Configuring L2Tpv3 Digest Secret Graceful Switchover - Cisco CRS Configuration Manual

Implementing Layer 2 Tunnel Protocol Version 3
Example:
RP/0/RP0/CPU0:router(config)# l2tp-class class1
Specifies the L2TP class name and enters L2TP class configuration mode.
Step 3 digest { check disable | hash { MD5 | SHA1 } ] | secret { 0 | 7 } password ]
Example:
RP/0/RP0/CPU0:router(config-l2tp-class)# digest secret cisco hash sha
Enables L2TPv3 control-channel authentication or integrity checking.
• secret—Enables L2TPv3 control-channel authentication.
If the digest command is issued without the secret keyword option, L2TPv3 integrity checking is enabled.
Note
• {0 | 7}—Specifies the input format of the shared secret. The default value is 0.
◦0—Specifies that a plain-text secret is entered.
◦7—Specifies that an encrypted secret is entered.
• password—Defines the shared secret between peer routers. The value entered for the password argument must be
in the format that matches the input format specified by the {0 | 7} keyword option.
• hash { MD5 | SHA1}—Specifies the hash function to be used in per-message digest calculations.
◦MD5—Specifies HMAC-MD5 hashing (default value).
◦SHA1—Specifies HMAC-SHA-1 hashing.
Step 4
hidden
Example:
RP/0/RP0/CPU0:router(config-l2tp-class)# hidden
Enables AVP hiding when sending control messages to an L2TPv3 peer.

Configuring L2TPv3 Digest Secret Graceful Switchover

Perform this task to make the transition from an old L2TPv3 control-channel authentication password to a
new L2TPv3 control-channel authentication password without disrupting established L2TPv3 tunnels.
This task is not compatible with authentication passwords configured with the older, CHAP-like
Note
control-channel authentication system.
Cisco IOS XR Virtual Private Network Configuration Guide for the Cisco CRS Router, Release 6.1.x
Configuring L2TP Control-Channel Parameters
159