H3C Technologies H3C SecPath F5020 - Manual (Page 39)

31
Tasks at a glance
(Optional.) Configuring optional L2TP parameters
• Configuring L2TP tunnel authentication
• Setting the Hello interval
• Enabling session flow control
• Configuring the DSCP value of L2TP packets
• Configuring the VPN for a tunnel peer
• Configuring the TSA ID of the LTS device
Configuring basic L2TP capabilities
Basic L2TP capability configuration includes the following:
• Enabling L2TP—L2TP must be enabled for L2TP configurations to take effect.
• Creating an L2TP group—An L2TP group is intended to represent a group of parameters. This
enables not only flexible L2TP configuration on devices, but also one-to-one and one-to-many
networking applications for LACs and LNSs. An L2TP group has local significance only. However,
the relevant settings of the L2TP groups on the LAC and LNS must match. For example, the local
tunnel name configured on the LAC must match the tunnel peer name configured on the LNS.
• Configuring the local tunnel name—The local tunnel name identifies the tunnel at the local end
during tunnel negotiation between an LAC and an LNS.
To configure basic L2TP capabilities:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable L2TP. l2tp enable By default, L2TP is disabled.
3. Create an L2TP group, specify
its mode, and enter its view.
l2tp-group group-number mode
{ lac | lns }
By default, no L2TP group exists.
Specify the mode as lac on the LAC
side and as lns on the LNS side.
4. Specify the local tunnel name. tunnel name name
Optional.
By default, the device name is
used.
Configuring an LAC
An LAC establishes tunnels with LNSs and forwards packets between LNSs and remote systems.
Configuring an LAC to initiate tunneling requests for a specified
user
This task configures an LAC to initiate tunneling requests to an LNS for a specified user. When the PPP
user information matches the specified user, the LAC considers the PPP user to be an L2TP user and
initiates tunneling requests to the LNS.