Mandatory-Lcp - HP VSR1000 Layer 2 - Wan Access Command Reference

Predefined user roles
network-admin
Usage guidelines
The LNS uses the LAC as an authentication proxy. The LAC sends the LNS all user authentication
information from users and the authentication method configured on the LAC itself. The LNS then checks
the user validity according to the received information and the locally configured authentication method.
When mandatory CHAP authentication is configured, a user who depends on an LAC to initiate
tunneling requests is authenticated by both the LAC and the LNS for increased security. Some users might
not support the authentication on the LNS. In this situation, do not configure this command, because
CHAP authentication on the LNS will fail.
This command is available only to L2TP groups in LNS mode.
This command is effective only on NAS-initiated L2TP tunnels.
The mandatory-lcp command takes precedence over this command. If both commands are configured
for an L2TP group, the LNS performs LCP renegotiation with the user.
Examples
# Force the LNS to perform a CHAP authentication for users.
<Sysname> system-view
[Sysname] l2tp-group 1 mode lns
[Sysname-l2tp1] mandatory-chap
Related commands

mandatory-lcp

mandatory-lcp
Use mandatory-lcp to force an LNS to perform LCP renegotiation with users.
Use undo mandatory-lcp to restore the default.
Syntax
mandatory-lcp
undo mandatory-lcp
Default
An LNS does not perform LCP renegotiation with users.
Views
L2TP group view
Predefined user roles
network-admin
Usage guidelines
By default, to establish a NAS-initiated tunnel, the user performs LCP negotiation with the LAC. If the
negotiation succeeds, the LAC initiates a tunneling request and sends the negotiation results (including
authentication information) to the LNS. Then, the LNS determines whether the user is valid based on the
information received instead of performing LCP renegotiation with the user.
18