Configuring Basic L2Tp Capability - H3C SR6600 Configuration Manual

parameter configuration tasks apply to both LAC and LNS and are optional. You may
configure them as needed.
Complete the following tasks to configure L2TP:
Configuring Basic
L2TP Capability
Configuring an LAC
Configuring an LNS
Configuring L2TP
Connection
Parameters

Configuring Basic L2TP Capability

An L2TP group is intended to represent a group of parameters and corresponds to one VPN
user or one group of VPN users. This enables not only flexible L2TP configuration on
routers, but also one-to-one and one-to-many networking applications for LACs and LNSs.
An L2TP group only has local significance. However, you need to ensure that the relevant
settings of the corresponding L2TP groups on the LAC and LNS match. For example, the
local tunnel name configured on the LAC must match the remote tunnel name configured
on the LNS.
L2TP must be enabled for L2TP configuration to take effect. Tunnel names are used during
tunnel negotiation between an LAC and an LNS.
Follow these steps to configure basic L2TP capability:
Task
Enable L2TP
Create an L2TP group
Specify the local name of the tunnel
Configuring an LAC to Initiate Tunneling Requests
for Specified Users
Configuring an LAC to Transfer AVP Data in Hidden
Mode
Configuring AAA Authentication of VPN Users on
LAC Side
Creating a Virtual Interface Template
Configuring the Local Address and the Address
Pool for Allocation
Configuring an LNS to Grant Certain L2TP
Tunneling Requests
Configuring User Authentication on an LNS
Configuring AAA Authentication of VPN Users on
LNS Side
Enabling L2TP Multi-Instance
Specifying to Send ACCM
Configuring L2TP Tunnel Authentication
Setting the Hello Interval
Enabling Tunnel Flow Control
Disconnecting Tunnels by Force
4-74
Remarks
Required
Required
Optional
Required
Required
Required
Required
Optional
Optional
Optional
Optional
Optional