Configuring An Lns To Grant Certain L2Tp Tunneling Requests - H3C SR6600 Configuration Manual

For more information about the ip pool command, see AAA in the Security Command
Reference.
Follow these steps to configure a local address and address pool:
To do...
Enter system view
Enter virtual interface
template view
Configure the local IP address
Configure the authentication
mode for PPP users
Specify the address pool for
allocating an IP address to a
VPN user, or assign an IP
address to the user directly

Configuring an LNS to Grant Certain L2TP Tunneling Requests

Upon receiving a tunneling request, an LNS determines whether to grant the tunneling
request by checking whether the tunnel name of the LAC matches that configured, and
determines the virtual interface template to be used to create the VA interface.
Follow these steps to configure an LNS to grant certain L2TP tunneling requests:
To do...
Enter system view
Enter L2TP group view
Specify the
virtual
interface
template for
receiving
calls, the
tunnel name
on the LAC,
and the
domain name
The start l2tp and allow l2tp commands are mutually exclusive. Configuring one of
them disables the other one automatically.
The LAC side tunnel name configured on the LNS must be consistent with the local
tunnel name configured on the LAC.
Use the command...
system-view
interface virtual-template
virtual-template-number
ip address ip-address { mask |
mask-length } [ sub ]
ppp authentication-mode
{ chap | pap } [ [ call-in ]
domain isp-name ]
remote address { pool
[ pool-number ] | ip-address }
system-view
l2tp-group group-number
allow l2tp virtual-template
If the L2TP
virtual-template-number
group number
remote remote-name
is not 1
[ domain domain-name ]
If the L2TP
allow l2tp virtual-template
group number
virtual-template-number
is 1 (the [ remote remote-name ]
default) [ domain domain-name ]
Use the command...
4-78
Remarks
—
—
Required
Optional
By default, no authentication
is performed for PPP users.
Optional
By default, address pool 0 (the
default address pool) is used.
Remarks
—
—
Required
Use either command.
By default, an LNS denies all
incoming calls.