Initial import npppd(8). npppd is a new PPP daemon that handles many

ppp sessions as a server.  It supports L2TP, PPTP and PPPoE as
tunneling.

ok mcbride@ dlg@ deraadt@ reyk@.

1 files changed, 485 insertions, 0 deletions

diff --git a/usr.sbin/npppd/l2tp/l2tp.h b/usr.sbin/npppd/l2tp/l2tp.h
new file mode 100644
index 00000000000..c3910f91010
--- /dev/null
+++ b/usr.sbin/npppd/l2tp/l2tp.h
@@ -0,0 +1,485 @@
+/*-
+ * Copyright (c) 2009 Internet Initiative Japan Inc.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+#ifndef	L2TP_H
+#define	L2TP_H 1
+/*@file
+ * L2TPモジュールヘッダファイル
+ */
+/* $Id: l2tp.h,v 1.1 2010/01/11 04:20:57 yasuoka Exp $ */
+
+/************************************************************************
+ * プロトコル上の定数
+ ************************************************************************/
+
+#define	L2TP_RFC2661_VERSION			1
+#define	L2TP_RFC2661_REVISION			0
+#define	L2TP_AVP_MAXSIZ				1024
+
+/* ヘッダ */
+
+#define	L2TP_HEADER_FLAG_TOM			0x8000
+#define	L2TP_HEADER_FLAG_LENGTH			0x4000
+#define	L2TP_HEADER_FLAG_SEQUENCE		0x0800
+#define	L2TP_HEADER_FLAG_OFFSET			0x0200
+#define	L2TP_HEADER_FLAG_PRIORITY		0x0100
+#define	L2TP_HEADER_FLAG_VERSION_MASK		0x000f
+#define	L2TP_HEADER_VERSION_RFC2661		0x02
+
+/* AVP Atrribute Types */
+
+/* RFC 2661 */
+#define	L2TP_AVP_TYPE_MESSAGE_TYPE		0
+#define	L2TP_AVP_TYPE_RESULT_CODE		1
+#define	L2TP_AVP_TYPE_PROTOCOL_VERSION		2
+#define	L2TP_AVP_TYPE_FRAMING_CAPABILITIES	3
+#define	L2TP_AVP_TYPE_BEARER_CAPABILITIES	4
+#define	L2TP_AVP_TYPE_TIE_BREAKER		5
+#define	L2TP_AVP_TYPE_FIRMWARE_REVISION		6
+#define	L2TP_AVP_TYPE_HOST_NAME			7
+#define	L2TP_AVP_TYPE_VENDOR_NAME		8
+#define	L2TP_AVP_TYPE_ASSINGED_TUNNEL_ID	9
+#define	L2TP_AVP_TYPE_RECV_WINDOW_SIZE		10
+#define	L2TP_AVP_TYPE_CHALLENGE			11
+#define	L2TP_AVP_TYPE_CAUSE_CODE		12
+#define	L2TP_AVP_TYPE_CHALLENGE_RESPONSE	13
+#define	L2TP_AVP_TYPE_ASSIGNED_SESSION_ID	14
+#define	L2TP_AVP_TYPE_CALL_SERIAL_NUMBER	15
+#define	L2TP_AVP_TYPE_MINIMUM_BPS		16
+#define	L2TP_AVP_TYPE_MAXIMUM_BPS		17
+#define	L2TP_AVP_TYPE_BEARER_TYPE		18
+#define	L2TP_AVP_TYPE_FRAMING_TYPE		19
+#define	L2TP_AVP_TYPE_CALLED_NUMBER		21
+#define	L2TP_AVP_TYPE_CALLING_NUMBER		22
+#define	L2TP_AVP_TYPE_SUB_ADDRESS		23
+#define	L2TP_AVP_TYPE_TX_CONNECT_SPEED		24
+
+#define	L2TP_AVP_TYPE_PHYSICAL_CHANNEL_ID	25
+#define	L2TP_AVP_TYPE_INITIAL_RECV_LCP_CONFREQ	26
+#define	L2TP_AVP_TYPE_LAST_SENT_LCP_CONFREQ	27
+#define	L2TP_AVP_TYPE_LAST_RECV_LCP_CONFREQ	28
+#define	L2TP_AVP_TYPE_PROXY_AUTHEN_TYPE		29
+#define	L2TP_AVP_TYPE_PROXY_AUTHEN_NAME		30
+#define	L2TP_AVP_TYPE_PROXY_AUTHEN_CHALLENGE	31
+#define	L2TP_AVP_TYPE_PROXY_AUTHEN_ID		32
+#define	L2TP_AVP_TYPE_PROXY_AUTHEN_RESPONSE	33
+#define	L2TP_AVP_TYPE_CALL_ERRORS		34
+#define	L2TP_AVP_TYPE_ACCM			35
+#define	L2TP_AVP_TYPE_RANDOM_VECTOR		36
+#define	L2TP_AVP_TYPE_PRIVATE_GROUP_ID		37
+#define	L2TP_AVP_TYPE_RX_CONNECT_SPEED		38
+#define	L2TP_AVP_TYPE_SEQUENCING_REQUIRED	39
+
+
+/* RFC 3301 */
+#define	L2TP_AVP_TYPE_TX_MINIMUM		40
+#define	L2TP_AVP_TYPE_CALLING_SUB_ADDRESS	44
+
+/* RFC 3145 */
+#define	L2TP_AVP_TYPE_PPP_DISCONNECT_CAUSE_CODE	46
+
+/* RFC 3308 */
+#define	L2TP_AVP_TYPE_CCDS			47
+#define	L2TP_AVP_TYPE_SDS			48
+
+/* RFC 3437 */
+#define	L2TP_AVP_TYPE_LCP_WANT_OPTIONS		49
+#define	L2TP_AVP_TYPE_LCP_ALLOW_OPTIONS		50
+#define	L2TP_AVP_TYPE_LNS_LAST_SENT_LCP_CONFREQ	51
+#define	L2TP_AVP_TYPE_LNS_LAST_RECV_LCP_CONFREQ	52
+
+/* RFC 3573 */
+#define	L2TP_AVP_TYPE_MODEM_ON_HOLD_CAPABLE	53
+#define	L2TP_AVP_TYPE_MODEM_ON_HOLD_STATUS	54
+
+/* RFC 3817 */
+#define	L2TP_AVP_TYPE_PPPOE_RELAY		55
+#define	L2TP_AVP_TYPE_PPPOE_RELAY_RESP_CAP	56
+#define	L2TP_AVP_TYPE_PPPOE_RELAY_FORW_CAP	57
+
+/* No RFC yet */
+#define	L2TP_AVP_TYPE_EXTENDED_VENDOR_ID	58
+#define	L2TP_AVP_TYPE_PSEUDOWIRE_CAP_LIST	62
+#define	L2TP_AVP_TYPE_LOCAL_SESSION_ID		63
+#define	L2TP_AVP_TYPE_REMOTE_SESSION_ID		64
+#define	L2TP_AVP_TYPE_ASSIGNED_COOKIE		65
+#define	L2TP_AVP_TYPE_REMOTE_END_ID		66
+#define	L2TP_AVP_TYPE_APPLICATION_CODE		67
+#define	L2TP_AVP_TYPE_PSEUDOWIRE_TYPE		68
+#define	L2TP_AVP_TYPE_L2_SPECIFIC_SUBLAYER	69
+#define	L2TP_AVP_TYPE_DATA_SEQUENCING		70
+#define	L2TP_AVP_TYPE_CIRCUIT_STATUS		71
+#define	L2TP_AVP_TYPE_PREFERRED_LANGUAGE	72
+#define	L2TP_AVP_TYPE_CTRL_MSG_AUTH_NONCE	73
+/* #define	L2TP_AVP_TYPE_TX_CONNECT_SPEED		74 */
+/* #define	L2TP_AVP_TYPE_RX_CONNECT_SPEED		75 */
+#define	L2TP_AVP_TYPE_FAILOVER_CAPABILITY	76
+#define	L2TP_AVP_TYPE_TUNNEL_RECOVERY		77
+#define	L2TP_AVP_TYPE_SUGGESTED_CTRL_SEQUENCE	78
+#define	L2TP_AVP_TYPE_FAILOVER_SESSION_STATE	79
+
+/* RFC 4045 */
+#define	L2TP_AVP_TYPE_MULTICAST_CAPABILITY	80
+#define	L2TP_AVP_TYPE_NEW_OUTGOING_SESSIONS	81
+#define	L2TP_AVP_TYPE_NEW_OUTGOING_SESSIONS_ACK	82
+#define	L2TP_AVP_TYPE_WITHDRAW_OUTGOING_SESSIONS 83
+#define	L2TP_AVP_TYPE_MULTICAST_PACKETS_PRIORITY 84
+
+/* Control Message Type */
+
+#define	L2TP_AVP_MESSAGE_TYPE_SCCRQ		1
+#define	L2TP_AVP_MESSAGE_TYPE_SCCRP		2
+#define	L2TP_AVP_MESSAGE_TYPE_SCCCN		3
+#define	L2TP_AVP_MESSAGE_TYPE_StopCCN		4
+#define	L2TP_AVP_MESSAGE_TYPE_HELLO		6
+#define	L2TP_AVP_MESSAGE_TYPE_OCRQ		7
+#define	L2TP_AVP_MESSAGE_TYPE_OCRP		8
+#define	L2TP_AVP_MESSAGE_TYPE_OCCN		9
+#define	L2TP_AVP_MESSAGE_TYPE_ICRQ		10
+#define	L2TP_AVP_MESSAGE_TYPE_ICRP		11
+#define	L2TP_AVP_MESSAGE_TYPE_ICCN		12
+#define	L2TP_AVP_MESSAGE_TYPE_CDN		14
+
+#define L2TP_FRAMING_CAP_FLAGS_SYNC	0x00000001
+#define L2TP_FRAMING_CAP_FLAGS_ASYNC	0x00000002
+#define	L2TP_BEARER_CAP_FLAGS_DIGITAL	0x00000001
+#define	L2TP_BEARER_CAP_FLAGS_ANALOG	0x00000002
+
+/*
+ * RFC2661 の pp.19 〜 pp.22 の定数
+ * ラベル名は不適切かも。
+ */
+#define	L2TP_STOP_CCN_RCODE_GENERAL			1
+#define	L2TP_STOP_CCN_RCODE_GENERAL_ERROR		2
+#define	L2TP_STOP_CCN_RCODE_ALREADY_EXISTS		3
+#define	L2TP_STOP_CCN_RCODE_UNAUTHORIZED		4
+#define	L2TP_STOP_CCN_RCODE_BAD_PROTOCOL_VERSION	5
+#define	L2TP_STOP_CCN_RCODE_SHUTTING_DOWN		6
+#define	L2TP_STOP_CCN_RCODE_FSM_ERROR			7
+
+#define L2TP_CDN_RCODE_LOST_CARRIER			1
+#define L2TP_CDN_RCODE_ERROR_CODE			2
+#define L2TP_CDN_RCODE_ADMINISTRATIVE_REASON		3
+#define L2TP_CDN_RCODE_TEMP_NOT_AVALIABLE		4
+#define L2TP_CDN_RCODE_PERM_NOT_AVALIABLE		5
+#define L2TP_CDN_RCODE_INVALID_DESTINATION		6
+#define L2TP_CDN_RCODE_NO_CARRIER			7
+#define L2TP_CDN_RCODE_BUSY				8
+#define L2TP_CDN_RCODE_NO_DIALTONE			9
+#define L2TP_CDN_RCODE_CALL_TIMEOUT_BY_LAC		10
+#define L2TP_CDN_RCODE_NO_FRAMING_DETECTED		11
+
+#define L2TP_ECODE_NO_CONTROL_CONNECTION		1
+#define L2TP_ECODE_WRONG_LENGTH				2
+#define L2TP_ECODE_INVALID_MESSAGE			3
+#define L2TP_ECODE_NO_RESOURCE				4
+#define L2TP_ECODE_INVALID_SESSION_ID			5
+#define L2TP_ECODE_GENERIC_ERROR			6
+#define L2TP_ECODE_TRY_ANOTHER				7
+#define L2TP_ECODE_UNKNOWN_MANDATORY_AVP		8
+
+/* Proxy Authen Type */
+#define	L2TP_AUTH_TYPE_RESERVED				0
+#define	L2TP_AUTH_TYPE_TEXUAL				1
+#define	L2TP_AUTH_TYPE_PPP_CHAP				2
+#define	L2TP_AUTH_TYPE_PPP_PAP				3
+#define	L2TP_AUTH_TYPE_NO_AUTH				4
+#define	L2TP_AUTH_TYPE_MS_CHAP_V1			5
+
+/************************************************************************
+ * この実装の定数
+ ************************************************************************/
+
+#define	L2TPD_BACKLOG				16
+#define	L2TPD_TUNNEL_HASH_SIZ			127
+#define L2TPD_SND_BUFSIZ			2048
+#define	L2TPD_DEFAULT_SEND_WINSZ		4
+#define	L2TPD_DEFAULT_LAYER2_LABEL		"L2TP"
+#define	L2TPD_DIALIN_LAYER2_LABEL		"DialIn"
+#define	L2TPD_CONFIG_BUFSIZ			65535
+#define	L2TP_CTRL_WINDOW_SIZE			8
+#ifndef	L2TPD_VENDOR_NAME				
+#define	L2TPD_VENDOR_NAME			"IIJ"
+#endif
+#define L2TPD_DEFAULT_UDP_PORT			1701
+
+/** アドレスは最大何個 bind 可能か。*/
+#ifndef	L2TP_NLISTENER
+#define	L2TP_NLISTENER				6
+#endif
+
+/*
+ * デーモンの状態
+ */
+#define	L2TPD_STATE_INIT			0
+#define	L2TPD_STATE_RUNNING			1
+#define	L2TPD_STATE_SHUTTING_DOWN		2
+#define	L2TPD_STATE_STOPPED			3
+
+/*
+ * コントロール接続の状態
+ */
+#define	L2TP_CTRL_STATE_IDLE			0
+#define	L2TP_CTRL_STATE_WAIT_CTL_CONN		1
+#define	L2TP_CTRL_STATE_WAIT_CTL_REPLY		2
+#define	L2TP_CTRL_STATE_ESTABLISHED		3
+#define	L2TP_CTRL_STATE_CLEANUP_WAIT		4
+
+/*
+ * コールの状態
+ */
+#define	L2TP_CALL_STATE_IDLE			0
+#define	L2TP_CALL_STATE_WAIT_CONN		1
+#define	L2TP_CALL_STATE_ESTABLISHED		2
+#define	L2TP_CALL_STATE_CLEANUP_WAIT		3
+
+/*
+ * タイムアウト関連
+ */
+#define	L2TP_CTRL_CTRL_PKT_TIMEOUT		12
+/** 最初の Call を待つ時間 */
+#define	L2TP_CTRL_WAIT_CALL_TIMEOUT		16
+#define	L2TP_CTRL_CLEANUP_WAIT_TIME		3
+#define	L2TP_CTRL_DEFAULT_HELLO_INTERVAL	60
+#define	L2TP_CTRL_DEFAULT_HELLO_TIMEOUT		30
+
+#define	L2TPD_SHUTDOWN_TIMEOUT			5
+
+/** L2TPデーモンが停止したかどうかを返します。 */
+#define	l2tpd_is_stopped(l2tpd)					\
+	(((l2tpd)->state != L2TPD_STATE_SHUTTING_DOWN &&	\
+	    (l2tpd)->state != L2TPD_STATE_RUNNING)? 1 : 0)
+
+/** L2TPデーモンが停止処理中かどうかを返します。 */
+#define	l2tpd_is_shutting_down(l2tpd)				\
+	(((l2tpd)->state == L2TPD_STATE_SHUTTING_DOWN)? 1 : 0)
+
+/** l2tp_ctrl から、リスナーの物理層のラベルを取り出すマクロ */
+#define	L2TP_CTRL_LISTENER_LABEL(ctrl)	\
+	((l2tpd_listener *)slist_get(&(ctrl)->l2tpd->listener, \
+	    (ctrl)->listener_index))->phy_label
+
+
+/** L2TP のデーモンを示す型。*/
+struct _l2tpd;
+
+typedef struct _l2tpd_listener {
+	/** イベントコンテキスト */
+	struct event ev_sock;
+	/** L2TPD 自身 */
+	struct _l2tpd	*self;
+	/** インデックス番号 */
+	uint16_t	index;
+	/** 有効/無効 */
+	uint16_t	enabled;
+	/** 待ち受けソケット */
+	int		sock;
+	/** 待ち受けアドレス UDP */
+	struct sockaddr_in bind_sin;
+	/** 物理層のラベル */
+	char	phy_label[16];
+} l2tpd_listener;
+
+/** L2TP のデーモンを示す型。*/
+typedef struct _l2tpd {
+	/** タイムアウトイベントコンテキスト */
+	struct event ev_timeout;
+	/** インスタンスの ID */
+	unsigned id;
+	/** 待ち受けリスト */
+	slist listener;
+	/** ステータス */
+	int state;
+	/** トンネル ID と {@link ::_l2tp_ctrl L2TP コントロール} のマップ */
+	hash_table *ctrl_map;
+
+	/** 接続を許可するIPv4ネットワーク */
+	struct in_addr_range *ip4_allow;
+
+	/** デフォルトのホスト名 */
+	char default_hostname[80];
+
+	/** 設定 */
+	struct properties *config;
+
+	/** フラグ */
+	uint32_t
+	    require_ipsec:1,
+	    purge_ipsec_sa:1,
+	    ctrl_in_pktdump:1,
+	    ctrl_out_pktdump:1,
+	    data_in_pktdump:1,
+	    data_out_pktdump:1,
+	    phy_label_with_ifname:1;
+} l2tpd;
+
+/** L2TP コントロール接続を示す型。*/
+typedef struct _l2tp_ctrl {
+	struct event ev_timeout;
+	/** ID */
+	unsigned id;
+	/** 親 L2TPD */
+	l2tpd 	*l2tpd;
+	/** リスナー インデックス番号 */
+	uint16_t	listener_index;
+	/** 状態 */
+	int	state;
+	/** トンネルId。 */
+	int	tunnel_id;
+	/** Window サイズ */
+	int	winsz;
+	/** 先方のトンネルId */
+	int	peer_tunnel_id;
+	/** 先方の Window サイズ */
+	int	peer_winsz;
+	/** 次の確認応答 */
+	uint16_t	snd_una;
+	/** 次の送信シーケンス番号 */
+	uint16_t	snd_nxt;
+	/** 受信シーケンス番号 */
+	uint16_t	rcv_nxt;
+	/** 先方のアドレス*/
+	struct	sockaddr_storage peer;
+	/** こちらのアドレス */
+	struct	sockaddr_storage sock;
+	/** IPSEC NAT-T SA クッキー */
+	void	*sa_cookie;
+	/** 物理層のラベル (コピー) */
+	char	phy_label[16];
+
+	/** L2TPコールのリスト */
+	slist	call_list;
+	/*
+	 * 送信 Window 関連
+	 * 	pos == lim は、バッファが一杯であることを示します。
+	 * 	pos == -1、lim == 0 はバッファが空であることを示します。
+	 */
+	/** 利用可能な送信バッファ。#winsz 分のリストになってます*/
+	bytebuffer **snd_buffers;
+	/** Sending buffer for ZLB */
+	bytebuffer *zlb_buffer;
+
+	/** 最後にコントロールメッセージを送信した時間 */
+	time_t	last_snd_ctrl;	
+	/** 最後にパケットを受信を送信した時間 */
+	time_t	last_rcv;	
+
+	/**
+	 * アクティブクローズの場合で、StopCCN を未送信の場合は、StopCCN
+	 * で伝える result code が入ります。
+	 */
+	int	active_closing;
+
+	/** アイドル状態から HELLO 送信までの秒数。0以下は無効。*/
+	int hello_interval;
+	/** HELLO のタイムアウト */
+	int hello_timeout;
+	/** HELLO 送出時刻 */
+	time_t	hello_io_time;
+	/** 確立した call 数 */
+	int	ncalls;
+
+	int	
+	    /* L2TP Data Message でシーケンス番号を使うか */
+	    data_use_seq:1,
+	    /** HELLO の応答待ちかどうか */
+	    hello_wait_ack:1;
+
+} l2tp_ctrl;
+
+/**
+ * L2TP コールを示す型。
+ */
+typedef struct _l2tp_call {
+	/** ID */
+	unsigned	id;
+	/** 状態 */
+	int		state;
+	/** 親コントロールコネクション */
+	l2tp_ctrl 	*ctrl;
+	/** バインドした {@link ::_npppd_ppp ppp} */
+	void		*ppp;
+	/** セッション ID */
+	int		session_id;
+	/** 先方のセッション ID */
+	int		peer_session_id;
+	/** 次の送信シーケンス番号 */
+	uint16_t	snd_nxt;
+	/** 受信シーケンス番号 */
+	uint16_t	rcv_nxt;
+	/** Calling number */
+	char		calling_number[32];
+	
+	uint32_t	/** Sequencing required */
+			seq_required:1,
+			/** Use sequencing in the data connection */
+			use_seq:1;
+} l2tp_call;
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+l2tp_call        *l2tp_call_create (void);
+void             l2tp_call_init (l2tp_call *, l2tp_ctrl *);
+void             l2tp_call_destroy (l2tp_call *, int);
+void             l2tp_call_admin_disconnect(l2tp_call *);
+int              l2tp_call_recv_packet (l2tp_ctrl *, l2tp_call *, int, u_char *, int);
+void             l2tp_call_ppp_input (l2tp_call *, u_char *, int);
+
+void             l2tp_ctrl_destroy (l2tp_ctrl *);
+l2tp_ctrl        *l2tp_ctrl_create (void);
+void             l2tp_ctrl_input (l2tpd *, int, struct sockaddr *, struct sockaddr *, void *, u_char *, int);
+int              l2tp_ctrl_send(l2tp_ctrl *, const void *, int);
+int              l2tp_ctrl_send_packet(l2tp_ctrl *, int, bytebuffer *, int);
+int               l2tp_ctrl_stop (l2tp_ctrl *, int);
+bytebuffer       *l2tp_ctrl_prepare_snd_buffer (l2tp_ctrl *, int);
+void             l2tp_ctrl_log (l2tp_ctrl *, int, const char *, ...) __attribute__((__format__ (__printf__, 3, 4)));
+int              l2tpd_init (l2tpd *);
+void             l2tpd_uninit (l2tpd *);
+int              l2tpd_start (l2tpd *);
+void             l2tpd_stop (l2tpd *);
+void             l2tpd_stop_immediatly (l2tpd *);
+l2tp_ctrl        *l2tpd_get_ctrl (l2tpd *, int);
+void             l2tpd_add_ctrl (l2tpd *, l2tp_ctrl *);
+void             l2tpd_ctrl_finished_notify(l2tpd *);
+void             l2tpd_remove_ctrl (l2tpd *, int);
+int              l2tpd_add_listener (l2tpd *, int, const char *, struct sockaddr *);
+void             l2tpd_log (l2tpd *, int, const char *, ...) __attribute__((__format__ (__printf__, 3, 4)));
+
+const char   *l2tp_ctrl_config_str (l2tp_ctrl *, const char *);
+int          l2tp_ctrl_config_int (l2tp_ctrl *, const char *, int);
+int          l2tp_ctrl_config_str_equal (l2tp_ctrl *, const char *, const char *, int);
+int          l2tp_ctrl_config_str_equali (l2tp_ctrl *, const char *, const char *, int);
+const char   *l2tpd_config_str (l2tpd *, const char *);
+int          l2tpd_config_int (l2tpd *, const char *, int);
+int          l2tpd_config_str_equal (l2tpd *, const char *, const char *, int);
+int          l2tpd_config_str_equali (l2tpd *, const char *, const char *, int);
+int          l2tpd_reload(l2tpd *, struct properties *, const char *, int);
+void         l2tpd_log_access_deny(l2tpd *, const char *, struct sockaddr *);
+#ifdef __cplusplus
+}
+#endif
+#endif