3Com MSR 50 Series, Configuration Manual

Page: 1613 / 2443

LNS Configuration 1613
If you enable LCP negotiation but do not configure authentication for the
corresponding virtual interface template, the LNS will not perform addition
authentication of users (In this case, users are authenticated only once on the LAC)
and will directly allocate addresses from the global address pool to the users.
Follow these steps to specify to perform LCP negotiation with users:
Configuring the Local
Address and the Address
Pool for Allocation
After an L2TP tunnel is set up between an LAC and an LNS, the LNS needs to
allocate an IP address from its address pool to a VPN user. Before specifying an
address pool, use the
ip pool command in system view or ISP domain view to
define the address pool. For detailed description about the ip pool command,
refer to “AAA/RADIUS/HWTACACS Configuration” on page 1751 . The system
prefers the address pool configured in domain view when allocating an IP address
to a VPN user.
Follow these steps to configure a local address and address pool:
To do... Use the command... Remarks
Enter system view system-view -
Enable L2TP l2tp enable Required
Disabled by default
Create an L2TP group and
enter its view l2tp-group group-number Required
By default, no L2TP group is
created.
Specify to perform LCP
negotiation with users mandatory-lcp Required
By default, an LNS does not
perform LCP negotiation with
users.
To do... Use the command... Remarks
Enter system view system-view -
Create a virtual interface
template and enter its view interface virtual-template
virtual-template-number
Required
By default, no virtual interface
template exists.
A virtual interface template is
intended to provide
parameters for virtual
interfaces to be dynamically
created by the router, such as
logical MP interfaces and
logical L2TP interfaces.
Configure the local IP address ip address ip-address { mask |
mask-length } [ sub ]
Required
Configure the authentication
mode for PPP users ppp authentication-mode
{ chap | pap } [ call-in |
domain isp-name ]
Required
By default, no authentication
is performed for PPP users.
Specify the address pool for
allocating an address to a VPN
user remote address { pool
[ pool-number ] | ip-address }
Optional
By default, address pool 0 (the
default address pool) is used.