Juniper JUNOSE SOFTWARE 11.2.X - BROADBAND ACCESS CONFIGURATION GUIDE 7-20-2010 Configuration Manual page 392

JunosE 11.2.x Broadband Access Configuration Guide
354
host1(config-domain-map-tunnel)#type l2tp
Specify a medium type for the tunnel. (L2TP supports only IP version 4 [IPv4].)
13.
host1(config-domain-map-tunnel)#medium ipv4
(Optional) Specify a default tunnel client name.
14.
host1(config-domain-map-tunnel)#exit
host1(config-domain-map)#exit
host1(config)#aaa tunnel client-name boxford
If the tunnel client name is not included in the tunnel attributes that are returned
from the domain map or authentication server, the router uses the default name.
(Optional) Specify a default tunnel password.
15.
host1(config)#aaa tunnel password 3&92k%b#q4
host1(config)#exit
If the tunnel password is not included in the tunnel attributes that are returned from
the domain map or authentication server, the router uses the default password.
(Optional) Set the format for the tunnel assignment ID that is passed to PPP/L2TP.
16.
The tunnel assignment ID format can be either only assignmentID or clientAuthId +
serverAuthId + assignmentId.
host1(config)#aaa tunnel assignment-id-format assignmentID
If you do not set a tunnel assignment ID, the software sets it to the default
(assignmentID). This parameter is only generated and used by the L2TP LAC device.
(Optional) Specify whether or not to use the tunnel peer's Nas-Port [5] and
17.
Nas-Port-Type [61] attributes.
When enabled, the attribute is supplied by the tunnel peer. When disabled, the
attribute is not supplied. Use the no version of the command to restore the default,
enable.
host1(config)#aaa tunnel ignore nas-port enable
host1(config)#aaa tunnel ignore nas-port-type disable
(Optional) Set up the router to ignore sequence numbers in data packets received
18.
on L2TP tunnels.
host1(config)#l2tp ignore-receive-data-sequencing
This command does not affect the insertion of sequence numbers in packets sent
from the router.
BEST PRACTICE: We recommend that you set up the router to ignore sequence numbers
in received data packets if you are using IP reassembly. Because IP reassembly might
reorder L2TP packets, out-of-order packets might be dropped when sequence numbers
are being used on L2TP data packets.
(Optional) Disable the generation of authentication challenges by the local tunnel,
19.
so that the tunnel does not send a challenge during negotiation. However, the tunnel
does accept and respond to challenges it receives from the peer.
Copyright © 2010, Juniper Networks, Inc.