Configuring An Lac; Configuring An Lac To Initiate Tunneling Requests For Specified Users; Configuring An Lac To Transfer Avp Data In Hidden Mode - H3C SR6600 Configuration Manual

To do...
Enter system view
Enable L2TP
Create an L2TP group and
enter its view
Specify the local name of the
tunnel

Configuring an LAC

An LAC is responsible for establishing tunnels with corresponding LNSs for users and
sends user packets to LNSs through the tunnels. Before configuring an LAC, you need to
enable L2TP and create an L2TP group.

Configuring an LAC to Initiate Tunneling Requests for Specified Users

An LAC initiates tunneling requests only to specified LNSs for specified users. You can
specify the users to be serviced and the LNSs that will be connected. Users can be
specified by their fully qualified name or the domain name.
Follow these steps to configure the LAC:
To do...
Enter system view
Enter L2TP group view
Enable the router to initiate
tunneling requests to one or
more IP addresses for one or
more specified VPN users
Up to five LNSs can be configured. The LAC initiates an L2TP tunneling request to its
specified LNSs
acknowledgement from an LNS, which then becomes the tunnel peer.

Configuring an LAC to Transfer AVP Data in Hidden Mode

With L2TP, some parameters are transferred as attribute value pair (AVP) data. To improve
security, you can configure an LAC to transfer AVP data in hidden mode, that is, to encrypt
AVP data before transmission.
Follow these steps to configure an LAC to transfer AVP data in hidden mode:
Use the command...
system-view
l2tp enable
l2tp-group group-number
tunnel name name
Use the command...
system-view
l2tp-group group-number
start l2tp { ip
ip-address }&<1-5> { domain
domain-name | fullusername
user-name }
consecutively in their configuration
4-75
Remarks
—
Required
Disabled by default
Required
By default, no L2TP group
exists.
Optional
The system name of the router
is used by default.
Remarks
—
—
Required
order until it receives an