Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010, Configuration Manual

Page: 439 / 794

Tunnel Tunnel Tunnel Tunnel Tunnel Tunnel Tunnel Client
Tag Peer Source Type Medium Password Id Name
------ ------ ------ ------ ------ -------- ------ ------
3 <null> <null> l2tp ipv4 <null> <null> <null>
Tunnel Tunnel Tunnel Tunnel
Tunnel Server Tunnel Max Virtual Switch
Tag Name Preference Sessions Tunnel RWS Router Profile
------ ------ ---------- -------- -------------- ------- -------
3 <null> 2000 0 system chooses <null> sanjose
Applying Default L2TP Tunnel Switch Profiles
You can apply a default L2TP tunnel switch profile to a virtual router by issuing the
aaa tunnel switch-profile command from Global Configuration mode. The router
uses the default tunnel switch profile if the tunnel attributes returned from an AAA
domain map or tunnel group or from a RADIUS authentication server
do not include
a named tunnel switch profile. The router ignores the default tunnel switch profile
if the tunnel attributes returned from an AAA domain map or tunnel group or from
a RADIUS authentication server
do include a named tunnel switch profile.
The default L2TP tunnel switch profile applies to a specific virtual router. You can
apply a different default tunnel switch profile to each virtual router configured.
To apply a default L2TP tunnel switch profile to a virtual router:
1.
Create the virtual router to which you want to apply the default tunnel switch
profile.
host1(config)# virtual-router east
host1:east(config)#
2.
Issue the aaa tunnel switch-profile command to apply the default L2TP tunnel
switch profile in the context of this virtual router.
host1:east(config)# aaa tunnel switch-profile boston
3.
(Optional) Use the show aaa tunnel-parameters command to verify application
of the default tunnel switch profile.
host1:east(config)# run show aaa tunnel-parameters
Tunnel password is <NULL>
Tunnel client-name is <NULL>
Tunnel nas-port-method is none
Tunnel switch-profile is boston
Tunnel nas-port ignore disabled
Tunnel nas-port-type ignore disabled
Tunnel assignmentId format is assignmentId
Tunnel calling number format is descriptive
Applying L2TP Tunnel Switch Profiles by Using RADIUS
On the LAC, the router can receive tunnel configuration attributes through a RADIUS
authentication server. To use RADIUS to apply an L2TP tunnel switch profile to a
Configuring L2TP Tunnel Switch Profiles
■ 399
Chapter 13: Configuring an L2TP LNS