No s
+inability to detect when the link is dropped.
+.Ar Seconds
+specifies the number of seconds that
+.Nm
+should wait after the login script has finished before first checking for
+carrier.
+.Pp
+If
+.Ar seconds
+is followed immediately by an exclaimation mark
+.Pq Dq \&! ,
+.Nm
+will
+.Em require
+carrier.  If carrier is not detected at the first check, the link will
+be considered disconnected.
+.Pp
+Carrier
+.Em require Ns No ment
+is ignored when the link is not a tty device.
 .It set choked Op Ar timeout
 This sets the number of seconds that
 .Nm
@@ -2984,7 +3428,7 @@
 .Nm
 has read a certain number of packets from the local network for transmission,
 but cannot send the data due to link failure (the peer is busy etc.).
-.Nm Ppp
+.Nm
 will not read packets indefinitely.  Instead, it reads up to
 .Em 20
 packets (or
@@ -3027,7 +3471,9 @@
 command description above for details.  This command does not affect the
 IP numbers requested using
 .Dq enable dns .
-.It set device|line Ar value[,value...]
+.It set device|line Xo
+.Ar value Ns No ...
+.Xc
 This sets the device(s) to which
 .Nm
 will talk to the given
@@ -3194,6 +3640,11 @@
 command rather than using the internal one.  See
 .Xr chat 8
 for a good alternative.
+.Pp
+The external command that is executed is subjected to the same special
+word expansions as the
+.Dq !bg
+command.
 .It set enddisc Op label|IP|MAC|magic|psn value
 This command sets our local endpoint discriminator.  If set prior to
 LCP negotiation,
@@ -3236,9 +3687,21 @@
 This option is similar to the
 .Dq set accmap
 option above.  It allows the user to specify a set of characters that
-will be `escaped' as they travel across the link.
-.It set filter dial|alive|in|out rule-no permit|deny Ar "[src_addr/width] [dst_addr/width] [proto [src [lt|eq|gt port]] [dst [lt|eq|gt port]] [estab] [syn] [finrst]]"
-.Nm Ppp
+will be
+.Sq escaped
+as they travel across the link.
+.It set filter dial|alive|in|out Ar rule-no Xo
+.No permit|deny
+.Oo Ar src_addr Ns Op / Ns Ar width
+.Op Ar dst_addr Ns Op / Ns Ar width
+.Oc Oo tcp|udp|icmp Op src lt|eq|gt Ar port
+.Op dst lt|eq|gt Ar port
+.Op estab
+.Op syn
+.Op finrst
+.Oc
+.Xc
+.Nm
 supports four filter sets.  The
 .Em alive
 filter specifies packets that keep the connection alive - reseting the
@@ -3271,7 +3734,9 @@
 .Em dial
 filters it means that the packet will not trigger a dial.  A packet failing
 to trigger a dial will be dropped rather than queued.  Refer to the
-section on PACKET FILTERING above for further details.
+section on
+.Sx PACKET FILTERING
+above for further details.
 .It set hangup Ar chat-script
 This specifies the chat script that will be used to reset the modem
 before it is closed.  It should not normally be necessary, but can
@@ -3280,34 +3745,45 @@
 This command gives a summary of available set commands, or if
 .Ar command
 is specified, the command usage is shown.
-.It set ifaddr Ar [myaddr [hisaddr [netmask [triggeraddr]]]]
+.It set ifaddr Oo Ar myaddr Ns
+.Op / Ns Ar \&nn
+.Oo Ar hisaddr Ns Op / Ns Ar \&nn
+.Oo Ar netmask
+.Op Ar triggeraddr
+.Oc Oc
+.Oc
 This command specifies the IP addresses that will be used during
 IPCP negotiation.  Addresses are specified using the format
 .Pp
-.Dl a.b.c.d/n
+.Dl a.b.c.d/nn
 .Pp
 Where
-.Ar a.b.c.d
+.Dq a.b.c.d
 is the preferred IP, but
-.Ar n
+.Ar nn
 specifies how many bits of the address we will insist on.  If
-.Ar /n
+.No / Ns Ar nn
 is omitted, it defaults to
-.Ar /32
+.Dq /32
 unless the IP address is 0.0.0.0 in which case it defaults to
-.Ar /0 .
+.Dq /0 .
 .Pp
 .Ar Hisaddr
 may also be specified as a range of IP numbers in the format
-.Pp
-.Dl a.b.c.d[-d.e.f.g][,h.i.j.k[-l,m,n,o]]...
+.Bd -literal -offset indent
+.Ar \&IP Ns Oo \&- Ns Ar \&IP Ns Xo
+.Oc Oo , Ns Ar \&IP Ns
+.Op \&- Ns Ar \&IP Ns
+.Oc No ...
+.Xc
+.Ed
 .Pp
 for example:
 .Pp
 .Dl set ifaddr 10.0.0.1 10.0.1.2-10.0.1.10,10.0.1.20
 .Pp
 will only negotiate
-.Ar 10.0.0.1
+.Dq 10.0.0.1
 as the local IP number, but may assign any of the given 10 IP
 numbers to the peer.  If the peer requests one of these numbers,
 and that number is not already in use,
@@ -3331,7 +3807,7 @@
 .Dv PPP
 implementations that will not assign an IP number unless their peer
 requests
-.Ar 0.0.0.0 .
+.Dq 0.0.0.0 .
 .Pp
 It should be noted that in
 .Fl auto
@@ -3350,25 +3826,63 @@
 file once the client has authenticated itself
 .Pq if PAP or CHAP are Dq enabled .
 Refer to the
-.Em AUTHENTICATING INCOMING CONNECTIONS
+.Sx AUTHENTICATING INCOMING CONNECTIONS
 section for details.
 .Pp
 In all cases, if the interface is already configured,
 .Nm
 will try to maintain the interface IP numbers so that any existing
 bound sockets will remain valid.
-.It set ccpretry Ar period
-.It set chapretry Ar period
-.It set ipcpretry Ar period
-.It set lcpretry Ar period
-.It set papretry Ar period
+.It set ccpretry|ccpretries Oo Ar timeout
+.Op Ar reqtries Op Ar trmtries
+.Oc
+.It set chapretry|chapretries Oo Ar timeout
+.Op Ar reqtries
+.Oc
+.It set ipcpretry|ipcpretries Oo Ar timeout
+.Op Ar reqtries Op Ar trmtries
+.Oc
+.It set lcpretry|lcpretries Oo Ar timeout
+.Op Ar reqtries Op Ar trmtries
+.Oc
+.It set papretry|papretries Oo Ar timeout
+.Op Ar reqtries
+.Oc
 These commands set the number of seconds that
 .Nm
 will wait before resending Finite State Machine (FSM) Request packets.
 The default
-.Ar period
+.Ar timeout
 for all FSMs is 3 seconds (which should suffice in most cases).
-.It set log [local] [+|-] Ns Ar value...
+.Pp
+If
+.Ar reqtries
+is specified, it tells
+.Nm
+how many configuration request attempts it should make while receiving
+no reply from the peer before giving up.  The default is 5 attempts for
+CCP, LCP and IPCP and 3 attempts for PAP and CHAP.
+.Pp
+If
+.Ar trmtries
+is specified, it tells
+.Nm
+how many terminate requests should be sent before giving up waiting for the
+peers response.  The default is 3 attempts.  Authentication protocols are
+not terminated and it is therefore invalid to specify
+.Ar trmtries
+for PAP or CHAP.
+.Pp
+In order to avoid netogiations with the peer that will never converge,
+.Nm
+will only send at most 3 times the configured number of
+.Ar reqtries
+in any given negotiation session before giving up and closing that layer.
+.It set log Xo
+.Op local
+.Op +|- Ns
+.Ar value Ns No ...
+.Xc
 This command allows the adjustment of the current log level.  Refer
 to the Logging Facility section for further details.
 .It set login Ar chat-script
@@ -3460,13 +3974,24 @@
 .It set parity odd|even|none|mark
 This allows the line parity to be set.  The default value is
 .Ar none .
-.It set phone Ar telno[|telno]...[:telno[|telno]...]...
+.It set phone Ar telno Ns Xo
+.Oo \&| Ns Ar backupnumber
+.Oc Ns ... Ns Oo : Ns Ar nextnumber
+.Oc Ns ...
+.Xc
 This allows the specification of the phone number to be used in
 place of the \\\\T string in the dial and login chat scripts.
-Multiple phone numbers may be given separated by a pipe (|) or
-a colon (:).  Numbers after the pipe are only dialed if the dial or login
-script for the previous number failed.  Numbers separated by a colon are
-tried sequentially, irrespective of the reason the line was dropped.
+Multiple phone numbers may be given separated either by a pipe
+.Pq Dq \&|
+or a colon
+.Pq Dq \&: .
+.Pp
+Numbers after the pipe are only dialed if the dial or login
+script for the previous number failed.
+.Pp
+Numbers after the colon are tried sequentially, irrespective of
+the reason the line was dropped.
+.Pp
 If multiple numbers are given,
 .Nm
 will dial them according to these rules until a connection is made, retrying
@@ -3475,7 +4000,9 @@
 below.  In
 .Fl background
 mode, each number is attempted at most once.
-.It set [proc]title Op Ar value
+.It set Op proc Ns Xo
+.No title Op Ar value
+.Xc
 The current process title as displayed by
 .Xr ps 1
 is changed according to
@@ -3494,6 +4021,95 @@
 as it is not known when the commands in
 .Pa ppp.conf
 are executed.
+.It set radius Op Ar config-file
+This command enables RADIUS support (if it's compiled in).
+.Ar config-file
+refers to the radius client configuration file as described in
+.Xr radius.conf 5 .
+If PAP or CHAP are
+.Dq enable Ns No d ,
+.Nm
+behaves as a
+.Em \&N Ns No etwork
+.Em \&A Ns No ccess
+.Em \&S Ns No erver
+and uses the configured RADIUS server to authenticate rather than
+authenticating from the
+.Pa ppp.secret
+file or from the passwd database.
+.Pp
+If neither PAP or CHAP are enabled,
+.Dq set radius
+will do nothing.
+.Pp
+.Nm
+uses the following attributes from the RADIUS reply:
+.Bl -tag -width XXX -offset XXX
+.It RAD_FRAMED_IP_ADDRESS
+The peer IP address is set to the given value.
+.It RAD_FRAMED_IP_NETMASK
+The tun interface netmask is set to the given value.
+.It RAD_FRAMED_MTU
+If the given MTU is less than the peers MRU as agreed during LCP
+negotiation, *and* it is less that any configured MTU (see the
+.Dq set mru
+command), the tun interface MTU is set to the given value.
+.It RAD_FRAMED_COMPRESSION
+If the received compression type is
+.Dq 1 ,
+.Nm
+will request VJ compression during IPCP negotiations despite any
+.Dq disable vj
+configuration command.
+.It RAD_FRAMED_ROUTE
+The received string is expected to be in the format
+.Ar dest Ns Op / Ns Ar bits
+.Ar gw
+.Op Ar metrics .
+Any specified metrics are ignored.
+.Dv MYADDR
+and
+.Dv HISADDR
+are understood as valid values for
+.Ar dest
+and
+.Ar gw ,
+.Dq default
+can be used for
+.Ar dest
+to sepcify the default route, and
+.Dq 0.0.0.0
+is understood to be the same as
+.Dq default
+for
+.Ar dest
+and
+.Dv HISADDR
+for
+.Ar gw .
+.Pp
+For example, a returned value of
+.Dq 1.2.3.4/24 0.0.0.0 1 2 -1 3 400
+would result in a routing table entry to the 1.2.3.0/24 network via
+.Dv HISADDR
+and a returned value of
+.Dq 0.0.0.0 0.0.0.0
+or
+.Dq default HISADDR
+would result in a default route to
+.Dv HISADDR .
+.Pp
+All RADIUS routes are applied after any sticky routes are applied, making
+RADIUS routes override configured routes.  This also applies for RADIUS
+routes that don't include the
+.Dv MYADDR
+or
+.Dv HISADDR
+keywords.
+.Pp
+.El
+Values received from the RADIUS server may be viewed using
+.Dq show bundle .
 .It set reconnect Ar timeout ntries
 Should the line drop unexpectedly (due to loss of CD or LQR
 failure), a connection will be re-established after the given
@@ -3506,31 +4122,52 @@
 .Ar random
 for
 .Ar timeout
-will result in a variable pause, somewhere between 0 and 30 seconds.
+will result in a variable pause, somewhere between 1 and 30 seconds.
 .It set recvpipe Op Ar value
 This sets the routing table RECVPIPE value.  The optimum value is
 just over twice the MTU value.  If
 .Ar value
 is unspecified or zero, the default kernel controlled value is used.
-.It set redial Ar seconds[.nseconds] [attempts]
-.Nm Ppp
+.It set redial Ar secs Ns Xo
+.Oo + Ns Ar inc Ns
+.Op - Ns Ar max Ns
+.Oc Op . Ns Ar next
+.Op Ar attempts
+.Xc
+.Nm
 can be instructed to attempt to redial
 .Ar attempts
 times.  If more than one phone number is specified (see
 .Dq set phone
 above), a pause of
-.Ar nseconds
+.Ar next
 is taken before dialing each number.  A pause of
-.Ar seconds
-is taken before starting at the first number again.  A value of
-.Ar random
+.Ar secs
+is taken before starting at the first number again.  A literal value of
+.Dq Li random
 may be used here in place of
-.Ar seconds
+.Ar secs
 and
-.Ar nseconds ,
-causing a random delay of between 0 and 30 seconds.
+.Ar next ,
+causing a random delay of between 1 and 30 seconds.
 .Pp
-Note, this delay will be effective, even after
+If
+.Ar inc
+is specified, its value is added onto
+.Ar secs
+each time
+.Nm
+tries a new number.
+.Ar secs
+will only be incremented at most
+.Ar maxinc
+times.
+.Ar maxinc
+defaults to 10.
+.Pp
+Note, the
+.Ar secs
+delay will be effective, even after
 .Ar attempts
 has been exceeded, so an immediate manual dial may appear to have
 done nothing.  If an immediate dial is required, a
@@ -3599,7 +4236,7 @@
 should not be relied upon.
 .It set speed Ar value
 This sets the speed of the serial device.
-.It set stopped Ar [LCPseconds [CCPseconds]]
+.It set stopped Op Ar LCPseconds Op Ar CCPseconds
 If this option is set,
 .Nm
 will time out after the given FSM (Finite State Machine) has been in
@@ -3626,7 +4263,7 @@
 .It set timeout Ar idleseconds
 This command allows the setting of the idle timer.  Refer to the
 section titled
-.Dq SETTING THE IDLE TIMER
+.Sx SETTING THE IDLE TIMER
 for further details.
 .It set vj slotcomp on|off
 This command tells
@@ -3692,7 +4329,9 @@
 Show the current IPCP statistics.
 .It show lcp
 Show the current LCP statistics.
-.It show [data]link
+.It show Op data Ns Xo
+.No link
+.Xc
 Show high level link information.
 .It show links
 Show a list of available logical links.
@@ -3750,7 +4389,7 @@
 .El
 .Pp
 .Sh FILES
-.Nm Ppp
+.Nm
 refers to four files:
 .Pa ppp.conf ,
 .Pa ppp.linkup ,
@@ -3821,11 +4460,13 @@
 .Xr login 1 ,
 .Xr tcpdump 1 ,
 .Xr telnet 1 ,
+.Xr libalias 3 ,
 .Xr syslog 3 ,
 .Xr uucplock 3 ,
 .Xr crontab 5 ,
 .Xr group 5 ,
 .Xr passwd 5 ,
+.Xr radius.conf 5 ,
 .Xr resolv.conf 5 ,
 .Xr syslog.conf 5 ,
 .Xr adduser 8 ,

----Next_Part(Sun_Apr_25_21:29:50_1999_41)----
