3Com 3036, Configuration Manual

Page: 614 / 762

610 C
HAPTER
43: C
ONFIGURING
L2TP
Table 673 Configure the Name of the Receiving End of the Tunnel
When the group number of L2TP is 1 (the default L2TP group number), it is
unnecessary to specify the
remote-name . If the name of remote end is still
specified in the view of L2TP group 1, L2TP group 1 will not work as the default
L2TP group.
Only L2TP group 1 can be set as the default group.
The s
tart l2tp
command and the
allow l2tp
command are mutually exclusive.
That means after one is configured, the other will automatically become invalid. A
L2TP group cannot serve LAC and LNS at the same time.
By default, receiving dial-in from LAC is disabled.
Configure the Local VPN
User
In the mode of “fullusername@domain” and password, LAC conveys these
information input by VPN users to LNS for authentication, LNS will perform the
local authentication first and then the RADIUS authentication to ensure these
users are legal VPN users. The process of RADIUS authentication will be removed
once users have passed local authentication. These VPN users can access internal
resource after the authentication at LNS.
Perform the
ppp authentication-mode
configuration in interface view and make
the other configurations in system view.
Table 674 Configure Local VPN Users
At LNS, local user name configured adopts the mode of “ fullusername@domain”
Advanced
Configuration at LAC
or LNS
Advanced configurations at LAC side includes:
■
Configure the local name
■
Enable tunnel authentication and set password
■
Configure the interval for sending Hello messages
Operation Command
Set the name of the receiving end of the
tunnel.
allow l2tp virtual-template
virtual-template-number [ remote
remote-name ]
Remove the name of the receiving end of
the tunnel.
undo allow
Operation Command
Enable AAA.
aaa-enable
Configure the authentication method
table of PPP user
aaa authentication-scheme ppp {
default | list-name } { method1
}
[
method2 ... ]
Specify accounting scheme configure
information
aaa accounting-scheme optional
Configure to authenticate users.
ppp authentication-mode
{
pap | chap
}
Set user name and password.
local-user username password { simple
| cipher } password