3Com 3C13636 Configuration Manual page 1232

3Com Router 3000 Ethernet Family
Configuration Guide
II. Network diagram
VPN user
Figure 2-6 Network diagram of NAS-Initialized VPN
III. Configuration procedure
1) Configuration on user end
On user end, input VPN username "vpdnuser" and password "Hello" in dial-up internet
window, with dial-in number being 170. Input username "username" and password
"userpass" for RADIUS authentication in the dial-up terminal window displayed after
dialing.
2) Configuration on NAS side
(In this example 3Com A8010 access server is used as the device on LAC side)
# On A8010, set "170" as the dial-in number.
# On RADIUS access server, configure a VPN user with user name "username" and
password "userpass", and set IP address of the corresponding LNS device (In this
example, IP address of the serial port connected with the tunnel on LNS side is
202.38.160.2.).
# Set local device name to A8010, adopt tunnel authentication, set tunnel
authentication password to 3Com.
3) Configuration on the router (on LNS side)
# Set user name and password (consistent with the setting on user end).
[3Com] local-user vpdnuser
[3Com-luser-vpdnuser] password simple Hello
[3Com-luser-vpdnuser] service-type ppp
[3Com-luser-vpdnuser] quit
# Perform local authentication on VPN users.
[3Com] domain system
[3Com-isp-system] scheme local
[3Com-isp-system] ip pool 1 192.168.0.2 192.168.0.100
# Enable L2TP, and set an L2TP group.
[3Com] l2tp enable
[3Com] l2tp-group 1
# Configure a virtual template.
PSTN/ISDN
NAS
3Com Corporation
Chapter 2 Configuration of L2TP
Internet
Tunnel
LNS
2-25
Company
headquarter