Allocating Addresses To Access Users - Huawei AR1200 series Configuration Manual

Huawei AR1200 Series Enterprise Routers
Configuration Guide - VPN
Context
Do as follows on LNS:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
l2tp-group group-number
The L2TP group view is displayed.
Step 3 Choose one of the following commands to configure the authentication scheme.
l Run the mandatory-lcp command to configure the mandatory LCP re-negotiation.
l Run the mandatory-chap to configure the mandatory local CHAP authentication.
l Skip this step to perform the agent authentication.
By default, the agent authentication is adopted.
Step 4 Run:
quit
Return to the system view.
Step 5 Run:
aaa
The AAA view is displayed.
Step 6 Choose one of the following commands to configure the user authentication.
l Run the local-user user-name password password command to configure the user name and
l For the mandatory local CHAP authentication, LCP re-negotiation, and agent authentication,
l If the RADIUS authentication is adopted, see
The user name and password configured on LNS must be consistent with those configured on
LAC.
By default, the local authentication is adopted.
----End

4.4.4 Allocating Addresses to Access Users

Users belong to different domains. The users whose domains are not specified belong to the
default domain. After an L2TP tunnel is set up between an LAC and an LNS, the LNS selects
Issue 01 (2012-04-20)
NOTE
For more information about AAA, refer to the Huawei AR1200 Series Enterprise Routers Configuration
Guide - Security.
password if the local authentication is adopted.
the user name and password for authentication must be set on LNS.
Authentication on LAC
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4.3.5 (Optional) Configuring RADIUS
Side.
4 L2TP Configuration
261