Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual page 394

JUNOSe 11.0.x Broadband Access Configuration Guide
7.
NOTE: If you specify a password for the LAC, the router requires that the peer (the
LNS) authenticate itself to the router. In this case, if the peer fails to authenticate
itself, the tunnel terminates.
8.
NOTE: If the LNS does not accept tunnels from unknown hosts, and if no hostname
is specified, the LAC uses the router name as the hostname.
9.
10.
11.
12.
354
Mapping User Domain Names to L2TP Tunnels from Domain Map Tunnel Mode
host1(config-domain-map-tunnel)#preference 5
(Optional) Specify an authentication password for the tunnel.
host1(config-domain-map-tunnel)#password temporary
(Optional) Specify a hostname for the LAC end of the tunnel.
The LAC sends the hostname to the LNS when communicating to the LNS about
the tunnel. The hostname can be up to 64 characters (no spaces).
host1(config-domain-map-tunnel)#client-name host4
(Optional) Specify a server name for the LNS.
This name specifies the hostname expected from the peer (the LNS) when you
set up a tunnel. When this name is specified, the peer must identify itself with
this name during tunnel startup. Otherwise, the tunnel is terminated. The server
name can be up to 64 characters (no spaces).
host1(config-domain-map-tunnel)#server-name boston
(Optional) Specify a source IP address for the LAC tunnel endpoint. All L2TP
packets sent to the peer use this source address.
host1(config-domain-map-tunnel)#source-address 192.0.3.3
By default, the router uses the virtual router's router ID as the source address.
You can override this behavior for an L2TP tunnel by specifying a source address.
If you do specify a source address, use the address of a stable IP interface (for
example, a loopback interface). Make sure that the address is configured in the
virtual router for this domain map, and that the address is reachable by the peer.
Specify a tunnel identification. (The router groups L2TP sessions with the same
tunnel identification into the same tunnel.)
host1(config-domain-map-tunnel)#identification acton
The router groups L2TP sessions with the same tunnel identification into the
same tunnel. This occurs only when both the destination (virtual router, IP
address) and the ID are the same.
Specify the L2TP tunnel type (RADIUS attribute 64, Tunnel-Type). Currently, the
only supported value is L2TP.
host1(config-domain-map-tunnel)#type l2tp