Bug 14956

Summary: /etc/cipe/options is misleading
Product: [Retired] Red Hat Linux Reporter: Pekka Savola <pekkas>
Component: cipeAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED RAWHIDE QA Contact:
Severity: medium Docs Contact:
Priority: high    
Version: 7.0   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2000-08-01 09:48:30 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Pekka Savola 2000-08-01 09:48:28 UTC 
The stock /etc/cipe/options reads as follows:

---
# The static key. Keep this file secret!
# The key is 128 bits in hexadecimal notation.
#key             3248fd20adf9c00ccf9ecc2393bbb3e4

# You shouldn't have to modify anything past this point.

# The peer's IP address.
#ptpaddr         6.5.4.3
# Our CIPE device's IP address.
#ipaddr          6.7.8.9

#maxerr		-1
[ ... ]
---

This is highly misleading.  If you don't define ptpaddr and ipaddr, ciped
process won't even
start properly.  'me' and 'peer', on the other hand, can be ignored (due to
way ciped is started).

Please move the comment line down like 5-10 lines, depending on how crucial
you feel maxerr definition is.  For server-server VPN links setting it to
-1 would be helpful (ciped won't quit even after a lot of invalid packets
etc.)

Perhaps it would be good to change the defaults of ptpaddr and ipaddr to
some reserved
IP address space, like 10.0.0.1 and 10.0.0.2?  Or, something rarer like
172.16.100.1 and 172.16.100.2.
Comment 1 Nalin Dahyabhai 2000-08-07 09:27:45 UTC 
cipe-1.3.0-10 will include the ability to set IPADDR and PTPADDR values in the
sysconfig file, and the init script will pick them up (or not) depending on
whether or not they are defined.