Configuring An Lns - Juniper JUNOSE 11.1.X - BROADBAND ACCESS CONFIGURATION GUIDE 6-4-2010 Configuration Manual

JUNOSe 11.1.x Broadband Access Configuration Guide
2.
CAUTION: You must explicitly assign a router ID to a virtual router rather than using
a dynamically assigned router ID. A fixed ID is required because every time the ID
changes, L2TP must disconnect all existing tunnels and sessions that use the old ID.
If you use a dynamically assigned router ID, the value can change without warning,
leading to failure of all L2TP tunnels and sessions. Also, the router could dynamically
assign a router ID that is not reachable by the L2TP peer, causing a complete failure
of L2TP. You must set the router ID even if you specified a source address in the
domain map or a local address in the host profile.
Related Topics

Configuring an LNS

When you configure an LNS, you can configure it to accept calls from any LAC.
NOTE: If there is no explicit LNS configuration on the router, the UDP port used for
L2TP traffic is closed, and no tunnels or sessions can be established.
To enable an LAC to connect to the LNS, you must create the following profiles:
NOTE: If you remove a destination profile or modify attributes of a host profile, all
tunnels and sessions using the profile will be dropped.
NOTE:
tunnel-server ports before you configure Layer 2 Tunneling Protocol (L2TP) network
server (LNS) support. You use the tunnel-server command in Global Configuration
mode to specify the physical location of the shared tunnel-server port that you want
to configure.
See virtual-router for additional information about the tunnel-server command and
shared tunnel-server ports.
376
Configuring an LNS
Assign a router ID IP address, such as that for a loopback interface, to the virtual
router. This address must be reachable by the L2TP peer.
host1:west(config)#ip router-id 10.10.45.3
virtual-router
ip router-id command
An L2TP destination profile Defines the location of each LAC
An L2TP host profile Defines the attributes used when communicating with an
LAC
If you are using shared tunnel-server ports, you must configure the shared