Table of Contents
Advertisement
▀ Implementing IPSec for L2TP Applications
Figure 13. Attribute-based L2TP, IPSec-Encrypted Session Processing
AAA Server
2
1
PDSN
or
HA
AAA
Transform
AAA Cfg.
ISAKMP
5
Policy(ies)
PDSN
or HA
4
Crypto Map
Service
LAC
Service
Source
Ctx.
Destination
Local Ctx.
Table 11. Attribute-based L2TP, IPSec-Encrypted Session Processing
Step
Description
1.
A subscriber session arrives at the system.
2.
The system attempts to authenticate the subscriber with the AAA server.
3.
The profile attributes returned upon successful authentication by the AAA server indicate that session data is to be tunneled
using L2TP. In addition, attributes specifying a crypto map name and ISAKMP secret are also supplied indicating that IP
security is also required.
4.
The system determines that the crypto map name supplied matches a configured crypto map.
▄ Cisco ASR 5000 Series 3G Home NodeB Gateway Administration Guide
146
3
6
7
IPSec Tunnel
9
Set(s)
P
D
N
Ctx.
LNS/Security
Gateway
8
IP Security
OL-25069-03
Advertisement
Table of Contents
