2 configuration notes, 2 configuration notes -5, Configuration notes – Panasonic NN46240-710 User Manual

Page 25

Attention! The text in this document has been recognized automatically. To view the original document, you can use the "Original mode".

Nortel Secure Router 8000 Series

Troubleshooting - VPN___________

1 L2TP troubleshooting

1.2.2 Configuration notes

Item

Sub-item

Description

Configuring

AAA

Configure the
authentication mode

To use the default local authentication, you

need to configure the user name and the
password in the AAA mode.

To use any other authentication, such as
RADIUS, you must configure the RADIUS
authentication.

Configure the domain
and the authentication

mode

You must configure the items for domain user

access.

Configure the address

pool

Configure an address pool on the LNS side.

You need to configure common users to access

an address pool in the AAA mode and
configure domain users to access an address

pool in the domain mode.

Configure the user

name and password

The user names and passwords on the user side,

the LAC side, and the LNS side must be

consistent.

Configuring

Configure the PPP
authentication

After the LCP renegotiation on the LNS side is

executed, you need to configure the PPP
authentication mode on the virtual interface

template. Otherwise, the user cannot pass the

authentication.

Appointment of the

address pool

To configure an address pool for a user, the

number of address pool configured here must
be the same as that configured in the AAA
view.

Configure the MTU

Nortel recommends that you configure the

MTU value as 1450.

Configuring

L2TP

Enable the L2TP

Configure the L2TP only after the L2TP is
enabled.

Source interface of the
tunnel on the LAC side

You can specify the loopback interface,

Ethernet interface, and GigabitEthernet
interface as the source interface of the tunnel.

The name of the tunnel

The name of the tunnel on the LAC side must

be consistent with the name of the remote end
to receive the tunnel on the LNS side.

The authentication of

the tunnel

The configuration for tunnel authentication on

the LAC side must be the same as that on the

LNS side.

The password of the

authentication of the

tunnel

After tunnel authentication is enabled, the
passwords on both the LAC side and the LNS

side must be consistent.

Issue 5.3 (19 January 2009)

Nortel Networks Inc.

1-5