610 CHAPTER 43: CONFIGURING L2TP
Tabl e 673 Configure the Name of the Receiving End of the Tunnel
When the group number of L2TP is 1 (the default L2TP group number), it is
unnecessary to specify the remote-name. If the name of remote end is still
specified in the view of L2TP group 1, L2TP group 1 will not work as the default
L2TP group.
Only L2TP group 1 can be set as the default group.
The start l2tp command and the allow l2tp command are mutually exclusive.
That means after one is configured, the other will automatically become invalid. A
L2TP group cannot serve LAC and LNS at the same time.
By default, receiving dial-in from LAC is disabled.
Configure the Local VPN
User In the mode of “fullusername@domain” and password, LAC conveys these
information input by VPN users to LNS for authentication, LNS will perform the
local authentication first and then the RADIUS authentication to ensure these
users are legal VPN users. The process of RADIUS authentication will be removed
once users have passed local authentication. These VPN users can access internal
resource after the authentication at LNS.
Perform the ppp authentication-mode configuration in interface view and make
the other configurations in system view.
Tabl e 674 Configure Local VPN Users
At LNS, local user name configured adopts the mode of “ fullusername@domain”
Advanced Configuration at LAC or LNS
Advanced configurations at LAC side includes:
■Configure the local name
■Enable tunnel authentication and set password
■Configure the interval for sending Hello messages
Operation Command
Set the name of the receiving end of the
tunnel. allow l2tp virtual-template
virtual-template-number [ remote
remote-name ]
Remove the name of the receiving end of
the tunnel. undo allow
Operation Command
Enable AAA. aaa-enable
Configure the authentication method
table of PPP user aaa authentication-scheme ppp {
default | list-name } { method1} [
method2 ... ]
Specify accounting scheme configure
information aaa accounting-scheme optional
Configure to authenticate users. ppp authentication-mode { pap | chap
}
Set user name and password. local-user username password { simple
| cipher } password