3com 3031 Instruccion De Instalación

C

HAPTER

 63: C

ONFIGURATION

 

OF

 L2TP

The 

 command only configures search order between called 

number and domain name. In real search, it is certain to search according to full 
username first, and then according to the order configured in this command.

By default, search according to called number before according to domain name.

On configuring AAA authentication on LAC side, it needs to configure local 
username and password on LAC side, if local authentication mode is adopted.

LAC performs user authentication by examining whether remote dial-up username 
and password correspond to local registered username and password, to check 
whether users are legal VPN users. Request for creating tunnel connection can 
only be sent after passing authentication. Otherwise, the user will be diverted to 
other kinds of services.

Concerning user authentication on LAC side, username is VPN user full name; and 
password is VPN user registered password.

These configurations are compulsory on LAC side.

Perform the following configuration in system view.

Perform the following configuration in interface view.

The configured local authentication interface must be the interface of access user. 
By default, local username and password are not configured on LAC side.

Tunnel clearing process occurs when there is no user, or there is failure in network 
or the administrator disconnect the tunnel on his own initiative. Either LAC side or 
LNS side can send request for clearing tunnel initiatively. The side receiving clearing 
request must send acknowledgement (ACK) information, and wait for a certain 
period of time before clearing tunnel, so as to ensure resent clearing request from 
the peer end can be correctly received in case that ACK information is lost. After 
disconnecting tunnel compulsorily, tunnel can be recreated when new users dial 
up.

These configurations are optional on LAC side.

Table 951   Setting user name, password and authentication mode

Set user name and password.

local-user username password { simple | 

Cancel the set user name and 
password.

Enable AAA

Configure authentication 
method list of PPP user

list-name } local

Table 952   Configuring/removing user authentication types

Configure user authentication

 default | list-name 

Remove user authentication