Configuring An Lac To Automatically Establish An L2Tp Tunnel - HP MSR Router Series Wan Access Configuration Manual

For local AAA authentication, create a local user and configure a password for each remote user
•
on the LAC. The LAC then authenticates a remote user by matching the provided username and
password with those configured locally.
• For remote AAA authentication, configure the username and password of each user on the
RADIUS/HWTACACS server. The LAC then sends the remote user's username and password to the
server for authentication.
For more information about configuring AAA authentication, see Security Configuration Guide.
To enable AAA authentication on an LAC, you also need to configure PAP or CHAP authentication for
PPP users on the user access interfaces. For information about configuring PAP or CHAP, see
"Configuring PPP and MP."

Configuring an LAC to automatically establish an L2TP tunnel

To configure an LAC to automatically establish an L2TP tunnel, perform the following tasks:
Create a virtual PPP interface and configure an IP address for the interface.
•
In virtual PPP interface view, use the ppp pap or ppp chap command to configure the side to be
•
authenticated by PPP as follows:
Specify the PPP authentication method for the PPP user.
Configure the username and password of the PPP user.
The LNS then authenticates the PPP user. For more information, see "Configuring PPP and MP."
Trigger the LAC to automatically establish an L2TP tunnel.
•
To configure an LAC to automatically establish an L2TP tunnel:
Step
1. Enter system view.
2. Create a virtual PPP interface
and enter its view.
3. Configure the IP address of the
virtual PPP interface.
4. Configure the peer to be
authenticated.
5. Configure the LAC to
automatically establish an L2TP
tunnel with the LNS.
Command
system-view
interface virtual-ppp
interface-number
•
Assign an IP address to the
virtual PPP interface.
ip address address mask
•
Enable IP address negotiation
on the virtual PPP interface.
ip address ppp-negotiate
See "Configuring PPP and MP."
l2tp-auto-client l2tp-group
group-number
81
Remarks
N/A
By default, no virtual PPP interface
exists.
By default, no IP address is
assigned.
N/A
By default, an LAC does not
establish an L2TP tunnel.
An L2TP tunnel automatically
established in LAC-auto-initiated
mode exists until you remove the
tunnel by using the undo
l2tp-auto-client or undo
l2tp-group group-number
command.