User Manual - Configuration Guide (Volume 3)
Versatile Routing Platform Chapter 2
Configuration of L2TP
2-16
2.4.2 Client-Initialized VPN
I. Networking requirement
VPN users first connect Internet, then originate tunnel connection request to LNS. After
LNS has accepted the request, a tunnel channel is established b etween LNS and VPN
users to fulfill data transmission between the users and the company headqu arters.
II. Networking diagram
Cleck going
on erramds
Internet
PSTN
LNS
Headquarter of
the corportion
NAS
Tunnel
Figure VPN-2-5 Networking diagram of Client-Initialized VPN
III. Configuration procedure
1) Configuration at user side
z Set user name to “vpnuser” and password to “hello” at dial-up terminal (the user
name and password have been registered in company).
z Set IP address of LNS to Internet interface address of the router (In the case, I P
address of the port where LNS side and the channel are connected is
202.38.160.2).
z Modify connection attributes, set the adopted protocol to L2TP and encryption
attribute to be self-defining. And select CHAP authentication to authent icate the
channel whose password is “quidway”.
2) Router configuration (at LNS side)
! Set a VPDN group and configure relative attributes
Quidway (config)# vpdn enable
Quidway (config)# vpdn-group 1
Quidway (config-vpdn1)# local name LNS
Quidway (config-vpdn1)# force-local-chap
Quidway (config-vpdn1)# accept dialin l2tp virtual-template 1 rem ote vpdnuser
! Set user name and password (consistent with the setting on A8010).
Quidway (config)# user vpnuser password 0 hello
! Start channel authentication and set channel authentication password.
Quidway (config-vpdn1)# l2tp tunnel authentication
Quidway (config-vpdn1)# l2tp tunnel password 0 quidway
! Define an address pool to distribute addresses to dial-in users.
Quidway (config)# ip local poo1 1 192.168.0.2 192.168.0.100