Cisco AS5300 - Universal Access Server, Software Configuration Manual, Page: 92 / 198

Configuring VPDN
Cisco AS5300 Universal Access Server Software Configuration Guide 3-58
Configuring VPDN
Virtual private dial-up networking (VPDN) enables users to configure secure networks that take
advantage of Internet service providers (ISPs) that tunnel a company’s remote access traffic through
the ISP cloud.
Remote offices or mobile users can connect to their home network using local third-party dial-up
services. The dial-up service provider agrees to forward the company’s traffic from the ISP point of
presence (POP) to a company-run home gateway. Network configuration and security remains in the
control of the client. The dial-up service provider provides a virtual connection between the
company’s sites.
Note The MMP feature uses VPDN to connect multiple PPP sessions for which individual dial-in
calls have arrived on different stack group members. VPDN provides speed and reliability for the
setup and shutdown of Multilink PPP.
Configure
Verify
To verify your VPDN configuration:
•
Enter the show vpdn command to make sure the tunnels are active (see line 2 in the following
example):
5300# show vpdn
Active L2F tunnels = 2
Table 3-30 Configuring VPDN
Step Command Purpose
1
5300> enable
Password: <password>
5300#
Enter enable mode (also called
privileged EXEC mode).
Enter the password.
You have entered enable mode when the
prompt changes to
5300#
.
2
5300# configure terminal
Enter configuration commands, one per line. End
with CNTL/Z.
5300(config)#
Enter global configuration mode. You
have entered global configuration mode
when the prompt changes to
5300(config)#.
3
5300(config)# vpdn enable
Enable virtual private dial-up
networking.
4
5300(config)# vpdn outgoing domain1.com nas1 ip
172.21.9.18
5300(config)# vpdn outgoing domain2.com nas2 ip
173.22.10.19
Specify the name and IP address of the
remote host and the name to use when
authenticating a tunnel for forwarding
traffic to the remote host on a virtual
private dial-up network. In this example,
two remote hosts are specified.
5
5300(config-line)# Ctrl-Z
5300#
%SYS-5-CONFIG_I: Configured from console by
console
Return to enable mode.
This message is normal and does not
indicate an error.