Manuals / Patton electronic / Computer Equipment / Server

Patton electronic 29XX manual Layer 2 Tunneling Protocol L2TP

Models: 29XX

1 326

Download 326 pages 58.53 Kb

Page 290

Chapter 24 Layer 2 Tunneling Protocol (L2TP)

Introduction	291
L2TP Configuration	291
Static Authentication	291
RADIUS Authentication	292
Configuration Example	293
Cisco Configuration	293

290

Image 290

Patton electronic 29XX manual Layer 2 Tunneling Protocol L2TP

Contents

Remote Access Server Patton Electronics Company, Inc Contents Drop and Insert 138 Interfaces 178 Sync PPP 276 Contents Contents Audience Structure Typographical conventions used in this document General conventions Mouse conventions Chapter contents Introduction Introduction Logging into the HTTP/HTML Administration Pages HTTP/HTML and Snmp Object Format Saving HTTP/HTML Object Changes Home Introduction Home Operating Status Variables Immediate Actions Immediate Actions buttons Import/Export Export Configuration Import/Export main window Typical access server flash memory configuration data Import Configuration Alarms Sample alarm indication Displaying the Alarms window Total System AlarmsX alarmTotal Alarm Response Outputs Alarms Modify Response-Configuring the alarm response system Alarm Snmp Trap IP 2 alarmTrapIp1 Alarm Syslog Priority syslogAlarmPriorityAlarm Snmp Trap IP 1 alarmTrapIp0 Alarm Snmp Trap IP 3alarmTrapIp2 Modify Alarms-Configuring alarm severity levels Modify Alarms settings window Authentication ID suID Validated via primary server auAuthenticationsValidPrimary Displaying the Authentication windowValidated authentications auAuthenticationsValidTotal Statistics section Primary server timeouts auPrimaryServerTimeouts Validated via static database auAuthenticationsValidStaticDenied authentications auAuthenticationsDenied Secondary server timeouts auSecondaryServerTimeouts Configuration section Validation auValidation Secondary Host Address auSecondaryHostAddress Timeout auTimeoutHost Address auHostAddress Host Port auHostPort Radius Packet Format auRadiusPacketFormat Accounting Enable auAccountingEnableAccounting Port auAcctPort Radius Session ID Size auRadiusRunningIdSize Setting Up Authentication Radius Session ID auRadiusRunningId Authentication Configuration screen Host Address auHostAddress Accounting Port auAcctPort Static User Authentication Adding Static Users Modify Static User Service Mask suServiceMask Service IP suServiceIPService Port suServicePort Filter ID suFilterId DAX Configuring the DAX Circuit Type daxClockMode Main Reference daxClockMainRef Fallback Reference daxClockFallbackRef DAX Clock Status alarm condition Clock Status daxClockFailure Dial Dial Dial Dial Phone Dial Introduction Call ID diactIndex Dial In main windowCall Sorting diPageSort ML ID diactMultiIndex Disconnect Reason diactTerminateReason State diactStateDuration diactSessionTime Modulation diactModulation Username diactUsername Dial Modulations windowConnect Speed diactTxSpeed Transmit Connection Speed diactTxSpeed DSP Link diactDSPIndexConnection Modulation diactModulation Data Compression Protocol diactCompression Error Correction diactErrorCorrectionReceive Connection Speed diactRxSpeed Locally Initiated Renegotiates diactLocalRenegotiates Dial Telco window Dial Telco window Time Call Is/Was Active diactSessionTime WAN Link diactLinkIndexTime Slot diactSlotIndex Termination Reason diactTerminateReason Dial Protocol window Shared Unique ID diactMultiIndex IP Address diactIP LCP Authentication LCPAuthOptionsProtocol diactProtocol Port # on Remote Machine diactPort Next Hop diForceNextHop Local-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProtRemote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Dial In Details Dial In Details window Dial In Modify default window Dial In Modify window modify Login, Service, and DNS objects IP Address Pool diIpPool Modify LoginLogin Technique diLoginTechnique Default Service diService Password Prompt diPasswordPromptModify Service Username Prompt diUsernamePrompt Modify Domain Name Server Success Banner diSuccessBanner Modify AttemptsFailure Banner diFailureBanner Modify Configuration Modify Maximum Time Modify Isdn Configuration 110 diV110Enable Modify V.92 Configuration Modify Modem Configuration V34diModemV34Enable V90diModemV90EnableK56flexdiModemK56Enable V32diModemV32Enable CarrierLossDuration diModemCarrierLossDuration Billing Delay diBillingDelayGuard Tone diModemGuardTone Answer Tone LengthdiModemAnswerToneLength Manage Dnis Window Direct0-No compression will be used Manage Dnis main window Dnis Entry Window Called Calling Number dnisPoolDesrcDialedNumber Dnis Profiles ID dnisIpProfileId Login Technique dnisProfileLoginTechniqueDnis Profiles Main Window IP Pool dnisProfileAssignedIpPool Telnet Mode dnisProfileTelnetMode Service Port dnisProfileServicePortService IP dnisProfileServiceIP Dovbs dnisProfileDOVBS Dnis Profile Entry Window Status dnisIpProfileStatusAdd a Dnis Profile IP Pool dnisProfileSAssignedIpPool Dovbs dnisProfileDOVBS Service Port dnisProfileServicePort IP Address Pool dnisIpPool Dnis IP Pools WindowID dnisIpPoolId Status dnisIpPoolStatus Dnis IP Pool Entry Window Dnis IP Pools Entry window Dial In User Statistics window User Statistics Call Identification, Session Call Identification Session Time Left In Session diactRemainingSession Termination Reason diactTerminateReason Dial Dial State at termination diactTerminateState PPP Statistics LCP Statistics Local Multilink Mrru diStatLcpLocalMRRU LCP Authentication LCPAuthOptionsRemote MRU diStatRemoteMRU Remote Multilink Mrru diStatLcpRemoteMRRU Transmit Frame Check Seq. Size diStatTransmitFcsSize Local-Remote AC Comprsn diStatLocalToRemoteACCompRemote-Local AC Comprsn diStatRemoteToLocalACComp Receive Frame Check Seq. Size diStatReceiveFcsSize Remote-Local VJ Protocol Comprsn diIpRemoteToLocalCompProt Operational Status diIpOperStatusLocal-Remote VJ Protocol Comprsn diIpLocalToRemoteCompProt Remote Max Slot ID diIpRemoteMaxSlotId Filters diStatIpFilterAtoJ Primary Domain Name Server diactPrimaryDNSSecondary Domain Name Server diactSecondaryDNS Phone Data Physical Layer Transmit Connection Speed diactTxSpeed Error Correction diactErrorCorrectionModulation Symbol Rate diactSymbolRate Receive Connection Speed diactRxSpeed Remote Initiated Retrains diactRemoteRetrains Locally Initiated Retrains diactLocalRetrainsRemote Initiated Renegotiates diactRemoteRenegotiates Dial Out Dial Out 105 106 Active Calls doActive Dial Out Main WindowCall Sorting doPageSort Call ID doactIndex Duration doactSessionTime User doactUsernameState doactState Disconnect Reason doactTerminateReason 109 Speed doactTxSpeed Dial Out Details windowModulation doactModulation Dial Out Modify window Dial Out Details window Password Prompt doPasswordPrompt TCP Type doServiceTypeLogin Technique doLoginTechnique TCP Port doTcpPort Login Attempts Allowed doAllowAttempts Failure Banner doFailureBanner Time to Login sec doLoginTimeout Maximum Session Time doSessionTimeoutMaximum Idle Time doIdleTimeout Call History Timeout min doLingerTime V21 doModemV21Enable Isdn doModemISDNEnableV22 doModemV22Enable Maximum Speed doModemMaxSpeed Carrier Loss Duration doModemCarrierLossDuration Minimum Speed doModemMinSpeedGuard Tone doModemGuardTone Retrain doModemRetrain Status locationstatus Dial Out Locations WindowRestrict Modification doModemRestrictMods Add Location Maximum Session Time locationSessionTimeout Multilink locationConfigMultilinkIdle Timeout locationIdleTimeout Authentication Technique locationAuthTechnique View/Modify location details Dialing Locations Locations Link Dial Out Modem Profiles WindowAdd Modem Profile Profile ID modemProfileId RetrainmodemRetrain Guard Tone modemGuardToneCarrier Loss Duration modemCarrierLossDuration Compression modemCompression Status modemStatus Billing Delay modemBillingDelayDial Out User Statistics Window View modem profile Call ID doactIndex Password doactPasswordCall Identification Username doactUsername Wan Link doactLinkIndex Minutes until timeout doactRemainingIdleDsp Link doactDSPIndex Time Slot doactSlotIndex 126 Bad Controls doStatBadControls PPP StatisticsBad Address doStatBadAddresses Packets too long doStatPacketTooLongs Remote MRU doStatRemoteMRU Remote LCP Authentication doStatLcpAuthLocal MRU doStatLocalMRU Local Multilink Mrru doStatLcpLocalMRRU Local AC Compression doStatLocalToRemoteACComp Local PPP Protocol Compression doStatLocalToRemoteProtCompRemote PPP Protocol Compression doStatRemoteToLocalProtComp Remote AC Compression doStatRemoteToLocalACComp Octets Sent doactSentOctets Bad Packets doactErrorFramesNumber Called doactNumberDialed Octets Received doactReceivedOctets Tx Connection Speed doactTxSpeed Error Correction Protocol doactErrorCorrectionConnection Modulation doactModulation Rx Connection Speed doactRxSpeed An example section of dialout Callback Dial-in Modify Configuration Callback diCallbackConfig Dial-in Main Window Dial-in user waiting to be called back Callback phone number suCallbackNumber Radius ConfigurationCallback Configuration suCallbackConfig Accounting information Dialout Drop and Insert Drop and Insert main window Session Timeout drSessionTimeoutCall History Timeout drLingerTime Active Calls drActive How Drop and Insert works Using Drop and Insert Drop and insert diagram Digital Signal Processing DSP 152 DSP main window DSP Settings main window Instance #2 Use dspUseSecond Instance #1 Use dspUsefirstInstance #2 State dspStateSecond DSP PCM Capture DSP Connection PerformanceDSP Memory Capture DSP Debugging Events Connection Summaries DSP Connection Totals Remote-Reneg dspRemoteRenegotiates Reboot-A dspTotalRebootDueToFailsReboot-B dspTotalRebootDueToError Local-Retrain dspLocalRetrains Desired State dspDesiredState DSP information windowDSP Status Call Statistics Debug Statistics Ethernet Ethernet Main Window State boxEtherAState PrimaryIpMask boxEtherAPrimaryIpMask ConfigPrimaryIPAddress boxEtherAPrimaryIpAddress PrimaryIpFilters boxEtherAPrimaryIpFilters Ethernet Modify Window Ethernet Modify Window Ethernet Statistics Technique ConfigurationAlignment Errors dot3StatsAlignmentErrors Other Errors dot3StatsInternalMacTransmitErrors FCS Errors dot3StatsFCSErrorsSQE Test Errors dot3StatsSQETestErrors Carrier Sense Errors dot3StatsCarrierSenseErrors Chip Set ID dot3StatsEtherChipSet Other Received Errors dot3StatsInternalMacReceiveErrorsReceived Frames Too Long dot3StatsFrameTooLongs Filter IP Defining a filter Modify Filter Name filterIpName Direction filterIpDirection Comparison filterIpSourceAddressCmp Action filterIpActionSource IP Address filterIpSourceIp Destination Port Destination IPSource Port TCP Established filterIpTcpEstablished Port filterIpDestinationPortProtocol filterIpProtocol An example of using a filter IP Filter showing default for dialout 168 169 Frame Relay Congestion frameEnableCongestion Frame Relay main window Frame Relay main window Link X frDlcmiIfIndex Hdlc Statistics on Link Dlmi Window MultiCast Service frDlcmiMulticast Signalling frDlcmiStateError Threshold N392 frDlcmiErrorThreshold Data Link Protocol frDlcmiAddress Bidirectional PollingfrDlc rDlcmiPollingBiDir Dlci windowLMI Interface frDlcmiInterface Polling Verification T392 frDlcmiPollingVerification Interface # FrameIPInterfaceNum Congestion frameEnableCongestionDlci frCircuitDlci State frCircuitState Interfaces Interfaces main window Number ifIndex Operational Status ifOperStatus Admin Stat ifAdminStatusType ifType Interface Details Description ifDescr Physical Address ifPhysAddress Max Transfer Unit ifMTUSpeed ifSpeed Last Change ifLastChange Received and Discarded w/No Errs ifInDiscards Received Errored Packets ifInErrorsRequested Errored Packets ifOutErrors Received w/Unknown Protocol ifInUnknownProtos 184 16 IP 186 IP main window IP main window Discarded for Address Errors ipInAddrErrors Default Time-To-Live ipDefaultTTLDiscarded for Header Errors ipInHdrErrors Forwarding ipForwarding Forwarded Datagrams ipForwDatagrams Discarded w/No Errors ipInDiscardsReassembly Timeout ipReasmTimeout Discarded for Unknown Protos ipInUnknownProtos Modify TCP TCP main window Retransmit-Timeout Maximum tcpRtoMax Retransmit-Timeout Algorithm tcpRtoAlgorithmRetransmit-Timeout Minimum tcpRtoMin Established Resets tcpEstabResets TCP Details UDP Received udpInDatagrams Handling of Netbios UDP Broadcasts boxNetbiosUdpBridgingOthers Received with No Delivery udpInErrors Received With No Ports udpNoPorts Icmp Receive/Send Messages window Errors icmpInErrors, icmpOutErrorsBlock Icmp redirects boxBLockIcmpRedirects Total Received/Sent icmpInMsgs, imcpOutMsgs Times Exceeded icmpInTimeExcds, icmpOutTimeExcds Parameter Problems icmpInParmProbs, icmpOutParmProbsSource Quenchs icmpInSrcQuenchs, icmpOutSrcQuenchs Redirects icmpInRedirects, icmpOutRedirects Time Stamps icmpInTimestamps, icmpInTimestamps Addressing InformationEcho Replys icmpInReps, icmpOutReps Address Mask Requests icmpInAddrMasks icmpOutAddrMasks Entry Interface Index ipAdEntIfIndex Entry Reassembly Maximum Size ipAdEntReasmMaxSizeRouting Information Entry Subnet Mask ipAdEntNetMask Destination ipRouteDest Mask ipRouteMask Interface ipRouteIfIndex Gateway RouteGatewayCost RouteCost State RouteState Adding a static routes to a remote network Adding a point-to-point routeAdding a static point-to-point route to a remote host Forwarding table window Advanced… Protocol ipRouteProto Next Hop ipRouteNextHopType ipRouteType Route Destination ipRouteDest IP Routing Destination windowInfo ipRouteInfo Tag RouteTag Seconds Since Updated ipRouteAgeAddress Translation Information Physical ipNetToMediaPhysAddress Interface ipNetToMediaEntryNet Address ipNetToMediaNetAddress Type ipNetToMediaType MFR Version 218 Country lineSigCountry Line SignallingMFR Version 2 main window Interregister Signalling MFR Version 2-Modify MFR Version 2 Modify window 213 214 Interregister Signalling 216 A1010 A1111 A1212 A1313 A1414 A1515 218 RIP Version Responses Sent rip2GlobalQueries RIP Version 2 main windowRoute Changes Made rip2GlobalRouteChanges Address rip2IfConfAddress Receive rip2IfConfReceive Adding a RIP address Authentication Key rip2IfConfAuthKey RIP Version 2-ConfigurationAuthentication Type rip2IfConfAuthType Domain rip2IfConfDomain RIP Version 2 Statistics Sent Updates rip2IfStatSentUpdates Status rip2IfStatStatus Snmp Snmp window Snmp window Error Status Read Only snmpInReadOnlys ASN ParseErrors snmpInASNParseErrsError Status Too Big snmpInTooBigs Generated Errors snmpInGenErrs Out Get Requests snmpOutGetRequests Generated Errors snmpOutGenErrsAuthentication Failure Traps snmpEnableAuthenTraps Get Next Requests snmpOutGetNexts System System Version boxSnmpVersion System main windowSnmp and Http Manufacturer Message Blocks Free boxHeapFreeSpace Operating System Heap MemoryTotal Size boxHeapSize Largest boxHeapLargestSpace Enclosure System Payable featuresInstallation Other Physical Location sysLocation System Services sysServicesWeb Settings boxBackgroundFlag Monitor Privilege boxMonitorPrivilege System-Modify window System-Modify window Enable Payable FeaturesboxFeatureEnableKey No. of Buffers boxbuffercount System-Packet Holding Message BlocksBuffer Size boxbuffersize No. of Times UnavailableboxCountBufferUnavailable No. Free boxbuffersfreeNo. of Tasks Waited boxCountBufferTaskWait System Log System Log Main Window System Log main window Priority System Log-ModifyDaemons Min Priority for Snmp Trap Daemon syslogTrapPriority Min Priority for Console RS-232 syslogConsolePriorityMin Priority for Flash Storage syslogFlashPriority Min Priority for RAM SyslogTablePriority Unix Facility syslogUnixFacility Maintain Flash Storage syslogFlashClear MaintenanceCall Trace syslogCallTrace Message slMessage System Log-Volatile MemoryTime slTick Time slfTick System Log-Non-Volatile MemoryWhat the System Log messages are telling you Message slfMessage T1/E1 Link Error Injection linkInjectError 263 Path Code Violations dsx1FarEndCurrentPCVs 271 T1/E1 Link Activity main window Type dsx1LineType T1/E1 Link Activity main windowLink dsx1LineIndex Far End Alarm Failure Alarms PresentPhysical Line Alarms dsx1LineStatus Circuit ID dsx1CircuitIdentifier TS16 Alarm Indication Signal Failure Alarm Indication Signal AIS FailureLoss Of Signal Failure Loss Of Frame Failure Isdn Signaling Alarms linkSignalStatus Snmp MIB definition E1 TS16 AIS Valid Intervals dsx1ValidIntervals Line Status-ConfigurationTime Elapsed dsx1TimeElapsed Circuit ID dsx1CircuitIdentifier WAN Circuit Configuration-ModifyLine Interface Settings Receive Equalizer linkRxEqualizer Line Type dsx1LineTypeLine Coding dsx1LineCoding Signal Mode dsx1SignalMode Yellow Alarm Format linkYellowFormatSignalling Settings Line Build Out linkLineBuildOut Test Settings Send Code dsx1SendCode Loopback Config dsx1LoopbackConfigError Injection linkInjectError Desired Function channelfunction Line Status-Channel AssignmentChannel channelIndex Near End Line Statistics-Current CurrentState ChannelState Severely Errored Frame Seconds dsx1CurrentSEFSs Errored Seconds dsx1CurrentESsSeverely Errored Seconds dsx1CurrentSESs Line Errored Seconds dsx1CurrentLESs Near End Line Statistics-History Near End Line Statistics-Totals Line Errored Seconds dsx1TotalLESs Severely Errored Seconds dsx1TotalSESsSeverely Errored Frame Seconds dsx1TotalSEFSs Bursty ErroredSeconds dsx1TotalBESs Far End Line Statistics-Current Far End Line Statistics-History Line Errored Seconds dsx1FarEndIntervalLESs Severely Errored Seconds dsx1FarEndIntervalSESsSeverely Errored Frame Seconds dsx1FarEndIntervalSEFSs Bursty Errored Seconds dsx1FarEndIntervalBESs Far End Line Statistics-Totals Configuring Nfas Bursty Errored Seconds dsx1FarEndTotalBESsUsing Non-Facility Associated Signaling Nfas Degraded Minutes dsx1FarEndTotalDMs RAS hosts 1 Nfas group containing 3 PRIs Sync PPP Sync PPP WAN Circuit Configuration window Line Status-Channel Assignment PPP configuration PPP Main Window Default Settings Ip Address pppServiceIpAddressIp Mask pppServiceIpMask State pppActState Authentication Username pppDefaultAuthenticationUsername Authentication Technique pppDefaultAuthenticationTechniqueAuthentication Side pppDefaultAuthenticationSide Authentication Password pppDefaultAuthenticationPassword Link frDlcmiIfIndex Compression pppDefaultIpCompressionPPP Link Window Status framerelStatus Link Configuration Authentication Password pppAuthenticationPassword Authentication Side pppAuthenticationSideAuthentication Username pppAuthenticationUsername Security Level pppAccessLevel Bad Address pppStatBadAddresses Link Compression pppLinkCompressionAllow Magic Number Negotiation pppMagicNumber Bad Controls pppStatBadControls Peer-Local ACC Map pppStatPeerToLocalACCMap LCP AuthenticationpppStatLcpAuthACC Map pppStatLocalToPeerACCMap Local-Remote AC ComprsnpppStatLocalToRemoteACComp Receive Frame Check Seq. Size pppStatReceiveFcsSize Remote-Local AC Comprsn pppStatRemoteToLocalACCompTransmit Frame Check Seq. Size pppStatTransmitFcsSize Operational Status pppIpOperStatus Octets Sent pppActSentOctets Remote Max Slot ID pppIpRemoteMaxSlotIdLocal Max Slot ID pppIpLocalMaxSlotId Octets Received pppActReceivedOctets Modify Link Configuration Window Link Configuration Layer 2 Tunneling Protocol L2TP L2TP Configuration Static Authentication Radius Authentication L2TP Radius Authentication Configuration Example Cisco Configuration This will enable the use of tunnel authentication Contacting Patton Patton Electronics Company contact information About window License End User License Agreement Definitions Term WarrantyTitle Grant of License Appendix a Supported Radius Attributes Access-Accept Attributes Access-Request Attributes Access-Challenge Attributes Accounting-Start Attributes Accounting-Stop Attributes Appendix B MIB trees Model 2960 MIB Tree Structure Appendix C Technical Reference Radius Client/Server Architecture Configuring a Radius serverWhat Is RADIUS? Radius Services Radius Authentication Procedure Radius Standards RADIUS-Where Can I Get It? Radius Resources Overview Configuring RadiusConfiguring Radius Authentication Authentication window Using Snmp with the Access Server Finding the Snmp Name Finding the branch where the Snmp parameter resides MIB tree for Model 2960 access server Configuring Non-Facility Associated Signaling Nfas Configuring Nfas Configuring Frame Relay Line Configuration WAN Channel Assignment main screen Configuring Frame Relay link parameters Configuring PVCs Configuring Permanent Virtual Circuits Click on Submit Query Configuring IP routing with a Frame Relay Link IP routing with Frame Relay example Link Status and the IP Forwarding Click Add Route Setting up a Dnis user profile Configuring DnisSetting up IP address pools by configuring Dnis Ip Pools Setting up a Dnis group Configuring a leased line/dedicated line connection Configuring the RAS Configuring the remote end using Microsoft Windows Modem properties window Under the Options tab set Redial attempts to a high number