>Number:         18071
>Category:       kern
>Synopsis:       pppoe* has no way to clear auth failure count (sys/net/if_spppsubr.c)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Aug 25 23:26:00 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     Jun-ichiro itojun Hagino
>Release:        NetBSD 1.6F
>Organization:
	
>Environment:
System: NetBSD starfruit.itojun.org 1.6F NetBSD 1.6F (STARFRUIT) #194: Wed Aug 21 13:17:41 JST 2002 itojun@starfruit.itojun.org:/usr/home/itojun/NetBSD/src/sys/arch/i386/compile/STARFRUIT i386
Architecture: i386
Machine: i386
>Description:
	there's no way for admins to clear authentication failure count
	on pppoe interface (sys/net/if_spppsubr.c, pp_auth_failures member).
>How-To-Repeat:
	have pppoe interface.  get some authentication failure.  locked into
	situation with the following dmesg:

Aug 26 12:51:04 peppermint /netbsd: pppoe0: lcp close(initial)
Aug 26 12:51:04 peppermint /netbsd: pppoe0: lcp open(initial)
Aug 26 12:51:04 peppermint /netbsd: pppoe0: authentication failed 5 times, not r
etrying again
>Fix:
	1. (quick workaround) pppoectl pppoe0 max-auth-failure=5
	2. provide alias to above, like "pppoectl pppoe0 clear-auth-failure"
	3. on LCP down, clear auth failure count.
>Release-Note:
>Audit-Trail:
>Unformatted: