3Com 3032 Configuration Manual page 612

608 C 43: C
HAPTER ONFIGURING
Basic Configuration at
LNS
Enable L2TP
L2TP
Table 668 Configure AAA and Local Users
Operation
Enable AAA.
Configure the authentication method
table of PPP user
Specify accounting scheme configure
information
Configure to authenticate users.
Set user name and password.
Remove the user name and password
By default, the local user name and password are not configured.
As the AAA attributes of L2TP are not standard attributes of RADIUS protocol, it is
necessary to add the definition of L2TP attributes to the attribute set of RADIUS
server.
Table 669 L2TP Attribute Table
Attribute value Name
100 Tunnel-Type
101 L2TP-Tunnel-Password
102 Local-Name
103 LNS-IP-Address
104 Tunnel-Medium-Type
105 L2TP group Number
Basic configuration at LNS side includes:
Enable L2TP
Create a L2TP group
Create a virtual template
Configure the name of the receiving end of the tunnel
Configure the local VPN user
The L2TP on a router can work normally only after it is enabled. If it is disabled, the
router will not provide the related function even if the L2TP parameters are
configured.
Perform the following configurations in system view.
Table 670 Enable/Disable L2TP
Operation
Enable L2TP
Disable L2TP
By default, L2TP is disabled.
Command
aaa-enable
aaa authentication-scheme ppp {
default | list-name } { method1} [
method2 ... ]
aaa accounting-scheme optional
ppp authentication-mode { pap | chap
}
local-user username password { simple
| cipher } password
undo local-user username
Description
Tunnel type (L2TP=1)
L2TP tunnel password
Local name of tunnel
IP address of LNS
Medium type of the tunnel (IP=1)
L2TP group number
Command
l2tp enable
undo l2tp enable