Configuring The Local Aaa Scheme And The Users And Passwords; Lns Configuration; Configuring The Lns - 3Com MSR 50 Series Configuration Manual

Configuring the Local
AAA Scheme and the
Users and Passwords

LNS Configuration

Configuring the LNS

for three times, it considers that the L2TP tunnel is down and tries to
re-establish a tunnel with the peer.
A tunnel will be disconnected when there is no more user online, a network
■
failure occurs, or a network administrator wants to tear it down. Either of the
LAC and the LNS can initiate a tunnel disconnection request. Once a tunnel is
disconnected, the control connection and all the sessions within the tunnel will
be removed. When a user dials in, a new tunnel will be established.
For an LAC to use the local AAA scheme, you need to configure the users and
their passwords on the LAC.
Using the local AAA scheme, an LAC determines whether a dial up user is a legal
VPN user by checking whether it has a local user with the password configured.
An LAC initiates a tunneling request for only legal VPN users.
An LAC authenticates a user by the username and password the user has
registered.
For information about AAA configuration commands, refer to
on page 1761.
Follow these steps to configure the local AAA scheme and the users and
passwords:
To do...
Enter system view
Create a local user and enter
its view
Configure a password for the
local user
Authorize the user to use the
PPP service
Return to system view
Create an ISP domain and
enter its view
Configure the AAA scheme
for users in the PPP domain
c
CAUTION:
For successful authentication of users, you also need to perform PPP
■
configurations on the corresponding interface of the LAC, for example, the
asynchronous serial interface connecting with users. For PPP configuration
information, refer to
The local AAA scheme should be configured on the interfaces of access users.
■
Follow these steps to configure the LNS:
Use the command...
system-view
local-user username
password { simple | cipher }
password
service-type ppp
quit
domain isp-name
authentication ppp local
authorization ppp local
accounting ppp local
"PPP and MP Configuration" on page
LNS Configuration 1609
"Configuring AAA"
Remarks
-
Required
By default, no local user or
password is configured on an
LAC.
Required
-
Required
Required
Local AAA scheme by default
363.