3Com 10014299 manual Enable AAA authentication, Configure Virtual-Template, III. Procedures

630CHAPTER 43: CONFIGURING L2TP

[Router2] ip pool 1 192.168.0.2 192.168.0.100

bEnable AAA authentication.

[Router2] aaa-enable

[Router2] aaa authentication-scheme ppp default local

cConfigure Virtual-Template 1.

[Router2] interface virtual-template 1 [Router2-Virtual-Template1]ip address 192.168.0.1 255.255.255.0

[Router2-Virtual-Template1] ppp authentication-mode chap

[Router2-Virtual-Template1] remote address pool 1

dConfigure a L2TP group and the related attributes.

Networking of VPN Protected by IPSec

[Router2] l2tp enable

[Router2] l2tp-group 1

[Router2-l2tp1]tunnel name lns-end

[Router2-l2tp1]allow l2tp virtual-template 1 remote lac-end

eConfigure the username and password that are the same as those configured at the LAC side.

[Router2] local-user vpdnuser@3Com.com password simple Hello

fEnable tunnel authentication and configure the tunnel authentication password to 3Com.

[Router2-l2tp1]tunnel authentication

[Router2-l2tp1]tunnel password simple 3Com router

gForce to implement local CHAP authentication.

[Router2-l2tp1] mandatory-chap

I. Networking requirements

To create an IPSec tunnel between the both ends of L2TP to transmit L2TP packets which are encrypted through IPSec, so as to guarantee the security for VPN.

II. Networking diagram

Figure 197 Networking of VPN protected by IPSec

Modem
PSTN	Router1	IPSec encryption tunnel Router2
PC1		Tunnel
ISDN	LAC	LNS
PC2		WAN

HeadquartersCompany

headquarters

III. Procedures

1Configuration at the user side

Set up a dialup network whose number is the access number of Router1, and it receives the IP address assigned by the LNS server. Input “vpdnuser” as the username and “Hello” as the password in the dialup terminal window.

2Configuration at Router1 (LAC side)

a Configure the username and password.

[Router1] local-user vpdnuser password simple Hello